Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/412dc3c0-2791-366f-afa1-291c038135b9.roa
File:                     412dc3c0-2791-366f-afa1-291c038135b9.roa (raw, json)
Hash identifier:          svlvoUSPnDgv79rzOScoVmjiJWlv6M4BOpm+8lxIwZI=
Subject key identifier:   C1:1A:7A:20:C7:D6:C1:FA:12:40:88:2F:3F:29:71:0F:EF:09:D7:BF
Certificate issuer:       /CN=c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde
Certificate serial:       010D0C9F4328584CE4C7741630B6B7B89A6C9980
Authority key identifier: 81:DE:FC:06:1A:2C:35:27:26:BA:55:1A:1F:45:9F:4E:75:D4:C1:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/412dc3c0-2791-366f-afa1-291c038135b9.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     396982
IP address blocks:        156.77.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:74:16:30:b6:b7:b8:9a:6c:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=ae516c6b-f360-45c6-876c-7ea7948d48fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f5:a0:bf:ab:f6:87:ea:f5:45:ed:8b:93:91:
                    bc:e7:08:6d:36:33:1c:e6:14:28:05:30:c5:23:13:
                    10:39:d3:14:ec:53:a7:0a:81:8c:3f:4e:00:63:3a:
                    b2:17:b0:03:22:c4:2e:80:0b:7d:ff:7d:5f:36:60:
                    83:58:02:fc:ed:df:4c:ae:08:c6:b1:a7:18:dc:d4:
                    26:d0:96:f2:8d:da:c8:20:92:cf:a6:50:03:83:27:
                    05:89:5c:2c:d7:92:f2:b3:10:83:b0:54:32:5d:c4:
                    ca:e8:03:8d:2a:b8:18:32:89:94:27:99:41:9a:10:
                    e1:20:8b:cc:c0:4e:66:0f:d0:c9:70:12:1d:ec:31:
                    d2:47:1a:42:3b:f7:27:06:c1:44:d1:ae:c8:26:11:
                    37:3e:0b:51:95:89:ab:e7:6f:88:60:b9:f2:8f:d0:
                    86:ea:65:20:8b:89:18:05:80:8e:21:b5:e1:ed:42:
                    14:9e:43:21:f9:94:09:45:dd:26:24:c8:39:e2:ee:
                    26:92:bf:99:3a:92:01:48:5e:2f:8c:7f:32:29:27:
                    2d:21:ec:69:fd:f0:b2:87:41:8c:78:b9:f5:7d:23:
                    a7:9d:9f:e9:9a:9b:de:a9:02:7e:f2:f7:17:3d:d3:
                    33:98:b0:a1:a0:48:d6:08:f7:a4:93:bc:19:69:fb:
                    96:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1A:7A:20:C7:D6:C1:FA:12:40:88:2F:3F:29:71:0F:EF:09:D7:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/412dc3c0-2791-366f-afa1-291c038135b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.crl

            X509v3 Authority Key Identifier:
                keyid:81:DE:FC:06:1A:2C:35:27:26:BA:55:1A:1F:45:9F:4E:75:D4:C1:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c56f4b41-8fdf-4a4e-b6cf-7b737d0dbfde.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.77.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:84:3a:f1:48:3f:49:06:b6:8d:94:35:25:97:a9:19:2d:ea:
         f1:2f:18:7a:6c:42:86:c9:01:6b:d6:46:cb:3e:75:3e:f4:12:
         17:46:ba:8f:d9:63:59:0a:83:37:bd:f4:6b:69:58:6a:75:cd:
         a6:57:fb:ab:f2:32:35:d0:39:c9:e7:e0:51:70:d1:d8:94:1e:
         f5:6f:c4:e2:da:b0:08:57:8a:6b:9d:69:df:c9:ed:3c:af:5f:
         f8:2e:59:74:08:25:cf:6d:fb:61:67:55:6e:ff:4d:29:99:a2:
         96:bf:d2:6a:17:9e:2b:39:53:9f:53:68:c8:39:ce:b3:e8:78:
         d5:e0:6a:08:eb:9e:28:49:e2:62:da:d4:56:56:24:c0:4b:7d:
         eb:5c:12:a7:4d:90:65:8d:e3:e4:d7:d4:f6:52:c5:de:72:53:
         fe:db:e6:5a:12:b4:9b:77:4a:d7:1e:b5:01:55:49:e2:24:10:
         c0:41:c1:2b:af:71:f3:ce:b2:aa:ad:0c:61:d8:d9:aa:1c:f5:
         c7:01:3c:90:a9:8a:ef:49:a5:9f:cf:dc:d9:24:34:27:ca:ab:
         3a:b7:39:c8:57:40:b6:82:c1:65:21:da:4e:de:22:8b:dc:2f:
         4e:a1:18:fd:33:bd:8b:7b:f9:df:f1:9a:a3:b9:a7:a0:c7:4f:
         d9:0b:d7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:01:56 2026 by rpki-client