Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/84c496c2-2b5a-3651-8bdf-822f5d6f1784.roa
File:                     84c496c2-2b5a-3651-8bdf-822f5d6f1784.roa (raw, json)
Hash identifier:          8X0zkodFfKY/SRFoZ+UEf0zT06bdvQAKupWu+3rzWHw=
Subject key identifier:   70:DE:28:AB:5B:BD:20:5E:BD:F9:F3:15:A6:85:4E:E9:BA:2F:09:DC
Certificate issuer:       /CN=eb6a308e-64bb-4558-9b03-6b4c190d86fe
Certificate serial:       010D0C9F4328584CBDB1FFC07FA375A54D51E1C0
Authority key identifier: 82:D6:3E:6A:B5:BA:0C:E7:18:E2:5B:46:CC:81:C0:7D:9B:21:AB:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/84c496c2-2b5a-3651-8bdf-822f5d6f1784.roa
Signing time:             Tue 03 Feb 2026 14:00:39 +0000
ROA not before:           Tue 03 Feb 2026 14:00:39 +0000
ROA not after:            Mon 04 May 2026 13:00:39 +0000
asID:                     63473
IP address blocks:        170.205.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/eb6a308e-64bb-4558-9b03-6b4c190d86fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/eb6a308e-64bb-4558-9b03-6b4c190d86fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 23 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:bd:b1:ff:c0:7f:a3:75:a5:4d:51:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb6a308e-64bb-4558-9b03-6b4c190d86fe
        Validity
            Not Before: Feb  3 14:00:39 2026 GMT
            Not After : May  4 13:00:39 2026 GMT
        Subject: CN=6d931bd6-2cd9-45c1-94e5-69b8076bff96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:d8:cf:96:23:bf:55:80:84:2b:be:a8:e8:
                    a8:e8:90:5c:45:79:c5:4a:d2:3a:ce:1c:78:c7:f1:
                    4f:be:6f:7d:c4:22:59:73:69:27:8f:dd:1c:df:bc:
                    a2:09:17:d0:2a:81:90:7a:4f:8c:ba:fd:f2:a4:6f:
                    4b:4c:d7:b6:93:22:12:2e:e0:6e:f1:92:ac:0e:9a:
                    6c:34:f6:3b:f4:92:56:b1:05:84:22:5b:5f:b9:5e:
                    07:78:e8:87:5d:fa:6b:e4:83:74:80:c3:5a:7d:a3:
                    49:01:91:9a:45:b6:c1:00:e7:8a:43:ae:9b:15:ba:
                    39:79:e8:f8:81:6b:62:50:b2:7d:52:91:4b:14:22:
                    3f:e5:aa:7c:c9:26:db:e9:2c:9d:f6:4c:ba:92:4b:
                    ca:7c:bf:cf:95:5a:76:b4:a4:52:22:5f:d8:55:3b:
                    ca:8d:03:31:da:6c:8b:61:91:f7:d7:20:a1:2c:33:
                    9b:05:d8:0a:c7:6d:91:c0:81:a4:f1:44:66:5d:88:
                    fb:08:a6:59:51:3d:a7:88:42:fd:e2:be:6a:79:b5:
                    67:27:bc:84:ac:85:06:18:89:0f:16:d8:fe:db:50:
                    4e:e2:ef:8b:df:48:51:8c:63:d7:37:ec:1c:63:e0:
                    93:c4:f2:f3:63:4d:93:41:5d:cf:e1:df:16:0b:65:
                    be:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:DE:28:AB:5B:BD:20:5E:BD:F9:F3:15:A6:85:4E:E9:BA:2F:09:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/84c496c2-2b5a-3651-8bdf-822f5d6f1784.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe/eb6a308e-64bb-4558-9b03-6b4c190d86fe.crl

            X509v3 Authority Key Identifier:
                keyid:82:D6:3E:6A:B5:BA:0C:E7:18:E2:5B:46:CC:81:C0:7D:9B:21:AB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/eb6a308e-64bb-4558-9b03-6b4c190d86fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:7d:0c:31:df:3f:27:da:56:f0:93:31:15:ea:ee:85:f9:1b:
         ac:53:4c:a3:0a:eb:d0:63:9f:ae:a2:13:c6:14:61:b7:ab:e7:
         b2:d3:13:d7:e4:de:f1:3e:bb:95:f6:d5:04:bf:eb:7e:0b:ad:
         77:40:14:bd:7b:f2:60:ca:b2:13:8d:d4:ab:aa:a2:a2:c0:c6:
         48:9c:65:57:6d:0c:6e:5d:0b:87:d7:61:07:f6:0e:97:38:fa:
         3f:af:3b:0e:60:8b:f5:e2:00:fd:1f:81:35:68:91:07:3a:0c:
         37:b1:1c:49:85:6e:b0:bd:88:20:85:b6:2a:bf:c8:e6:18:e1:
         34:75:cc:f7:0c:ec:56:58:1d:ee:b3:2c:d6:b5:69:fb:56:e1:
         b3:6e:10:44:43:ca:36:f5:02:95:48:90:30:1a:f0:a9:47:b5:
         92:00:a7:26:a1:9c:92:36:7f:7e:cc:05:10:9f:d3:1f:49:cd:
         86:d6:56:57:fa:bf:d9:35:0b:17:ea:91:13:24:f9:d8:5d:6e:
         b8:0f:86:ba:11:e0:00:c4:14:14:c6:e0:b5:36:fc:62:89:c4:
         9d:d9:64:0a:c2:e8:1e:2c:c4:2c:c3:60:e5:14:cb:1f:c2:e1:
         83:58:92:21:f2:eb:df:89:03:ce:88:d0:00:ac:0c:1b:c7:e8:
         44:42:a6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 05:56:32 2026 by rpki-client