Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22dda3a3-27aa-31c6-a458-cd6aaeceaf87.roa
File:                     22dda3a3-27aa-31c6-a458-cd6aaeceaf87.roa (raw, json)
Hash identifier:          2pqTj3ISzxqhZagwntWEUsdFuk4YUbJdt/lwKo55Cnk=
Subject key identifier:   D9:04:7F:0F:88:3B:A4:87:0C:27:2E:E1:DC:C2:0F:A8:79:CC:C4:E5
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CACF1CA1645E208B3A30B1380
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22dda3a3-27aa-31c6-a458-cd6aaeceaf87.roa
Signing time:             Wed 28 Jan 2026 14:00:36 +0000
ROA not before:           Wed 28 Jan 2026 14:00:36 +0000
ROA not after:            Tue 28 Apr 2026 13:00:36 +0000
asID:                     31898
IP address blocks:        167.126.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ac:f1:ca:16:45:e2:08:b3:a3:0b:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 28 14:00:36 2026 GMT
            Not After : Apr 28 13:00:36 2026 GMT
        Subject: CN=04366406-9dac-404c-af2b-5450ecbb2480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:51:fb:2f:54:33:15:a6:bf:69:6e:7e:5e:
                    b2:88:14:cf:fb:6d:13:e3:db:c6:ad:94:66:42:e9:
                    99:26:d2:46:da:ec:22:03:f1:3a:65:1f:60:4e:53:
                    d0:9e:a7:37:05:7c:20:84:ac:2e:59:24:3d:3e:0a:
                    08:14:5c:c1:11:8d:d7:5e:21:8e:c0:2c:2f:88:02:
                    96:da:f9:89:24:c1:4b:16:18:b2:e4:a4:57:ec:f0:
                    2a:f5:d0:7d:8e:12:b4:76:a0:e1:15:4f:03:a7:6e:
                    c4:e3:6a:33:a3:d2:29:c6:b7:92:ca:e2:5d:22:1a:
                    01:7a:23:80:d3:c4:14:15:a5:78:db:d1:86:d4:f6:
                    3a:c7:7d:d3:68:45:65:a0:d5:34:e1:28:af:9a:d8:
                    a2:2c:29:5a:ba:29:26:3f:8a:65:84:f6:f9:7f:90:
                    a6:b0:83:8b:7d:59:5b:0b:00:ac:5e:d7:d2:d6:e0:
                    91:a0:e3:0c:75:42:8f:15:0b:18:93:e8:df:f4:50:
                    80:34:eb:c8:ea:4b:3f:18:a9:07:aa:46:5d:e7:cd:
                    b2:56:e7:f1:80:aa:b4:1b:33:f4:f2:84:d6:d0:35:
                    bc:16:f9:f9:59:f5:00:ef:a2:eb:92:6c:bd:22:62:
                    ad:5b:a6:26:e3:d9:0e:c9:e0:72:84:e2:99:96:8c:
                    8a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:04:7F:0F:88:3B:A4:87:0C:27:2E:E1:DC:C2:0F:A8:79:CC:C4:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/22dda3a3-27aa-31c6-a458-cd6aaeceaf87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.126.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d2:b0:7e:ac:30:dd:82:ae:89:db:a3:3e:0c:53:af:90:d1:
         c8:83:4d:f2:8f:74:97:2b:f7:fc:0f:da:79:81:84:6c:2a:db:
         8f:b1:83:b2:7a:0a:01:fe:6b:de:99:e4:7e:79:fc:b1:c5:69:
         c3:b0:ed:52:a9:0f:8e:b1:05:32:8d:9a:b5:1e:b6:80:68:7e:
         d6:d7:8b:87:f2:c3:df:6e:da:d4:50:9c:0b:47:16:38:61:5b:
         67:f7:11:e5:33:95:7f:9a:da:d6:9b:7b:f9:3b:b3:ae:2d:16:
         6d:3c:94:8b:3f:d2:73:93:a2:21:76:28:ce:f2:f2:15:40:04:
         f6:a4:89:6c:97:05:40:91:ba:c5:a2:4e:82:d1:83:c7:7a:e9:
         51:fb:48:40:a7:14:87:a5:8a:85:ef:a6:8a:db:5c:e0:5e:c3:
         87:b9:31:e1:7a:28:0d:81:3e:46:9c:cf:a6:12:01:d3:cb:1f:
         d9:ba:a8:2f:f1:a1:5d:3a:21:37:ae:d2:7b:5a:f9:e4:e2:cf:
         0f:5e:2d:66:ee:41:82:d1:81:7d:50:fd:e8:36:61:7a:fa:ea:
         43:bb:27:12:12:ae:04:e9:97:95:ed:e0:1c:a9:f8:20:30:8f:
         39:75:d1:73:1c:5f:dd:25:91:b6:41:73:63:67:24:74:fe:7b:
         ee:9a:9b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:28:05 2026 by rpki-client