Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bdb8b93-59cd-3fb3-92ca-a79748a47e69.roa
File:                     8bdb8b93-59cd-3fb3-92ca-a79748a47e69.roa (raw, json)
Hash identifier:          C/icu95/siG6luv/EDOhAMrlTbHnqi57gi8wvyAzsxY=
Subject key identifier:   69:2F:9A:9A:EB:68:4D:97:6B:0C:F2:46:5A:61:F2:8E:5D:15:96:CE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CE8813B83535AA710E1EE5800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bdb8b93-59cd-3fb3-92ca-a79748a47e69.roa
Signing time:             Wed 18 Feb 2026 22:02:34 +0000
ROA not before:           Wed 18 Feb 2026 22:02:34 +0000
ROA not after:            Tue 19 May 2026 21:02:34 +0000
asID:                     31898
IP address blocks:        147.224.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:81:3b:83:53:5a:a7:10:e1:ee:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Feb 18 22:02:34 2026 GMT
            Not After : May 19 21:02:34 2026 GMT
        Subject: CN=d86aebc9-72d6-4ffa-94b9-8d9325cd80fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3c:5a:1a:d4:7d:af:b1:f4:b9:71:80:b9:7e:
                    28:db:50:ff:f6:cd:1e:88:80:fe:bd:57:75:02:08:
                    48:1c:c9:8d:b2:5a:ec:05:6e:c6:b8:c1:93:8d:4b:
                    01:ec:50:ef:af:eb:be:56:01:d5:4e:b1:5d:ef:0d:
                    f0:e0:96:73:61:da:db:7e:5f:d5:0a:39:fa:47:61:
                    11:c0:08:b1:31:f1:d3:ce:bf:f8:77:ac:4a:02:a1:
                    36:47:83:5a:d5:a2:e9:2a:85:91:a7:95:79:bc:fa:
                    bb:70:cb:99:48:bc:15:82:f6:2b:8b:3c:a6:63:99:
                    a3:06:0d:a6:a8:78:d3:e6:d3:50:61:7e:0a:15:d2:
                    88:a8:ea:e4:4d:b0:9a:08:dc:25:9e:49:a7:f0:f4:
                    c1:15:eb:e4:93:ac:eb:ac:bf:f2:68:91:96:9b:f9:
                    86:10:01:87:e3:b9:3c:f7:34:a0:8c:e1:63:cb:fc:
                    74:c0:b4:92:a1:b1:2f:39:b8:87:94:51:e4:c2:84:
                    72:6d:28:85:05:58:7b:55:b7:e1:87:2d:b1:99:63:
                    30:97:49:c0:c5:60:09:43:d7:ae:4a:a5:98:90:09:
                    ef:fc:87:1f:4a:30:b4:a3:01:49:06:f7:a5:74:f7:
                    01:53:1a:30:85:b2:e7:3f:19:3a:12:f6:15:6c:da:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2F:9A:9A:EB:68:4D:97:6B:0C:F2:46:5A:61:F2:8E:5D:15:96:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/8bdb8b93-59cd-3fb3-92ca-a79748a47e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.224.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:54:0e:d6:34:9e:52:59:cd:ff:f8:c5:0c:f0:61:4a:80:b5:
         de:fc:8a:57:47:76:59:80:88:53:54:ec:e0:22:1f:c8:27:57:
         df:d4:92:c6:93:9b:02:24:30:4a:91:d1:06:c4:27:38:8c:58:
         bd:21:fa:c4:ea:4b:19:b4:db:30:62:54:60:56:41:c6:f5:c7:
         27:57:fb:92:99:1a:72:c1:22:71:00:4d:9d:e7:6c:fc:d4:19:
         50:a3:8b:74:5b:fe:97:6f:2c:8d:53:4e:de:6e:e2:f6:69:cb:
         d9:60:99:c8:3a:10:ff:d7:1e:dc:c7:7e:b1:03:34:37:c5:be:
         e6:be:f5:77:4c:43:09:2c:75:52:f2:ed:d5:ef:c7:9c:30:6f:
         ae:44:7f:11:3c:bf:af:2a:32:15:37:0b:79:e8:9c:fc:30:78:
         93:58:46:30:62:e2:9c:e9:8d:a5:1e:8a:2c:c6:2e:a7:82:2f:
         d8:e8:0b:ac:0a:ab:55:55:6e:29:1a:92:6a:68:79:ca:e9:ed:
         ac:2e:22:69:ce:1c:1f:14:9e:13:7a:d2:44:53:82:86:2e:f2:
         81:6b:ca:be:2c:f6:68:f1:0c:73:c9:36:fe:dd:12:b4:3a:49:
         4d:b4:62:d3:cc:33:1d:9f:b7:ea:0d:1f:c8:16:00:c5:41:8a:
         6b:80:37:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:25:57 2026 by rpki-client