Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be914155-73cb-3774-ab10-d749deb2f093.roa
File:                     be914155-73cb-3774-ab10-d749deb2f093.roa (raw, json)
Hash identifier:          H/wcwqhcNyV6k16Cdv2nJlpUz8BorB+pzG9MehQHdvE=
Subject key identifier:   80:EA:B7:1E:A9:BF:E2:8F:7F:73:92:12:8C:C0:E6:6F:08:F5:EA:44
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAE5EC0DB104C12F9EFA6D300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be914155-73cb-3774-ab10-d749deb2f093.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        132.226.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:c0:db:10:4c:12:f9:ef:a6:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=92195898-7717-4052-a509-41fd4045e8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0d:05:f1:39:19:4d:ed:49:3a:5b:6e:5f:fc:
                    29:74:e6:e7:e6:b4:51:fc:f1:21:1f:62:bd:4a:82:
                    4d:24:3e:67:5c:62:35:3c:e8:f0:46:99:35:31:f2:
                    af:b9:54:7e:26:9a:b3:a0:47:ce:47:a1:ef:be:13:
                    ae:2a:3c:90:2a:98:4f:aa:68:f1:74:e8:c3:6e:f0:
                    48:af:65:45:ca:2a:12:b1:19:ce:9a:7d:04:4d:4f:
                    a7:31:08:53:ad:a7:c0:f7:0e:6b:08:bb:cb:ba:68:
                    9a:8d:e1:f6:70:f5:83:fa:38:dd:d5:58:4e:85:86:
                    ae:26:7b:89:4f:cd:76:af:cc:7f:06:8f:62:08:83:
                    73:06:a1:0b:d8:e9:11:4d:2b:a4:3a:22:63:cb:fc:
                    49:00:21:5e:88:f2:fa:38:d6:6b:a3:71:d9:4f:d2:
                    13:a5:1d:a6:f8:11:f9:14:e8:66:c5:7e:99:cf:4c:
                    81:bf:89:c2:4d:cd:bc:53:e6:76:2a:2c:02:76:6a:
                    2c:a3:f3:7f:71:93:bd:06:e3:c1:0b:9c:2f:90:d1:
                    72:75:82:9c:6c:ab:b8:a9:ef:7a:3b:0f:39:2e:0f:
                    2e:53:cc:45:da:4f:d9:aa:f8:7a:02:8f:f4:f6:5c:
                    69:ae:b5:54:fc:7f:40:42:e6:8f:5e:4a:c2:43:d8:
                    8a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EA:B7:1E:A9:BF:E2:8F:7F:73:92:12:8C:C0:E6:6F:08:F5:EA:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be914155-73cb-3774-ab10-d749deb2f093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.226.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:cc:6f:6d:66:51:7c:fd:09:49:e0:24:82:2a:0a:77:65:db:
         e4:55:4e:b0:10:b3:91:2e:20:61:d2:c2:0b:e6:91:e1:ce:7c:
         17:c2:04:2a:50:a8:52:79:e9:9a:ff:56:25:e4:2e:51:80:73:
         0d:40:69:db:8b:1f:9a:64:e4:75:f9:77:ec:01:58:fe:30:29:
         7e:79:a0:ee:b2:af:79:cc:2c:ff:03:ef:e7:ac:d1:24:7f:15:
         8d:78:d7:dc:5d:70:97:63:68:ba:c2:35:f6:1c:05:69:42:5d:
         87:cd:8c:75:1d:c6:b7:cc:85:eb:f6:ab:71:56:40:b0:07:19:
         69:de:1a:45:a6:dd:ea:58:d8:6f:ed:98:b8:58:74:b7:4a:0a:
         ee:8c:cd:73:48:f4:f1:c2:7b:37:1c:16:b0:2e:9d:9a:d2:8e:
         8a:6a:7c:4a:38:b0:dd:2d:b6:70:a6:f6:5f:8a:8d:d1:c3:50:
         9d:b5:0e:09:0f:22:ca:8a:cf:97:be:f9:0b:f9:38:ea:0a:83:
         5c:b5:41:09:f1:6d:f5:96:62:cd:eb:f7:de:5a:ee:3c:65:4f:
         cd:39:91:b1:21:0f:45:ed:8d:a7:7b:96:4b:35:a2:20:71:95:
         d1:d2:28:a5:37:4a:d7:84:f9:f7:47:5f:92:43:4e:9b:b5:47:
         62:dd:98:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:06 2026 by rpki-client