Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e2850cbe-33eb-3887-8f49-a2f89c80ff3b.roa
File:                     e2850cbe-33eb-3887-8f49-a2f89c80ff3b.roa (raw, json)
Hash identifier:          6qGp7RtzEC+PwMoxl0uW4LkQv753RYV+F7QnbGtOIwU=
Subject key identifier:   6D:19:D5:DF:2D:DD:80:0B:FE:18:C7:A2:AF:70:45:79:05:0F:D4:AE
Certificate issuer:       /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial:       010D0C9F4328584CAE5E55236FBEFC8724C43320
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e2850cbe-33eb-3887-8f49-a2f89c80ff3b.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     31898
IP address blocks:        64.181.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:5e:55:23:6f:be:fc:87:24:c4:33:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=17d4774a-d0d5-4e7f-93e9-434ec4e52513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5b:a1:e8:c2:db:00:16:a0:00:ff:d9:62:68:
                    d5:db:a3:6c:ab:10:d1:2a:ef:a1:a1:a6:30:e5:1e:
                    85:f0:0d:06:2d:0a:b7:d9:7a:8b:0a:79:4f:ea:3c:
                    2f:15:d3:73:7b:14:71:9a:3f:29:d7:73:02:04:db:
                    14:02:03:c3:5e:66:ba:ea:26:75:88:8c:da:6c:d7:
                    67:b0:38:28:b1:70:c2:93:13:6f:e1:08:d8:d3:77:
                    d4:c1:43:25:33:c8:62:ba:72:36:ed:5e:cb:7f:c4:
                    b4:1e:ee:18:6a:1f:f5:2d:b9:31:06:7d:fc:5f:79:
                    0a:ca:43:66:ec:9c:f8:9f:2c:6a:d8:6b:c2:55:54:
                    68:fb:33:65:fb:bb:b3:65:00:0f:f4:73:9c:53:94:
                    1d:2e:73:ca:17:9b:a7:ed:a2:fb:75:9d:06:50:17:
                    1a:ca:18:bd:96:55:71:70:6d:58:7f:70:47:a6:70:
                    7c:b7:2a:71:36:43:ca:ce:32:bb:59:c3:7e:21:0a:
                    fe:0e:56:03:ef:53:94:20:0c:e9:5f:8a:88:7c:39:
                    aa:bb:fc:26:54:f4:95:c8:b9:39:f5:58:19:98:df:
                    e1:d6:1c:5e:9a:28:86:19:b4:d3:6c:7b:3d:23:d2:
                    d3:fe:29:0c:c7:51:47:c2:b5:5a:75:21:d3:80:23:
                    87:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:19:D5:DF:2D:DD:80:0B:FE:18:C7:A2:AF:70:45:79:05:0F:D4:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e2850cbe-33eb-3887-8f49-a2f89c80ff3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl

            X509v3 Authority Key Identifier:
                keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.181.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:6c:1d:34:43:a7:35:d8:4c:c0:7f:37:eb:28:f2:0f:86:f6:
         ff:c7:db:95:db:25:7e:bb:d3:35:63:7b:fc:23:d6:da:bd:ac:
         b1:f5:b9:35:60:f7:ae:b8:8e:16:77:8f:94:5e:94:97:89:6d:
         3c:9d:55:e1:db:61:a8:ea:2d:a6:8f:d1:31:0e:b2:d5:15:02:
         44:48:83:85:54:4c:fe:0b:d0:4e:cc:ae:5e:eb:1a:c5:e1:7e:
         d9:ea:91:62:f5:36:cf:9c:ab:ff:66:f8:8e:7f:a7:14:48:d8:
         3c:60:91:fa:e6:0b:92:d5:d9:e3:de:cd:c2:56:09:7c:96:ef:
         5c:9b:b8:26:bd:a7:b5:ae:c0:42:17:ea:0e:4c:c9:d0:1b:64:
         a6:e7:8d:b9:58:ed:98:b8:5a:be:e9:a1:12:f8:e9:28:84:64:
         b3:d6:e4:12:4f:4b:3e:5b:9a:b1:ad:20:52:89:fb:60:33:1b:
         cd:3f:3c:0d:de:4f:95:e0:4e:c1:0c:73:52:2c:54:83:d2:8d:
         e5:91:70:d0:bf:0e:2d:fc:9b:d3:33:03:01:84:09:42:bc:2e:
         2e:11:2c:14:79:93:d0:04:4e:5c:03:f2:85:b1:ef:73:a9:0b:
         7e:b3:82:18:75:18:3d:94:27:92:b8:ef:ba:1f:a0:7a:ae:94:
         4d:40:06:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:42 2026 by rpki-client