Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/226cee61-823b-3fcd-9e56-be80ae52ed44.roa
File:                     226cee61-823b-3fcd-9e56-be80ae52ed44.roa (raw, json)
Hash identifier:          xkMeUREYEfTnH5CShTa9ZqBehA/QrM4HSvFEsR8S6+Q=
Subject key identifier:   84:60:78:70:52:EC:5F:98:C7:BC:3F:67:58:79:9D:29:18:18:9D:CA
Certificate issuer:       /CN=dc598c19-9d8e-4650-abce-c34c5146591f
Certificate serial:       010D0C9F4328584D2644C7ED3F97B6BBA2DBC460
Authority key identifier: 64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/226cee61-823b-3fcd-9e56-be80ae52ed44.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     28753
IP address blocks:        172.85.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:c7:ed:3f:97:b6:bb:a2:db:c4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc598c19-9d8e-4650-abce-c34c5146591f
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=1a6dbc59-7ec2-46d7-a3cd-7e2ccd2dbe8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:bb:e6:38:3e:92:2d:44:07:17:3d:df:56:
                    26:91:30:cf:ea:15:0a:a7:38:9a:d9:6f:17:5a:0d:
                    2a:b9:e9:ea:80:39:28:3d:d7:19:17:95:2a:a1:f4:
                    63:dc:37:67:4a:6c:0a:ae:d3:6d:cb:00:c0:d5:92:
                    f9:fa:98:f1:42:c9:4d:28:0a:d4:28:18:57:20:d1:
                    8d:30:fc:b9:5b:60:9a:4a:bc:a0:e8:45:e0:24:b3:
                    e2:e0:81:50:54:f7:b8:f0:f4:92:4b:1a:b9:e3:19:
                    7a:2a:1b:ef:41:f8:64:76:9f:61:05:0c:db:11:93:
                    1b:57:12:52:ab:13:90:84:d5:83:62:3c:85:b5:be:
                    29:a1:14:55:73:c2:7c:1a:a1:88:fb:e7:dd:e8:75:
                    f7:40:b0:e7:5e:75:45:02:e7:e3:5b:f8:8e:51:86:
                    fa:ba:ff:8c:5a:8b:ab:5a:18:dd:ba:01:c9:71:cb:
                    a6:0e:e8:06:f4:0f:99:ed:b5:d9:78:39:ae:d8:34:
                    91:96:b8:ba:52:6f:7d:a3:71:f2:69:e4:6a:9b:81:
                    a5:5b:d2:0c:18:1b:06:1f:4a:96:2a:e3:58:9e:e9:
                    d4:4b:1f:55:b1:dc:62:83:a3:8c:cd:72:0b:8b:ba:
                    b3:cd:6e:73:d8:64:6a:02:d1:6f:ac:96:c0:22:28:
                    3a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:60:78:70:52:EC:5F:98:C7:BC:3F:67:58:79:9D:29:18:18:9D:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/226cee61-823b-3fcd-9e56-be80ae52ed44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f/dc598c19-9d8e-4650-abce-c34c5146591f.crl

            X509v3 Authority Key Identifier:
                keyid:64:9C:48:23:F8:20:35:C3:39:FD:F0:C6:5A:BD:D0:46:CD:81:FA:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/dc598c19-9d8e-4650-abce-c34c5146591f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.85.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:42:9a:61:1b:24:10:c2:85:77:9b:35:aa:54:89:12:4c:28:
         f5:a4:35:76:e7:f9:16:08:17:1c:a6:c8:cc:4f:36:81:a8:ac:
         82:c8:2e:9c:f6:23:d9:4d:db:8e:00:e9:84:19:55:b3:2e:c0:
         0a:f6:a1:58:47:21:1d:9a:ef:8f:81:fe:89:68:11:9c:f0:f8:
         11:48:fe:a2:5a:4c:b0:68:7d:c3:cc:fd:1b:ce:76:3b:97:76:
         1e:6b:07:9a:c7:2a:55:93:9d:63:e1:44:80:f6:d7:42:6a:be:
         e5:e6:21:65:01:4c:c3:e6:c4:45:56:2a:b6:11:03:ab:f7:6c:
         f0:91:c7:a0:19:d0:fe:c2:5c:dd:89:a2:01:c3:ed:d8:ba:7f:
         08:77:a3:f3:a1:47:42:15:01:83:58:72:2e:8f:d4:b9:d0:c0:
         82:28:ac:21:a0:dd:f9:64:60:37:2b:7f:88:3e:8e:85:a1:9e:
         67:c7:4e:95:99:9f:cd:b0:b2:e3:ba:08:8f:8a:25:4b:55:d6:
         aa:97:93:c7:74:42:75:52:60:db:77:73:a5:be:f5:ac:47:6f:
         fe:3d:ea:ab:48:85:d1:e7:6a:ed:72:05:2f:cf:46:c7:75:ef:
         07:54:d4:9b:75:28:bf:27:34:99:e8:43:07:07:36:ef:76:17:
         85:a1:3c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:56 2026 by rpki-client