Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/eff67105-f705-3af7-ae6b-82a1033011ba.roa
File:                     eff67105-f705-3af7-ae6b-82a1033011ba.roa (raw, json)
Hash identifier:          0Mx+EJN2l3m2ekEIJ1KJo9xfcpTZNN54u23qJvo9qR0=
Subject key identifier:   D8:2A:D3:71:5E:17:F8:45:29:38:24:92:31:EE:0F:95:FA:AD:AB:26
Certificate issuer:       /CN=3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d
Certificate serial:       010D0C9F4328584D386A4EBB4B741E95ECB1F0C0
Authority key identifier: D8:9E:DC:D7:20:00:0E:AC:D1:C6:40:9B:9C:68:96:80:C9:62:2B:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/eff67105-f705-3af7-ae6b-82a1033011ba.roa
Signing time:             Thu 19 Mar 2026 13:00:41 +0000
ROA not before:           Thu 19 Mar 2026 13:00:41 +0000
ROA not after:            Wed 17 Jun 2026 13:00:41 +0000
asID:                     401285
IP address blocks:        209.182.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:38:6a:4e:bb:4b:74:1e:95:ec:b1:f0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d
        Validity
            Not Before: Mar 19 13:00:41 2026 GMT
            Not After : Jun 17 13:00:41 2026 GMT
        Subject: CN=c94dc101-d828-45af-8faa-c716e31096e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:18:cc:e6:4d:60:c9:0d:f4:65:b6:c9:9a:07:
                    f4:a1:04:bb:19:ae:2b:1a:40:c3:a1:8a:98:2a:c6:
                    df:38:3e:47:9a:f3:0e:34:ee:a4:ed:b7:53:95:6c:
                    9f:6b:ec:51:07:03:0f:5f:0d:71:15:3f:9e:10:ac:
                    08:ec:8b:c7:e1:98:2d:65:ca:85:10:de:09:fe:43:
                    5d:1b:37:ae:9c:a5:71:ba:c1:5e:36:f2:80:49:69:
                    83:b8:a1:fb:8a:e1:0e:ab:34:bf:ae:b7:6e:c6:23:
                    f7:49:d7:3b:05:30:d2:fd:56:a8:6a:21:fb:fa:0a:
                    bf:8a:9c:25:bf:5d:b3:9b:cf:78:4e:7c:e0:6d:e4:
                    b6:f1:40:a4:fd:fc:03:a8:ce:38:fb:01:1d:c4:14:
                    4c:25:69:00:f6:07:b2:f3:1e:a6:fa:5a:d0:85:cf:
                    86:d1:32:5c:27:f2:60:7e:75:a6:bd:03:ad:c6:30:
                    a3:f3:63:60:c8:33:1b:b1:e0:c2:67:92:68:49:d3:
                    f5:31:5f:28:c6:ab:55:a4:f7:c7:12:05:8b:46:f2:
                    7a:96:35:4d:6b:3a:3e:2a:01:0e:44:56:54:b3:8f:
                    3e:93:d1:50:e0:ce:e5:2e:b8:71:27:5f:e1:76:ba:
                    8e:84:67:a4:71:f5:16:bd:6e:fd:06:89:52:ef:23:
                    eb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2A:D3:71:5E:17:F8:45:29:38:24:92:31:EE:0F:95:FA:AD:AB:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/eff67105-f705-3af7-ae6b-82a1033011ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.crl

            X509v3 Authority Key Identifier:
                keyid:D8:9E:DC:D7:20:00:0E:AC:D1:C6:40:9B:9C:68:96:80:C9:62:2B:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c8b6c58-b951-4ec8-9ffb-3ec1a63cd61d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:44:ae:d9:47:f6:a3:93:87:f8:67:fd:39:be:c5:51:fa:94:
         76:6b:8c:54:0c:b5:99:6e:02:2d:5b:6e:26:e1:5a:1c:8c:a7:
         64:d6:01:0d:21:8f:c2:2f:dd:70:5a:ee:65:fd:03:ca:c9:d2:
         74:f3:fe:ff:b0:7c:d0:4c:11:28:50:45:f1:7d:e3:70:b4:9c:
         fd:a8:a9:d4:66:13:b8:49:d1:2b:55:03:36:2b:4c:e9:d7:0d:
         17:8f:73:d5:7e:22:5a:89:f8:db:58:f5:51:26:d2:76:12:0c:
         4f:93:f0:65:54:2e:ae:f4:a4:e6:06:29:a4:50:48:ea:4d:b5:
         49:d5:48:9d:5d:0c:8b:5c:c2:78:a1:5f:e5:58:cd:1c:12:4f:
         4f:94:4d:f8:c2:08:70:1a:8e:e0:71:67:74:07:9a:68:b7:c0:
         07:ac:b2:50:2e:2d:bb:9e:e2:56:c6:84:13:c0:f6:c5:45:c1:
         78:c0:77:c1:53:00:a8:af:34:5d:1b:14:05:2d:97:07:01:21:
         e9:63:3a:08:46:dc:58:6c:5e:14:55:6e:b2:f8:1c:13:cb:00:
         0a:13:82:c9:24:21:67:00:8f:b8:3c:e5:a8:62:e1:d0:f4:1e:
         20:c1:03:ba:f1:53:9d:cc:02:09:72:b4:f8:ed:12:6d:a4:7d:
         ff:3e:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:17:52 2026 by rpki-client