Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/2264f8e0-5c11-3ff0-a91b-36855cd2e850.roa
File:                     2264f8e0-5c11-3ff0-a91b-36855cd2e850.roa (raw, json)
Hash identifier:          ijs70CbK/ECzMxlR5Zdpr4xyNdcTu4YI2q3YGLDQkpw=
Subject key identifier:   3C:83:51:24:94:66:66:06:FD:15:C0:16:4C:1D:6C:27:56:E3:43:CB
Certificate issuer:       /CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58
Certificate serial:       010D0C9F4328584CF2BCEB89EA060D63A2124A00
Authority key identifier: 70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/2264f8e0-5c11-3ff0-a91b-36855cd2e850.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     396423
IP address blocks:        23.143.200.0/24 maxlen: 24
                          2602:290::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:eb:89:ea:06:0d:63:a2:12:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=4cadeffd-a1ad-414f-a66a-8af7c74e7f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:fb:c4:69:45:39:51:e3:e3:38:55:b3:46:36:
                    4e:bc:f1:37:3a:7e:08:70:7c:a6:ef:06:1e:58:e4:
                    aa:f7:95:7f:c0:92:14:95:9f:be:a7:e8:a6:a4:64:
                    62:66:8a:b3:16:e7:fd:2b:d6:28:2c:20:8f:ec:ac:
                    b2:b6:ba:cb:d6:bc:a8:54:ae:ea:b5:ab:82:06:11:
                    c5:04:05:04:7c:07:b7:7e:ce:11:37:a3:5f:3d:e4:
                    29:ac:2b:6e:ba:53:31:59:ae:6b:d0:1c:62:ac:50:
                    9f:3b:15:50:1a:71:eb:0b:47:89:2c:79:d1:f3:ef:
                    22:7c:42:e5:4f:3f:31:91:d6:5c:f7:87:a6:4c:80:
                    fd:4d:f6:b1:9d:f1:f5:bc:6d:3d:0c:64:14:2a:d8:
                    7d:ab:fd:ed:0c:83:7b:b6:68:14:0f:dc:df:85:9c:
                    96:58:e0:59:17:78:59:67:a1:3c:fb:99:80:3f:ce:
                    5b:06:fd:55:57:e5:d7:6f:e1:f0:07:c6:04:61:0e:
                    dd:1d:16:c0:a8:75:3d:e6:9b:16:d4:da:73:d3:07:
                    df:30:e0:17:9b:a5:48:c7:88:5e:a1:ab:45:de:ae:
                    c4:05:16:e5:0d:60:49:41:a1:ce:e5:31:14:f4:65:
                    d1:9a:be:6f:77:2e:ce:0f:ab:18:0c:42:ac:be:9e:
                    cb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:83:51:24:94:66:66:06:FD:15:C0:16:4C:1D:6C:27:56:E3:43:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/2264f8e0-5c11-3ff0-a91b-36855cd2e850.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl

            X509v3 Authority Key Identifier:
                keyid:70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.200.0/24
                IPv6:
                  2602:290::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:a6:2d:e8:9f:ea:61:f2:0a:66:c4:74:a2:5a:5d:fd:21:da:
         f3:e6:18:03:39:df:56:e3:30:9c:2e:1d:a9:52:59:94:52:30:
         e4:b3:3a:34:3b:9e:d0:30:72:4b:93:48:da:43:ed:01:de:f2:
         d5:d8:78:ee:bf:67:8e:28:28:d4:fa:30:10:66:c4:1f:5a:a1:
         79:a2:77:af:39:d1:aa:65:95:03:4a:f3:93:b9:69:e4:fc:58:
         cf:c6:90:aa:15:54:22:8b:d9:46:f1:4f:83:ee:85:31:cc:e4:
         6e:87:36:8a:73:77:51:79:ff:b2:f9:eb:47:2c:4f:67:7c:b9:
         9b:2f:e8:36:34:59:14:7d:f6:92:2f:1a:d6:be:0a:c7:79:40:
         5d:03:61:42:0d:76:5f:54:2d:88:26:e9:9a:a3:56:9e:f7:34:
         b6:54:f7:98:74:4e:0e:3c:73:d6:d3:f7:2c:00:a8:1e:cc:8d:
         60:2d:1f:39:6d:45:97:5b:d6:c7:f9:4e:8e:fd:ff:5f:36:a3:
         e3:4e:e7:68:fb:7c:20:ef:7e:f8:bd:64:a3:79:16:2c:0f:72:
         96:4b:10:26:8e:ed:8d:cb:8e:0b:36:fe:b5:26:2c:9d:8d:83:
         b8:64:e0:0d:82:45:36:8a:a1:ba:3b:1b:ca:23:67:90:41:b8:
         d3:cc:23:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:11:08 2026 by rpki-client