Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/0f251356-cf96-3213-a9a8-f255012a0362.roa
File:                     0f251356-cf96-3213-a9a8-f255012a0362.roa (raw, json)
Hash identifier:          qBt2brIzhiDL7HBIyQRnGL0bTNWS+Jhc5usVvAEpaQ0=
Subject key identifier:   75:41:D4:62:6E:50:FF:F2:92:FD:96:3A:56:5F:1F:40:35:86:C7:B3
Certificate issuer:       /CN=a2077046-f4ec-47b5-8973-860e9cbddb69
Certificate serial:       010D0C9F4328584CCBA7535140E0E9E80F064B40
Authority key identifier: 65:75:99:FF:A5:CF:FD:81:64:22:CC:79:51:10:9D:3C:D7:62:37:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/0f251356-cf96-3213-a9a8-f255012a0362.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     4508
IP address blocks:        23.175.32.0/24 maxlen: 24
                          155.254.2.0/23 maxlen: 23
                          198.89.188.0/23 maxlen: 23
                          2606:d680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/a2077046-f4ec-47b5-8973-860e9cbddb69.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/a2077046-f4ec-47b5-8973-860e9cbddb69.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:53:51:40:e0:e9:e8:0f:06:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2077046-f4ec-47b5-8973-860e9cbddb69
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=6041558a-ff5a-4de1-98c3-1772fd1e1c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:33:84:88:f5:3b:ae:4a:44:0d:1f:1f:f2:33:
                    eb:7e:df:23:d7:f1:1b:e9:73:48:d3:21:a0:87:45:
                    47:a6:5b:13:54:88:45:b2:8e:71:14:1e:4d:f9:4e:
                    fd:a3:c6:87:9e:00:f8:06:05:cd:76:f0:5e:61:dd:
                    80:ad:b1:0f:e9:18:8c:06:8c:e6:a0:0d:51:33:c0:
                    9a:25:8a:9c:a1:94:7e:aa:0a:48:05:0e:3d:e3:9f:
                    d5:1d:c0:f7:2c:e6:61:ff:0a:96:27:11:f5:58:2b:
                    db:0f:5e:67:a1:8a:4d:34:14:c1:d7:e9:31:19:eb:
                    30:c4:20:92:74:2d:63:17:fe:6f:53:9b:ee:1e:8e:
                    f8:aa:d9:64:f0:c9:49:32:47:23:83:a4:f3:25:a8:
                    26:47:1f:8f:2f:e6:b4:00:e0:96:a4:4d:cb:55:ee:
                    9f:42:4f:f7:b0:b9:49:82:65:90:fc:3f:fe:d3:1e:
                    8c:e2:4f:5b:f8:76:3b:f2:2b:87:66:b6:0b:83:94:
                    d4:5c:67:2a:5b:15:e5:c5:9b:02:a5:de:34:fe:a5:
                    ae:a8:2b:9d:1b:3d:46:8b:12:0c:3e:c6:61:70:72:
                    1b:35:ff:20:50:6d:5a:1d:42:e2:91:3d:5e:ff:92:
                    a6:e5:35:a7:f1:57:d3:a9:b3:97:af:d0:05:86:17:
                    d3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:41:D4:62:6E:50:FF:F2:92:FD:96:3A:56:5F:1F:40:35:86:C7:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/0f251356-cf96-3213-a9a8-f255012a0362.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/a2077046-f4ec-47b5-8973-860e9cbddb69.crl

            X509v3 Authority Key Identifier:
                keyid:65:75:99:FF:A5:CF:FD:81:64:22:CC:79:51:10:9D:3C:D7:62:37:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.32.0/24
                  155.254.2.0/23
                  198.89.188.0/23
                IPv6:
                  2606:d680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:6c:9b:71:41:3e:0c:02:58:0c:78:5d:99:6a:14:ed:d7:88:
         47:fb:db:a3:02:e9:60:0d:7d:86:42:3b:ff:fc:42:b4:22:c2:
         70:70:b8:3e:bd:63:24:33:33:ae:4c:dd:64:26:88:d7:01:11:
         b9:44:24:1e:f9:3b:5a:49:14:c0:3a:b0:cd:31:5c:87:10:5b:
         c4:63:dd:6c:4b:84:07:a2:fc:6c:29:84:6d:8e:b2:fc:ea:c4:
         b6:54:d0:aa:10:55:23:eb:b7:10:6c:3f:63:8e:c1:4c:25:ca:
         a5:02:ee:a4:41:1a:30:77:b8:b6:74:b1:4c:07:01:54:5d:56:
         c8:e1:19:a1:9f:b8:2e:37:bc:a5:45:4d:cf:8d:8c:08:83:94:
         3c:a2:66:69:83:3f:78:15:41:dc:de:67:6d:40:fb:fc:de:70:
         17:f5:40:90:43:04:23:b8:63:83:43:dc:9e:e6:7a:ba:f5:aa:
         97:05:4c:7f:55:e6:30:b2:49:e8:64:54:74:1b:c0:ce:76:98:
         c7:f1:5c:03:75:4a:71:34:dc:e0:bc:93:d8:ba:1f:0d:94:ea:
         72:c4:ce:a1:97:31:0c:b7:47:2d:68:0e:8f:a5:ea:a5:16:12:
         8d:7c:5f:51:67:d8:72:22:42:37:6a:bf:a3:f0:1f:dd:8b:85:
         db:83:78:dc
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEzLp1NRQODp6A8GS0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIwNzcwNDYtZjRlYy00N2I1LTg5NzMtODYwZTljYmRk
YjY5MB4XDTI2MDIwODE0MDA0MVoXDTI2MDUwOTEzMDA0MVowLzEtMCsGA1UEAxMk
NjA0MTU1OGEtZmY1YS00ZGUxLTk4YzMtMTc3MmZkMWUxYzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDOEiPU7rkpEDR8f8jPrft8j1/Eb6XNI0yGg
h0VHplsTVIhFso5xFB5N+U79o8aHngD4BgXNdvBeYd2ArbEP6RiMBozmoA1RM8Ca
JYqcoZR+qgpIBQ4945/VHcD3LOZh/wqWJxH1WCvbD15noYpNNBTB1+kxGeswxCCS
dC1jF/5vU5vuHo74qtlk8MlJMkcjg6TzJagmRx+PL+a0AOCWpE3LVe6fQk/3sLlJ
gmWQ/D/+0x6M4k9b+HY78iuHZrYLg5TUXGcqWxXlxZsCpd40/qWuqCudGz1GixIM
PsZhcHIbNf8gUG1aHULikT1e/5Km5TWn8VfTqbOXr9AFhhfThwIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFHVB1GJuUP/ykv2WOlZfH0A1hsezMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hMjA3
NzA0Ni1mNGVjLTQ3YjUtODk3My04NjBlOWNiZGRiNjkvMGYyNTEzNTYtY2Y5Ni0z
MjEzLWE5YTgtZjI1NTAxMmEwMzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTIwNzcwNDYtZjRlYy00N2I1LTg5
NzMtODYwZTljYmRkYjY5L2EyMDc3MDQ2LWY0ZWMtNDdiNS04OTczLTg2MGU5Y2Jk
ZGI2OS5jcmwwHwYDVR0jBBgwFoAUZXWZ/6XP/YFkIsx5URCdPNdiN/gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hMjA3NzA0Ni1mNGVjLTQ3YjUtODk3My04NjBl
OWNiZGRiNjkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAF68gAwQB
m/4CAwQBxlm8MA0EAgACMAcDBQAmBtaAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAB5sm3FBPgwCWAx4XZlq
FO3XiEf726MC6WANfYZCO//8QrQiwnBwuD69YyQzM65M3WQmiNcBEblEJB75O1pJ
FMA6sM0xXIcQW8Rj3WxLhAei/GwphG2OsvzqxLZU0KoQVSPrtxBsP2OOwUwlyqUC
7qRBGjB3uLZ0sUwHAVRdVsjhGaGfuC43vKVFTc+NjAiDlDyiZmmDP3gVQdzeZ21A
+/zecBf1QJBDBCO4Y4ND3J7merr1qpcFTH9V5jCySehkVHQbwM52mMfxXAN1SnE0
3OC8k9i6Hw2U6nLEzqGXMQy3Ry1oDo+l6qUWEo18X1Fn2HIiQjdqv6PwH92LhduD
eNw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:59:26 2026 by rpki-client