Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/c247b3ff-276b-3115-bfe5-d2984aaf0719.roa
File:                     c247b3ff-276b-3115-bfe5-d2984aaf0719.roa (raw, json)
Hash identifier:          3oC3YEEepr9rEQZWv2I1icJKIIVcwEvFOCeOahkyhZs=
Subject key identifier:   86:A7:8B:14:30:BA:CC:85:A8:9B:EB:8A:5C:C7:B2:B0:42:47:A9:63
Certificate issuer:       /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
Certificate serial:       010D0C9F4328584CEA5CF05ED7211676E1B17A80
Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/c247b3ff-276b-3115-bfe5-d2984aaf0719.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     32595
IP address blocks:        23.172.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:f0:5e:d7:21:16:76:e1:b1:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=ba3d1059-b8d3-4f8d-baba-a9442350dba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:76:fa:b0:cc:2d:ec:b4:94:45:ca:80:ad:e0:
                    e6:73:85:33:8a:94:b2:53:28:d5:d7:00:75:a7:91:
                    90:64:67:75:fb:ab:01:6a:06:a4:46:ac:a6:7d:80:
                    49:d4:0c:3a:9f:e8:65:5b:83:f3:29:70:60:e9:31:
                    8a:d3:c6:68:12:52:cc:cd:9d:b1:70:e9:fb:50:c9:
                    04:a3:81:c7:1e:9f:f1:2a:e8:93:f0:90:a7:5f:df:
                    c2:9b:50:41:66:89:53:4f:c5:61:c8:4b:18:fc:02:
                    b1:58:6c:a2:72:42:df:49:f4:68:b1:b4:a8:57:b4:
                    d3:d3:c0:40:1a:f5:9a:ee:80:9b:e3:1b:ef:32:b9:
                    71:f5:5b:1d:5c:23:e6:d2:41:ca:19:8c:5f:d1:2b:
                    7f:23:2e:7b:54:10:3a:28:d2:81:ff:28:8c:52:6c:
                    d9:11:c0:66:a7:4a:3f:18:60:f2:ea:91:f6:75:ff:
                    9d:a3:c0:e2:94:a1:c0:63:69:4e:f8:aa:0d:49:44:
                    69:f1:3b:14:8b:9f:25:db:05:70:84:89:b1:fe:c1:
                    78:8d:99:ea:8f:54:20:11:83:ca:b6:15:c0:9b:01:
                    de:dd:24:c0:9b:a4:9e:8c:94:f6:24:a7:7f:fa:75:
                    f1:7b:43:11:08:4d:cb:c5:75:a5:14:54:f0:b7:96:
                    ca:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A7:8B:14:30:BA:CC:85:A8:9B:EB:8A:5C:C7:B2:B0:42:47:A9:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/c247b3ff-276b-3115-bfe5-d2984aaf0719.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl

            X509v3 Authority Key Identifier:
                keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:b6:94:7e:21:c7:db:37:cb:dd:78:e2:11:47:ec:0b:20:f8:
         dd:9e:01:6b:a9:08:71:69:7a:5c:d4:3d:d3:66:11:86:4e:c9:
         5e:98:e2:e8:bf:b0:f0:69:86:ce:5c:d8:59:a5:f2:33:d0:08:
         ca:cf:8a:5d:0a:84:7a:a4:53:79:e8:8a:41:37:b3:6b:67:7a:
         c3:d5:f4:7e:a3:90:a7:20:09:d5:88:01:3e:26:ee:78:a1:2a:
         72:ab:e1:08:07:af:af:d8:9c:32:12:90:00:8b:85:45:60:b6:
         61:62:0f:61:b1:e2:07:65:c3:69:a4:75:8a:61:47:2a:60:ae:
         39:47:24:46:68:13:66:22:6b:6d:5b:2e:12:10:53:cd:6a:ca:
         7b:71:38:70:17:3e:9e:82:d8:c5:ee:f4:0a:56:42:c9:e5:62:
         e1:cb:7c:23:4b:aa:2c:87:ff:8e:ca:dd:a8:e2:be:b5:dc:37:
         a4:e4:a5:fb:3b:b5:76:2f:e2:96:28:13:15:89:1b:24:4b:31:
         e9:a6:6e:7d:92:f7:06:47:6b:07:6b:1b:f8:07:67:06:cd:a4:
         69:b6:21:85:4b:49:f8:cf:7f:0b:88:99:fe:97:ea:c1:05:56:
         19:87:bb:1e:01:83:e1:c5:da:45:3c:50:7c:f4:f4:59:a3:ba:
         1d:ba:64:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:27:40 2026 by rpki-client