Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa
File:                     5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa (raw, json)
Hash identifier:          BBgWBOX4eaBy9F2aUy7rroYPe+KSs7Hr5wZn9X773+w=
Subject key identifier:   DA:F0:F7:05:4E:3C:15:9A:0E:2F:20:46:72:C8:26:49:23:08:C8:63
Certificate issuer:       /CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
Certificate serial:       010D0C9F4328584CEA5CD91788DA7A6216B7E200
Authority key identifier: 51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     63394
IP address blocks:        23.184.112.0/24 maxlen: 24
                          104.237.112.0/20 maxlen: 24
                          157.52.48.0/20 maxlen: 24
                          172.86.0.0/20 maxlen: 24
                          172.86.16.0/21 maxlen: 24
                          172.86.32.0/19 maxlen: 24
                          2605:e4c0::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:d9:17:88:da:7a:62:16:b7:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011a0d1b-79a4-4d14-9cd0-0743f29bf956
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=145bbd01-3e88-46d4-bdd4-d3c518788c14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:b2:7a:f7:92:42:34:c8:c8:4f:a9:f8:9d:
                    50:fb:9b:96:55:91:2b:98:12:41:ad:11:6c:a2:1c:
                    16:ae:57:58:ca:4e:17:91:39:d0:ea:5c:c1:dd:23:
                    bd:7d:53:21:30:e9:60:ec:dc:14:48:24:66:d4:a2:
                    f0:be:25:62:90:04:17:18:0d:56:57:ff:28:85:8b:
                    3d:66:e1:46:17:8b:e0:66:ba:d3:60:c7:5f:93:4d:
                    4b:03:d7:4d:f7:d5:b0:dc:0c:e2:94:f7:e4:5a:50:
                    f6:f9:38:24:1b:4a:8a:0d:52:b0:20:97:63:11:6f:
                    55:00:2d:9c:c9:3a:9c:8a:69:eb:79:22:86:a4:4d:
                    8e:74:bb:ff:0f:3f:3a:97:34:5d:ee:b8:d5:54:b1:
                    92:9c:ae:20:90:0e:3d:cb:36:96:98:65:35:8b:e5:
                    9f:50:36:88:fa:e6:8a:53:9b:3d:dc:7f:95:b7:65:
                    b6:51:31:93:13:16:15:3e:d9:25:14:47:53:06:9f:
                    51:fe:58:ed:fc:6a:18:c4:de:f9:ac:9b:ce:0e:bf:
                    c3:5e:8c:12:2a:66:9e:b0:c5:40:76:bd:96:ee:c9:
                    7b:ed:4c:bb:bb:d1:11:22:99:13:60:0e:7d:27:e2:
                    54:96:e1:9e:3e:95:66:7c:30:2d:e0:44:d7:6e:1c:
                    fc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F0:F7:05:4E:3C:15:9A:0E:2F:20:46:72:C8:26:49:23:08:C8:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/5fad01ac-a0e4-3d4e-b92b-05b18fcf9945.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956/011a0d1b-79a4-4d14-9cd0-0743f29bf956.crl

            X509v3 Authority Key Identifier:
                keyid:51:0A:BC:F7:59:52:E2:26:06:D7:01:13:13:22:8C:58:03:E7:BF:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/011a0d1b-79a4-4d14-9cd0-0743f29bf956.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.112.0/24
                  104.237.112.0/20
                  157.52.48.0/20
                  172.86.0.0-172.86.23.255
                  172.86.32.0/19
                IPv6:
                  2605:e4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:83:c4:ec:8f:04:80:f5:0d:33:6a:7e:03:7d:22:c6:c5:4b:
         16:e5:d8:3c:46:9f:02:46:24:9c:54:3e:d9:67:7d:98:d5:ae:
         5c:dc:c2:27:09:7a:03:a4:f5:e8:3e:ab:69:0c:b4:88:5a:a1:
         b0:51:a0:9f:10:99:db:7f:b3:bf:86:dc:3d:2a:20:5c:ab:9a:
         c9:e3:37:08:ca:1a:c9:8c:fb:03:56:9c:96:93:7c:82:9b:d4:
         cd:8d:46:17:03:12:1f:e6:f2:99:6e:a6:a7:c1:c9:93:1b:2a:
         1f:1d:72:3c:11:9a:f8:fc:e0:f0:57:1f:48:26:08:05:8a:c5:
         22:ad:b6:47:a2:7b:2d:e6:86:2d:8d:d0:26:f9:a5:c0:73:1c:
         30:71:f9:8f:31:46:02:23:11:ca:d3:dc:dd:d0:68:48:4d:9f:
         c0:3d:26:f6:13:69:3e:dc:e5:14:31:4f:c5:82:8f:ec:6b:70:
         d0:16:d6:e8:66:23:22:5f:eb:39:7c:8f:33:07:c4:2a:73:f5:
         ab:75:4e:fd:67:15:81:85:eb:ae:74:4e:06:bc:79:f7:32:40:
         51:9c:42:0d:f7:a2:65:c8:d3:98:a8:e9:54:75:20:2b:d9:64:
         b9:08:ab:0b:4e:ef:cb:ab:14:ea:f1:09:d8:ae:65:57:6b:98:
         49:9b:bb:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:56 2026 by rpki-client