Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/859da646-a794-3807-8ec6-c22432171131.roa
File:                     859da646-a794-3807-8ec6-c22432171131.roa (raw, json)
Hash identifier:          cFhSJOOU73LKLYwTDNzx5C++gWs7SZ3MS8SUxr0ymZQ=
Subject key identifier:   ED:5B:D2:0F:94:0E:04:2D:31:D3:1B:95:E6:A2:90:B6:D5:1E:1B:FB
Certificate issuer:       /CN=9bd19c73-b597-446a-af11-1f8e6c172831
Certificate serial:       010D0C9F4328584CE0978B82D55E5BB8FE176380
Authority key identifier: 1B:0D:5A:96:2C:56:0E:2E:27:A6:8E:66:EF:80:8F:98:3C:DF:71:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/859da646-a794-3807-8ec6-c22432171131.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     395508
IP address blocks:        104.255.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/9bd19c73-b597-446a-af11-1f8e6c172831.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/9bd19c73-b597-446a-af11-1f8e6c172831.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:8b:82:d5:5e:5b:b8:fe:17:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd19c73-b597-446a-af11-1f8e6c172831
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=5a648cb9-95ab-4e8a-ae04-075cd8f6f479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4c:07:54:15:88:83:5b:91:dd:c5:17:ec:ab:
                    fe:6a:e4:32:cc:02:71:22:07:53:37:13:e9:4b:e7:
                    fd:83:a0:ce:56:a0:18:67:33:f0:fe:63:9d:68:01:
                    c8:aa:46:fd:dc:0a:2b:ca:1b:45:96:12:38:82:b2:
                    71:8e:32:a2:84:1a:27:f2:10:b7:0e:34:bb:4b:e4:
                    da:74:d5:bb:83:57:a5:2e:55:5a:8b:05:bd:f9:dd:
                    f9:49:6d:93:8c:26:7a:25:6f:c5:81:67:47:a5:ad:
                    ad:2c:48:e8:0f:78:10:1e:91:0c:c2:ef:b5:37:05:
                    4a:37:b3:6d:cb:64:d5:31:00:75:61:42:15:f0:6b:
                    e0:09:d7:6e:10:79:9a:a3:36:06:d8:4a:e8:28:54:
                    17:59:91:a6:87:d0:08:c8:68:be:41:0d:a4:79:e2:
                    14:e2:01:b5:55:c9:c0:c2:54:f2:74:39:06:e5:29:
                    cd:d2:f4:b2:e2:79:7d:21:ff:2c:65:83:06:e8:cc:
                    bb:6c:01:c0:0f:7b:47:be:08:80:78:15:0a:c7:c4:
                    5a:0b:e1:e4:11:6f:7e:5e:75:85:71:d4:b9:f2:d1:
                    e8:4e:87:26:a0:cd:a6:7f:a2:91:78:ca:02:3d:1b:
                    e8:52:71:01:f4:a7:c1:a3:c8:67:c6:ca:37:76:fb:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5B:D2:0F:94:0E:04:2D:31:D3:1B:95:E6:A2:90:B6:D5:1E:1B:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/859da646-a794-3807-8ec6-c22432171131.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831/9bd19c73-b597-446a-af11-1f8e6c172831.crl

            X509v3 Authority Key Identifier:
                keyid:1B:0D:5A:96:2C:56:0E:2E:27:A6:8E:66:EF:80:8F:98:3C:DF:71:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9bd19c73-b597-446a-af11-1f8e6c172831.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ec:0d:b5:7a:e9:d6:af:e9:28:76:5c:82:d9:48:17:f2:51:
         da:30:30:01:2c:47:fb:cb:36:95:c8:2c:40:20:47:eb:31:b8:
         05:97:79:73:61:85:5a:84:3d:64:79:3e:0f:8d:e3:2b:ba:5a:
         0a:b0:99:12:14:e7:ec:12:e8:aa:88:13:bd:f7:69:8b:45:73:
         93:dc:84:a3:f3:a7:73:78:88:0e:7b:ec:8d:69:e0:4d:13:02:
         c5:ec:1a:0b:a3:96:de:cf:b8:b9:8f:d3:51:60:a0:cc:82:3c:
         71:d2:f5:ad:e0:1f:b3:34:1f:cf:36:fc:88:3e:be:de:12:e0:
         ea:f2:cb:10:ec:72:68:db:84:6d:d8:cf:8d:3e:76:c4:98:85:
         ad:37:06:34:c3:e0:1e:c8:1f:cc:6c:62:6a:1b:aa:a1:43:56:
         88:e0:47:78:07:f2:77:43:04:ea:37:ed:a6:07:0a:70:9b:c2:
         9d:d5:07:0b:97:b5:99:00:44:3e:b7:81:a3:17:3b:26:c0:0e:
         c5:59:df:1d:b4:07:59:d7:1e:f1:07:0a:cd:56:7b:9a:73:e7:
         00:9c:a3:2a:47:8c:82:2b:be:a5:9f:43:55:4c:c8:bd:91:0f:
         52:a6:d4:7d:53:e1:04:06:28:e1:57:22:5b:eb:ac:23:d0:b8:
         28:fb:4a:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl4uC1V5buP4XY4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWJkMTljNzMtYjU5Ny00NDZhLWFmMTEtMWY4ZTZjMTcy
ODMxMB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk
NWE2NDhjYjktOTVhYi00ZThhLWFlMDQtMDc1Y2Q4ZjZmNDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkwHVBWIg1uR3cUX7Kv+auQyzAJxIgdTNxPp
S+f9g6DOVqAYZzPw/mOdaAHIqkb93AoryhtFlhI4grJxjjKihBon8hC3DjS7S+Ta
dNW7g1elLlVaiwW9+d35SW2TjCZ6JW/FgWdHpa2tLEjoD3gQHpEMwu+1NwVKN7Nt
y2TVMQB1YUIV8GvgCdduEHmaozYG2EroKFQXWZGmh9AIyGi+QQ2keeIU4gG1VcnA
wlTydDkG5SnN0vSy4nl9If8sZYMG6My7bAHAD3tHvgiAeBUKx8RaC+HkEW9+XnWF
cdS58tHoTocmoM2mf6KReMoCPRvoUnEB9KfBo8hnxso3dvthqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1b0g+UDgQtMdMbleaikLbVHhv7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85YmQx
OWM3My1iNTk3LTQ0NmEtYWYxMS0xZjhlNmMxNzI4MzEvODU5ZGE2NDYtYTc5NC0z
ODA3LThlYzYtYzIyNDMyMTcxMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWJkMTljNzMtYjU5Ny00NDZhLWFm
MTEtMWY4ZTZjMTcyODMxLzliZDE5YzczLWI1OTctNDQ2YS1hZjExLTFmOGU2YzE3
MjgzMS5jcmwwHwYDVR0jBBgwFoAUGw1alixWDi4npo5m74CPmDzfcfkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85YmQxOWM3My1iNTk3LTQ0NmEtYWYxMS0xZjhl
NmMxNzI4MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaP+OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvsDbV66dav6Sh2XILZSBfyUdowMAEsR/vLNpXILEAgR+sxuAWXeXNh
hVqEPWR5Pg+N4yu6WgqwmRIU5+wS6KqIE733aYtFc5PchKPzp3N4iA577I1p4E0T
AsXsGgujlt7PuLmP01FgoMyCPHHS9a3gH7M0H882/Ig+vt4S4OryyxDscmjbhG3Y
z40+dsSYha03BjTD4B7IH8xsYmobqqFDVojgR3gH8ndDBOo37aYHCnCbwp3VBwuX
tZkARD63gaMXOybADsVZ3x20B1nXHvEHCs1We5pz5wCcoypHjIIrvqWfQ1VMyL2R
D1Km1H1T4QQGKOFXIlvrrCPQuCj7SmQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:41:31 2026 by rpki-client