Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/3a67115f-3a24-37ea-b8af-0f49ec3032b8.roa
File:                     3a67115f-3a24-37ea-b8af-0f49ec3032b8.roa (raw, json)
Hash identifier:          qim2HrtoYIT6UcSwMT5FFVCITHH/re+DUypjix7ryCs=
Subject key identifier:   C8:62:86:0A:4F:FC:74:A0:DD:01:13:D7:65:A6:2D:E6:2C:E2:E0:08
Certificate issuer:       /CN=cc0e54e0-cc7b-4a47-961c-77b837f94955
Certificate serial:       010D0C9F4328584CE8F76E6FE9F590614CCAA040
Authority key identifier: 70:D1:CC:47:A2:EA:6E:3B:97:7E:97:9A:A7:36:1F:D9:77:5D:F7:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/3a67115f-3a24-37ea-b8af-0f49ec3032b8.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     395243
IP address blocks:        23.185.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/cc0e54e0-cc7b-4a47-961c-77b837f94955.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/cc0e54e0-cc7b-4a47-961c-77b837f94955.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:6e:6f:e9:f5:90:61:4c:ca:a0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc0e54e0-cc7b-4a47-961c-77b837f94955
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=d6a43643-5711-4fe3-933e-f48c00d1551c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a9:28:6a:d8:d8:07:b6:9d:94:7f:db:d0:52:
                    17:8a:59:91:99:29:e8:36:92:fc:54:8e:0a:4c:6a:
                    e7:28:fc:4b:ed:68:79:cd:74:35:62:64:c8:98:71:
                    ec:9e:d9:28:57:70:5c:c4:84:37:11:69:1e:95:34:
                    08:ac:36:d2:33:31:37:1f:db:14:c7:e2:62:ed:91:
                    94:66:bb:97:24:c9:a7:66:01:ae:40:f4:1b:6a:ed:
                    0a:73:cd:91:91:38:52:ad:80:47:e6:bf:28:7e:8f:
                    8d:15:75:85:38:60:37:15:59:ac:ac:0f:cd:75:ac:
                    e3:13:18:47:d5:0b:54:6c:5d:50:1a:fa:30:7d:d7:
                    3e:9c:1e:c2:bd:ca:40:51:e3:67:d5:77:d7:cb:14:
                    92:b5:c3:6d:53:a0:94:87:cc:ab:64:3b:79:1d:1c:
                    76:50:3b:6b:a0:a9:f0:5e:89:6c:4a:d4:c6:ae:db:
                    5b:a8:e7:ed:40:b1:19:bc:aa:76:51:34:e9:98:4d:
                    ae:14:68:07:bb:d3:3d:f6:59:8d:48:78:11:96:a7:
                    eb:a7:01:4b:08:97:78:9a:be:05:6e:49:65:76:68:
                    6a:3d:b0:e1:7f:38:57:96:f8:73:d3:42:70:4d:27:
                    7b:08:9f:a5:e6:77:6c:85:77:39:f8:21:e7:e8:87:
                    64:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:62:86:0A:4F:FC:74:A0:DD:01:13:D7:65:A6:2D:E6:2C:E2:E0:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/3a67115f-3a24-37ea-b8af-0f49ec3032b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955/cc0e54e0-cc7b-4a47-961c-77b837f94955.crl

            X509v3 Authority Key Identifier:
                keyid:70:D1:CC:47:A2:EA:6E:3B:97:7E:97:9A:A7:36:1F:D9:77:5D:F7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cc0e54e0-cc7b-4a47-961c-77b837f94955.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8c:3d:34:8c:e3:75:5b:91:9c:ef:f7:97:7d:bb:00:31:55:
         99:97:e2:e4:84:15:c2:57:f9:27:f6:0a:3b:bc:af:f8:2d:b0:
         7d:23:d0:65:5e:75:94:1e:05:b0:25:3b:6e:cc:fd:25:b4:8f:
         aa:19:a3:26:47:56:7f:7e:11:6b:e2:14:96:62:b0:cd:ef:49:
         3c:1c:d3:6b:5b:f1:c2:f4:8b:a1:9e:a1:ba:84:50:b1:19:fe:
         68:8d:13:9e:70:e2:5f:23:ea:b5:df:4b:36:84:6a:94:f7:52:
         7c:16:e7:0d:47:44:b5:61:4a:9d:46:fc:68:bf:6b:06:d7:ae:
         b8:98:9e:50:9a:08:87:7a:a2:b2:9d:1a:d3:fe:cf:6c:3d:dd:
         ee:9c:58:5c:c5:ec:7a:bd:d8:91:59:57:b5:ac:c0:23:9e:79:
         19:e6:d7:f8:fe:5a:9f:c8:8b:af:a2:72:7b:ee:8c:5a:6a:9e:
         0b:a1:40:79:c7:66:fc:f5:c7:4b:30:b9:25:95:e7:5d:f3:c9:
         28:ad:9b:46:74:1b:3b:60:ed:ba:b8:e6:6f:3d:56:65:28:d2:
         f1:2a:aa:43:52:0b:7e:26:c9:42:33:ea:ff:09:5c:d5:6a:ff:
         c1:e4:4e:f0:63:23:ef:4d:9b:87:49:2c:d3:23:1d:f7:78:ff:
         1d:1c:a5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:00:35 2026 by rpki-client