Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa
File:                     1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa (raw, json)
Hash identifier:          Fj8HR4hR01zQ8xgbEec/xq79tA5wtZrXa4wSfbcOmg4=
Subject key identifier:   4C:33:5E:81:2A:E0:F1:7B:70:77:3C:40:20:2E:37:F0:10:BB:71:C5
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F4328584CEFF23AB016A8CE92A92A3180
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     46261
IP address blocks:        23.190.80.0/21 maxlen: 32
                          45.43.192.0/19 maxlen: 32
                          64.187.224.0/20 maxlen: 32
                          104.153.80.0/22 maxlen: 32
                          104.166.64.0/19 maxlen: 32
                          104.247.192.0/19 maxlen: 32
                          107.161.112.0/20 maxlen: 32
                          137.83.79.0/24 maxlen: 32
                          144.208.91.0/24 maxlen: 32
                          160.202.64.0/18 maxlen: 32
                          162.210.36.0/22 maxlen: 32
                          162.217.172.0/22 maxlen: 32
                          162.219.24.0/21 maxlen: 32
                          162.223.28.0/22 maxlen: 32
                          162.244.132.0/22 maxlen: 32
                          162.248.208.0/21 maxlen: 32
                          170.75.144.0/20 maxlen: 32
                          172.82.128.0/18 maxlen: 32
                          199.101.96.0/21 maxlen: 32
                          199.233.232.0/21 maxlen: 32
                          216.115.184.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:3a:b0:16:a8:ce:92:a9:2a:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=fa8c2a83-e6c8-4b3a-a8a4-e3a0a888d438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d5:63:f6:1b:05:d0:a0:6d:ac:8b:ec:d2:30:
                    0c:34:3d:c5:40:94:b7:60:96:4e:8b:b1:e8:8e:66:
                    8f:75:45:1b:a6:05:ea:52:da:c2:7e:f5:23:06:d1:
                    0b:86:8a:21:fe:48:24:34:ed:30:9e:1b:7e:ef:ba:
                    ad:b2:c8:c9:f9:87:fd:8c:ef:da:25:38:af:22:e9:
                    f3:95:ed:60:ad:fd:54:e6:49:d5:6f:a5:b0:6e:3e:
                    d7:6d:dd:f7:1c:95:95:55:e5:85:5d:5c:37:9d:90:
                    5d:c6:45:b8:af:96:04:a1:04:11:4f:54:68:b1:90:
                    b9:01:03:66:73:23:3a:b8:ea:95:0d:b0:57:b1:0d:
                    5d:40:96:82:73:35:29:06:ca:74:7e:be:93:13:4d:
                    7e:e3:f5:68:43:31:dc:72:6b:14:6e:1d:fc:dd:c0:
                    c4:e0:49:27:9e:e6:1e:62:ff:dd:ac:9e:c9:1e:93:
                    8f:d3:f3:48:49:37:65:5d:b3:7b:db:87:dd:34:bd:
                    bf:e6:75:1b:f7:e6:6f:dd:70:72:f8:0a:7c:80:ec:
                    2a:45:2d:e2:41:8c:06:63:58:ab:27:65:84:0f:ce:
                    24:25:86:0a:24:b9:00:29:48:ef:36:74:32:1b:4b:
                    9e:86:fb:a1:68:23:dd:33:9f:67:24:9c:cb:b1:79:
                    da:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:33:5E:81:2A:E0:F1:7B:70:77:3C:40:20:2E:37:F0:10:BB:71:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/1e3b23dc-3e5e-38cb-8f88-7ed1fd2e192f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.80.0/21
                  45.43.192.0/19
                  64.187.224.0/20
                  104.153.80.0/22
                  104.166.64.0/19
                  104.247.192.0/19
                  107.161.112.0/20
                  137.83.79.0/24
                  144.208.91.0/24
                  160.202.64.0/18
                  162.210.36.0/22
                  162.217.172.0/22
                  162.219.24.0/21
                  162.223.28.0/22
                  162.244.132.0/22
                  162.248.208.0/21
                  170.75.144.0/20
                  172.82.128.0/18
                  199.101.96.0/21
                  199.233.232.0/21
                  216.115.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:df:d6:64:96:8e:6e:c9:41:37:74:27:7b:32:d7:15:e1:bf:
         66:bc:33:5e:ad:ad:a7:75:5b:bf:86:2a:66:47:0c:4a:51:c7:
         53:f4:e4:e5:33:47:cb:9f:7c:49:88:fd:24:14:57:b5:c6:80:
         87:61:20:1b:4c:0a:91:81:9b:c4:07:18:e2:cc:3d:e9:0b:ba:
         32:cc:e7:70:9d:6f:38:f3:9d:bf:99:ef:54:84:e5:b8:73:a6:
         e4:92:36:f1:b5:5c:d3:90:d5:1c:21:45:9b:10:60:22:47:3a:
         22:d8:21:c4:aa:d2:12:da:f5:84:37:7d:6e:c5:0b:07:7d:5f:
         51:30:a3:11:25:8c:06:d8:7c:97:0c:3d:4a:33:ae:be:55:87:
         6e:12:a6:e5:cb:5e:0c:31:a3:85:bc:1f:20:14:ee:07:04:1e:
         3a:2f:6e:74:ec:3d:69:ad:1b:45:73:41:3e:27:b3:e6:79:3d:
         7f:16:98:f6:76:89:28:e5:23:f2:04:1b:95:06:0a:b3:4a:8e:
         e8:bd:e1:81:2f:76:60:59:50:8d:4e:2b:b8:56:65:0b:2c:82:
         07:78:cf:02:dd:5c:6f:fe:95:a2:aa:88:6a:65:87:b2:fe:b6:
         ba:56:ee:84:6a:ca:f3:d6:7e:2f:c9:e1:f2:98:8f:8a:48:b0:
         63:55:48:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:07 2026 by rpki-client