Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/f1964c90-a705-30d0-b1fb-98e41981c387.roa
File:                     f1964c90-a705-30d0-b1fb-98e41981c387.roa (raw, json)
Hash identifier:          ux1fiYOQiZmWvwFn473wI4vxNmzXO3viPfeC+DZz1nw=
Subject key identifier:   B8:65:2B:C7:8C:18:48:04:AE:0B:0D:C2:DA:72:9B:E0:AF:FD:78:EC
Certificate issuer:       /CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
Certificate serial:       010D0C9F4328584C87416CB03F89222F18AB7900
Authority key identifier: 1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/f1964c90-a705-30d0-b1fb-98e41981c387.roa
Signing time:             Thu 15 Jan 2026 02:00:31 +0000
ROA not before:           Thu 15 Jan 2026 02:00:31 +0000
ROA not after:            Wed 15 Apr 2026 01:00:31 +0000
asID:                     397270
IP address blocks:        23.160.192.0/22 maxlen: 24
                          64.112.32.0/22 maxlen: 24
                          208.69.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:87:41:6c:b0:3f:89:22:2f:18:ab:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11
        Validity
            Not Before: Jan 15 02:00:31 2026 GMT
            Not After : Apr 15 01:00:31 2026 GMT
        Subject: CN=7b12b191-2e8c-483b-8d3a-253a52292416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c2:54:53:33:d0:7d:7b:7d:88:df:69:cd:d0:
                    32:eb:f3:23:71:d3:e5:3c:04:09:0a:66:0f:cb:e6:
                    9a:27:35:44:50:3b:79:e0:0d:21:9f:55:0c:cf:ae:
                    38:09:67:70:c6:41:cd:fb:97:ab:e5:78:62:f1:74:
                    78:a1:d2:3a:b3:a7:32:01:1f:cf:c1:5f:83:07:a1:
                    2e:86:d2:86:d6:ab:03:0b:8d:4b:94:81:c7:a5:c2:
                    d0:1f:6c:f9:cd:05:29:43:53:53:8f:e9:a0:8b:63:
                    7a:0b:8e:38:3f:b8:1f:1f:66:e4:4f:fb:09:aa:be:
                    9d:f7:d7:23:7d:f2:26:07:74:59:1f:16:5e:46:d0:
                    c1:9f:20:83:61:ed:29:c4:c3:b6:68:9a:63:27:18:
                    7a:18:89:d9:31:ff:70:e8:9f:a8:0c:8f:7f:f1:a3:
                    e4:a4:90:65:ca:a1:21:b8:5e:c0:95:01:b2:80:1a:
                    a7:a1:b4:14:01:d2:2a:31:df:9d:ad:05:35:32:9a:
                    cc:ca:6c:48:2f:36:f5:90:50:96:59:92:a4:fe:58:
                    64:46:60:73:ba:c9:0c:43:69:8f:16:17:54:40:50:
                    18:59:96:2a:8c:4e:42:ce:71:dc:11:f3:8f:17:60:
                    46:10:45:1c:6a:f4:f8:dd:f6:d6:19:67:50:72:97:
                    56:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:65:2B:C7:8C:18:48:04:AE:0B:0D:C2:DA:72:9B:E0:AF:FD:78:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/f1964c90-a705-30d0-b1fb-98e41981c387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.crl

            X509v3 Authority Key Identifier:
                keyid:1C:79:F9:86:4B:9E:3E:C7:26:DD:6E:CC:98:4D:AB:A3:83:DE:9C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d9ac9f7-ef4f-4f56-bec2-21c9a2b25c11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.192.0/22
                  64.112.32.0/22
                  208.69.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:e1:c5:83:5f:be:e3:e4:c5:34:e9:b1:18:d2:6f:ac:89:05:
         40:42:ca:a6:a8:63:10:42:b7:77:37:75:46:5a:d4:11:ee:a2:
         db:47:c8:23:dd:14:e8:25:82:bb:17:88:41:06:ab:36:0a:9e:
         e5:f7:47:a5:13:90:67:8e:e9:38:34:e3:b7:ef:b0:3e:01:21:
         5b:e6:2d:12:fe:16:2a:64:30:03:41:70:81:38:3f:1d:46:d0:
         e2:e2:21:35:d6:12:7f:5e:68:91:ac:70:91:5e:4b:7c:bf:0e:
         13:3e:db:83:23:bd:21:bb:42:fd:d7:00:b5:49:4f:6b:79:d7:
         c5:30:ba:0f:83:4b:1e:21:23:a0:5c:8c:2e:81:4a:df:16:79:
         47:ed:2c:25:df:d6:11:9e:63:09:03:d6:64:55:51:c6:ba:75:
         7c:80:a7:aa:9a:f7:96:88:34:46:f5:c2:17:3f:02:ae:30:70:
         7a:7b:3e:de:48:00:1b:2e:04:08:a3:ae:ce:cc:1d:c6:eb:ad:
         04:c1:e6:a1:cd:37:b6:9e:ab:7b:d4:6c:88:37:a0:33:95:8c:
         4d:28:ab:3b:f0:b3:99:03:ae:0c:b3:cc:24:ab:04:37:aa:1a:
         94:fe:a8:3d:d6:cc:d4:b2:2c:28:5c:ae:9e:56:90:1e:de:e0:
         da:43:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:44 2026 by rpki-client