Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/c29da368-12a4-3190-8fb2-2391e3134074.roa
File:                     c29da368-12a4-3190-8fb2-2391e3134074.roa (raw, json)
Hash identifier:          9W8TncTRzBDpN9crFynu+gQBgyV95U1uXqciMN/TLSc=
Subject key identifier:   16:05:D6:E7:6A:06:F9:78:C9:31:16:A7:84:F3:C3:66:E3:75:BC:3F
Certificate issuer:       /CN=d4fa172e-2779-4878-8bd3-1b92d7a18cea
Certificate serial:       010D0C9F4328584CED2772EE595D9D5340DCAB00
Authority key identifier: 79:CD:4E:A1:93:4C:0F:C7:E9:3A:EE:E2:33:F1:FB:A9:13:3E:AF:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/c29da368-12a4-3190-8fb2-2391e3134074.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     395656
IP address blocks:        23.134.100.0/24 maxlen: 24
                          2602:f6ef::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:72:ee:59:5d:9d:53:40:dc:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4fa172e-2779-4878-8bd3-1b92d7a18cea
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=8f84b19b-4156-4a3c-8297-878128ae9ffa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:f7:60:0f:24:16:83:31:bb:25:ac:05:b3:2c:
                    3d:89:69:0d:8e:6f:e7:38:8b:e0:c2:71:ca:a0:60:
                    b9:86:0f:35:1c:4d:9b:68:d9:5a:e3:0b:76:f9:77:
                    70:cf:78:8e:95:7e:72:9a:b5:0d:8e:23:0a:24:39:
                    2b:aa:6f:69:64:c7:53:4f:bc:69:a4:4f:54:43:d0:
                    38:fc:d0:67:0b:fb:29:be:64:65:e3:9f:09:b6:93:
                    27:46:90:99:0e:25:58:f2:82:5e:5f:01:3c:45:9c:
                    4a:b7:53:00:57:16:ff:60:47:8f:10:35:f1:47:d3:
                    fd:81:4d:df:17:95:f2:b8:d9:92:b5:64:9d:8e:4e:
                    fd:a9:48:96:80:7f:3d:52:0b:41:e4:ae:a6:9a:7e:
                    ac:b3:3e:81:03:4c:81:c8:9e:4c:ce:b9:4c:41:83:
                    cb:b4:d5:fd:58:b0:33:5a:27:a4:19:64:3b:3c:ef:
                    ae:96:b1:dc:28:e7:f6:2a:fa:86:16:36:d6:6e:c9:
                    c6:48:48:48:b3:a5:43:00:75:8e:fd:e4:b1:ea:87:
                    f0:9e:67:52:ac:fa:14:a4:72:af:bb:ca:6b:08:af:
                    5e:d3:09:3d:cd:62:d5:44:91:e7:4b:05:b3:db:02:
                    ff:c8:32:fb:21:c2:e8:38:c3:09:26:b8:29:af:dd:
                    42:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:05:D6:E7:6A:06:F9:78:C9:31:16:A7:84:F3:C3:66:E3:75:BC:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/c29da368-12a4-3190-8fb2-2391e3134074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl

            X509v3 Authority Key Identifier:
                keyid:79:CD:4E:A1:93:4C:0F:C7:E9:3A:EE:E2:33:F1:FB:A9:13:3E:AF:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.100.0/24
                IPv6:
                  2602:f6ef::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:5d:a0:ef:d2:7d:dc:1a:4e:42:d0:70:00:78:a3:7e:c5:d4:
         c7:ef:7b:8b:13:f5:4c:79:da:27:09:3e:bc:25:f7:cd:3a:97:
         da:b5:be:9a:39:6a:e0:aa:f3:68:41:e2:09:49:dd:7a:b6:49:
         b6:a3:94:12:d4:43:17:15:ee:aa:48:5f:20:48:ec:31:34:d7:
         72:8f:2e:92:74:75:d9:24:b8:a8:f0:a0:00:ec:d2:ff:ef:bd:
         26:33:dc:e1:f5:0b:99:fc:5e:bf:e4:ac:f2:3e:69:dc:85:6d:
         b2:2e:dd:7a:a9:32:ce:26:10:d2:b5:0c:7e:10:05:fb:0b:22:
         a8:df:b2:a7:02:67:cf:18:fb:fa:8a:df:ee:84:26:cc:42:30:
         34:3a:04:25:83:79:a6:97:7f:8e:e0:2d:34:6c:e4:a5:f1:5d:
         8d:0f:7e:62:fb:8d:5e:43:15:fd:fc:83:1a:b7:16:66:d2:83:
         38:26:46:a9:87:42:35:c6:c1:6d:36:21:a6:2c:74:24:e7:1f:
         8c:45:64:b6:cf:46:4b:e8:4f:73:b9:11:35:36:d0:01:1c:f5:
         54:88:c0:5e:86:1a:81:fe:7c:f1:f0:07:7a:ef:3e:c2:bc:48:
         49:5c:65:63:59:ff:6f:d6:c3:50:80:ea:69:4d:6e:f9:c7:86:
         98:a6:c9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:22 2026 by rpki-client