Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa
File:                     2b98512f-e781-3b9a-b954-6bbdae3b43de.roa (raw, json)
Hash identifier:          /3lPmdzR00DMxxIBq9g2JeHOBnxVTAzQSLqgEr+gwLA=
Subject key identifier:   97:5D:CC:22:9E:03:B1:30:6D:86:ED:3E:D5:92:34:55:49:2D:54:27
Certificate issuer:       /CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5
Certificate serial:       010D0C9F4328584CDB0219B9EA262D2BD8D17300
Authority key identifier: ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     19415
IP address blocks:        23.166.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:19:b9:ea:26:2d:2b:d8:d1:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=f93d32dd-4b46-4393-86d7-f5996bd6faf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:00:30:d9:18:6e:b9:12:6f:f7:46:0d:00:7f:
                    dd:d6:71:11:a8:13:59:d5:96:a5:a1:2a:f8:9f:3b:
                    99:93:9f:b3:c0:fe:53:c6:a4:85:88:93:5b:9e:49:
                    e1:37:88:3e:f3:b6:b1:e0:67:ff:08:41:a7:89:33:
                    d0:f8:85:82:9a:f1:1f:52:87:ac:32:36:1d:65:b1:
                    07:f2:58:69:1d:23:94:e8:90:72:cd:b5:24:be:7e:
                    25:fc:46:ee:af:7d:0e:ee:9b:b8:b2:a1:f9:40:69:
                    88:9a:06:30:bb:f6:73:12:36:8c:86:18:5f:bb:30:
                    ec:29:5c:80:55:88:df:41:3a:01:e5:1a:84:a3:82:
                    11:4c:9e:30:8d:2c:28:5e:35:b7:fb:8e:fe:03:ce:
                    d0:f0:b4:b8:41:b8:06:d2:ec:c1:d4:b8:f9:df:64:
                    20:20:51:c4:8b:68:5a:65:c0:46:fe:b8:3e:90:83:
                    a4:a0:22:17:11:34:d2:ad:55:c0:5c:c1:c4:ad:a8:
                    6c:09:44:59:6e:43:8a:c7:1b:9a:79:ed:f4:c8:29:
                    ef:00:69:f2:84:ce:52:2b:d1:19:40:00:ac:1f:a6:
                    9e:b8:30:5e:6e:93:88:95:24:a2:b4:00:86:f2:77:
                    ec:29:89:e5:04:5a:6a:02:b8:17:4e:27:68:74:3c:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5D:CC:22:9E:03:B1:30:6D:86:ED:3E:D5:92:34:55:49:2D:54:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl

            X509v3 Authority Key Identifier:
                keyid:ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:83:e4:64:d0:99:84:bf:f2:9e:e6:b0:d1:29:d0:07:53:ba:
         4e:85:af:46:31:5d:ae:58:3a:ba:1d:1b:f6:88:5f:9b:f4:01:
         02:58:58:dc:d6:4f:d6:7b:b9:ef:89:c2:d0:f6:c6:11:07:d9:
         33:cd:bf:c9:51:15:1e:bd:a7:3d:38:79:58:23:f3:6f:27:cb:
         cb:70:40:49:40:53:f6:2c:91:7f:71:31:61:b8:80:f6:da:7e:
         c3:fc:7d:01:ff:bf:ae:a3:4c:47:22:35:e9:9f:62:79:68:02:
         df:3f:28:8c:86:f4:75:21:f4:11:93:42:61:81:3c:67:7e:ee:
         b0:11:97:f6:f9:8a:6b:aa:a5:df:7d:79:93:8d:e5:7a:90:aa:
         4a:04:6c:1e:da:08:37:dc:21:ac:7f:0f:ab:ff:21:5c:95:33:
         47:0c:89:9a:ab:75:a5:e1:a9:f3:68:13:a3:29:0f:cd:81:b1:
         04:f4:0b:78:c6:a5:5f:4a:0d:f9:bd:3f:a1:ed:eb:1d:b8:19:
         a4:fa:f5:09:0d:02:49:dc:e8:86:b9:df:97:05:51:7a:f2:dc:
         b2:6a:65:8b:9a:bc:77:86:9a:17:7d:d9:96:43:f7:aa:2d:fd:
         b4:01:4c:94:45:0f:e5:78:b4:7b:97:14:13:5f:89:a3:07:b8:
         b5:ff:1a:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:57:18 2026 by rpki-client