Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/c5ba2241-8e18-3dbc-a5f3-cf08eb7dd534.roa
File:                     c5ba2241-8e18-3dbc-a5f3-cf08eb7dd534.roa (raw, json)
Hash identifier:          YnAWGy5PvFy12xXn4LmQ3DyUY0L45x7GscZBKHiSlLY=
Subject key identifier:   69:16:6B:01:81:DF:F8:7E:03:D5:6F:80:10:19:1C:23:F6:BF:0E:FA
Certificate issuer:       /CN=0942cd1e-1350-41d5-a14e-51bddb52c336
Certificate serial:       010D0C9F4328584D037D4A3811F23377745DFAB0
Authority key identifier: 5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/c5ba2241-8e18-3dbc-a5f3-cf08eb7dd534.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     26157
IP address blocks:        23.132.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:4a:38:11:f2:33:77:74:5d:fa:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0942cd1e-1350-41d5-a14e-51bddb52c336
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=6ec607a2-e5be-4df2-b0c7-8530eab69d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5b:4f:0e:03:77:4a:f9:d3:cc:c2:91:85:0a:
                    24:c1:25:8b:88:48:57:33:40:01:07:08:e8:1e:0f:
                    8c:2f:00:1c:3b:cc:63:86:8d:4e:90:2a:ee:50:79:
                    45:36:fe:cc:b4:1e:a8:8e:2d:5a:89:45:6c:7c:8a:
                    59:89:b6:3e:ea:e5:1c:b8:6d:9b:44:9b:ad:f6:c8:
                    82:d8:fb:7f:c1:94:4e:c4:4f:58:b5:27:87:5a:63:
                    10:2a:f6:97:90:d1:dd:30:90:dd:6c:54:44:48:20:
                    f6:63:ce:dd:0f:00:b4:83:b1:bf:93:fd:c0:3b:5b:
                    df:e7:0e:40:29:63:0a:1a:55:cb:5e:36:cf:7e:e8:
                    c1:7b:ec:a5:bd:f9:21:aa:05:97:56:b1:94:3d:57:
                    fd:b2:1a:b2:72:84:76:93:b8:5b:67:3e:c0:5c:49:
                    0c:3c:f2:2c:e8:93:86:63:af:4c:5b:41:1a:a2:66:
                    d1:9d:59:11:19:9d:3b:a0:62:fe:bd:16:dc:36:83:
                    ee:99:bd:97:33:3c:c1:be:de:5a:c4:92:c6:7c:66:
                    86:d9:ff:e8:cd:bc:28:37:c4:ae:78:62:61:9e:f4:
                    c8:db:f8:ef:5d:4c:5d:22:0b:9b:8b:50:6b:fe:d6:
                    81:8a:a8:de:c7:e0:c1:da:3e:a2:6a:23:96:03:e5:
                    00:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:16:6B:01:81:DF:F8:7E:03:D5:6F:80:10:19:1C:23:F6:BF:0E:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/c5ba2241-8e18-3dbc-a5f3-cf08eb7dd534.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336/0942cd1e-1350-41d5-a14e-51bddb52c336.crl

            X509v3 Authority Key Identifier:
                keyid:5A:C7:58:9A:CA:A2:C9:1B:EE:76:CD:53:D6:2E:A3:69:1B:10:32:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0942cd1e-1350-41d5-a14e-51bddb52c336.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:49:dd:60:f0:c6:12:a4:45:1b:5f:40:1b:1f:49:0b:20:83:
         2e:2a:7e:b3:de:ee:69:26:3e:00:82:8c:a8:bf:06:09:3e:fe:
         0b:69:ae:e7:e4:6f:bb:bf:ba:f6:d4:92:c8:f8:0c:1b:af:3b:
         7c:e0:f5:45:bd:2f:a2:34:5f:99:5e:98:ff:f7:2d:d7:2a:aa:
         54:23:8d:46:f7:ab:d1:2e:c9:b6:63:37:35:b9:02:bd:4a:2d:
         dc:20:1a:77:22:01:ac:81:47:20:de:d0:a6:63:d1:5f:32:a9:
         e3:4c:f8:c9:8a:5a:51:62:1c:8e:6f:52:e4:14:2b:64:65:82:
         f9:48:70:ca:b0:69:8a:24:f2:73:73:ba:07:78:10:0f:10:06:
         58:fc:c8:db:9a:0b:d7:97:0c:ea:ea:f6:fc:1c:87:30:4b:72:
         b8:bd:ec:00:2c:e1:1f:7a:d6:c1:0e:40:98:51:97:d3:e8:d0:
         3f:ca:a0:7b:08:3c:10:2d:4e:c0:f4:af:dc:9b:7d:ee:c2:7e:
         0f:a7:ce:c6:88:13:3a:70:3c:fc:23:18:be:68:77:a1:d1:1f:
         fb:93:30:9b:47:f2:cc:e3:d5:ab:2a:90:e6:ab:5a:95:cd:1a:
         10:f7:44:43:c0:5c:48:24:4a:90:04:4f:14:ed:ed:f7:cf:af:
         64:32:2a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:14:45 2026 by rpki-client