Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8299b204-4012-3a46-baa8-ef161ee859d5.roa
File:                     8299b204-4012-3a46-baa8-ef161ee859d5.roa (raw, json)
Hash identifier:          MaHWbbex7EPkLHqZX0wjOPW5XTy4Y3BuIuuThluiXJA=
Subject key identifier:   23:5E:17:CD:06:A5:4E:85:8D:45:E3:41:9C:9C:2D:6A:EB:7C:2F:36
Certificate issuer:       /CN=8785615b-4ba8-49c9-a63b-755d5560474a
Certificate serial:       010D0C9F4328584CE4C780B6312F359A8C86AD00
Authority key identifier: 9A:0F:7D:C7:4B:73:5D:D6:9A:81:FB:CF:6C:00:C8:D2:C4:28:D9:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8299b204-4012-3a46-baa8-ef161ee859d5.roa
Signing time:             Tue 17 Feb 2026 14:00:41 +0000
ROA not before:           Tue 17 Feb 2026 14:00:41 +0000
ROA not after:            Mon 18 May 2026 13:00:41 +0000
asID:                     20473
IP address blocks:        23.136.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e4:c7:80:b6:31:2f:35:9a:8c:86:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8785615b-4ba8-49c9-a63b-755d5560474a
        Validity
            Not Before: Feb 17 14:00:41 2026 GMT
            Not After : May 18 13:00:41 2026 GMT
        Subject: CN=46d7ddcb-cea0-4710-b8ee-2b2b72d6e5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5a:f1:0b:4e:30:8e:6c:e7:8e:4f:4e:89:1b:
                    37:ab:79:2c:a6:b6:6d:a9:6e:12:f9:3e:16:78:34:
                    12:4a:bc:45:1a:ca:cf:c2:4e:dd:42:0d:bf:31:77:
                    c8:de:f6:14:9a:f1:0b:56:a0:b6:f7:34:55:7a:e2:
                    2b:1d:e9:20:24:07:2d:0e:a9:b0:22:ff:f1:43:4a:
                    64:c3:81:60:18:25:b7:e2:90:ac:13:2c:20:05:b9:
                    dc:11:ea:81:c6:85:b3:f8:3c:77:f6:8f:a8:75:d1:
                    bc:83:f8:97:44:11:03:07:88:7f:cf:ff:08:61:52:
                    94:b7:cd:d6:0a:f2:87:7f:25:b1:05:02:3c:82:68:
                    be:1b:02:4b:e0:ad:2e:4a:a7:ea:77:91:fe:e7:8c:
                    59:05:96:83:cd:a2:ab:93:f1:e5:1f:a2:9b:13:d6:
                    2e:7b:94:40:d0:6d:0b:d4:69:21:c1:5d:27:f7:33:
                    fb:8e:ac:fa:b8:2e:e3:26:20:65:89:d9:55:74:4f:
                    14:45:c9:9d:84:d4:97:fc:9e:66:40:d7:77:5e:46:
                    93:41:1a:16:36:ad:f6:ba:8a:cb:83:8e:be:3e:a6:
                    a1:cd:d6:26:5e:97:19:b1:56:17:7c:7a:b3:42:3d:
                    c9:c7:06:2d:81:1f:59:4b:be:7f:4f:5f:56:96:db:
                    90:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5E:17:CD:06:A5:4E:85:8D:45:E3:41:9C:9C:2D:6A:EB:7C:2F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8299b204-4012-3a46-baa8-ef161ee859d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a/8785615b-4ba8-49c9-a63b-755d5560474a.crl

            X509v3 Authority Key Identifier:
                keyid:9A:0F:7D:C7:4B:73:5D:D6:9A:81:FB:CF:6C:00:C8:D2:C4:28:D9:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8785615b-4ba8-49c9-a63b-755d5560474a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:48:b7:8f:6a:6d:f0:09:dd:03:c3:1d:ea:96:84:cd:07:8f:
         9f:e5:7f:78:03:fc:45:92:4b:84:ed:df:e7:cd:a0:0b:ba:a0:
         f1:c3:36:6e:b1:ca:9d:ff:ad:d2:eb:92:37:81:19:30:0d:29:
         92:7b:cd:7d:40:0b:f5:c9:2a:20:32:fe:20:30:5b:0c:38:72:
         57:59:f5:47:35:81:c7:4a:c0:6a:65:83:15:0b:78:5a:28:8a:
         73:89:e3:0a:f2:59:8b:a0:03:1e:2a:ad:cf:bc:26:ee:95:cd:
         4a:7f:fe:af:09:a3:0d:3e:79:34:c0:f4:d5:80:26:41:04:de:
         7a:b9:d5:e6:77:8b:3e:40:30:1e:cd:71:cf:76:ae:d5:b6:d2:
         23:7a:fd:b3:f0:d6:57:bd:94:22:22:18:14:41:7d:0f:2e:ff:
         dd:f2:7e:2c:13:62:d9:8a:1f:12:5b:c6:b9:4f:28:ae:f8:5d:
         d0:22:ca:a5:7f:6e:c2:e1:ae:fd:a3:cb:e4:f1:d0:69:18:ba:
         5e:b1:e6:9e:67:f9:ae:4a:09:a3:1b:24:ec:3a:bd:50:7a:89:
         59:8e:1e:29:67:b8:a7:35:22:b0:2f:9b:c8:d6:49:63:14:08:
         1e:78:e4:17:4a:f3:3a:2e:79:84:22:f6:a5:e6:7b:92:1b:a9:
         06:0a:1e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:50 2026 by rpki-client