Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/97da6b9d-b639-35c4-87be-d3b486d7c07b.roa
File:                     97da6b9d-b639-35c4-87be-d3b486d7c07b.roa (raw, json)
Hash identifier:          qfMSj8F3rhCkJxeRzYRATDUSTz0HYlEAhUEO7vbkQ8I=
Subject key identifier:   77:6F:E5:93:FC:58:FF:CD:CB:08:2D:A7:72:BB:6B:36:1F:3E:48:BE
Certificate issuer:       /CN=a54e265f-d361-4245-843e-1e7cf61c9644
Certificate serial:       010D0C9F4328584CE1FCD64887034A38BE3778E0
Authority key identifier: CC:CF:EB:B8:16:82:FB:CF:C6:0D:E4:96:57:40:61:6B:25:76:51:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/97da6b9d-b639-35c4-87be-d3b486d7c07b.roa
Signing time:             Mon 16 Feb 2026 14:00:40 +0000
ROA not before:           Mon 16 Feb 2026 14:00:40 +0000
ROA not after:            Sun 17 May 2026 13:00:40 +0000
asID:                     401580
IP address blocks:        23.132.36.0/24 maxlen: 24
                          2602:f740::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/a54e265f-d361-4245-843e-1e7cf61c9644.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/a54e265f-d361-4245-843e-1e7cf61c9644.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e1:fc:d6:48:87:03:4a:38:be:37:78:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a54e265f-d361-4245-843e-1e7cf61c9644
        Validity
            Not Before: Feb 16 14:00:40 2026 GMT
            Not After : May 17 13:00:40 2026 GMT
        Subject: CN=3acd6b16-b25b-4a6c-acd2-59bc2361bfaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fe:8c:f1:62:60:35:81:e7:c0:ee:6a:eb:0d:
                    06:d7:08:cc:53:6a:af:f2:74:ca:d2:cc:82:e6:47:
                    be:47:c3:35:1a:a6:0e:7e:b8:5d:45:f6:26:8b:a2:
                    69:75:91:0d:e4:9f:73:79:77:dd:9b:d2:93:cc:d8:
                    5f:98:78:32:1c:5b:37:fb:5b:15:bb:7c:ce:20:27:
                    f2:2b:68:7c:cf:b4:56:8e:51:11:1a:57:c2:b3:72:
                    4c:d6:16:27:4d:a3:6c:a3:bc:67:e6:b4:cf:d9:31:
                    16:66:af:8a:97:5e:10:21:d5:38:a1:90:fe:6a:05:
                    62:f1:0b:72:73:06:9c:43:81:b7:e0:d3:b9:38:69:
                    fe:43:47:10:5f:fe:ef:5b:1c:f1:f5:61:b8:2a:1b:
                    20:a2:b2:3f:75:cd:22:52:5b:5c:bf:ef:1d:9b:68:
                    63:b2:56:c0:35:1a:b5:66:05:96:26:d8:85:70:7b:
                    d8:7f:ca:eb:bf:ec:0e:e3:94:d4:58:cb:ef:55:02:
                    d4:f6:1e:d7:e4:81:9d:b3:9c:0a:f6:9d:9f:b6:e3:
                    e0:53:42:1a:e3:48:91:4d:54:fc:2b:e4:07:bd:aa:
                    24:1a:87:02:95:e1:22:ec:97:67:8e:30:e2:97:d0:
                    40:16:a8:4a:20:fa:0e:cf:21:8f:2d:c1:91:b3:15:
                    f6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6F:E5:93:FC:58:FF:CD:CB:08:2D:A7:72:BB:6B:36:1F:3E:48:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/97da6b9d-b639-35c4-87be-d3b486d7c07b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644/a54e265f-d361-4245-843e-1e7cf61c9644.crl

            X509v3 Authority Key Identifier:
                keyid:CC:CF:EB:B8:16:82:FB:CF:C6:0D:E4:96:57:40:61:6B:25:76:51:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a54e265f-d361-4245-843e-1e7cf61c9644.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.36.0/24
                IPv6:
                  2602:f740::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:8f:d4:4c:a2:6d:2d:22:10:5c:74:33:bc:84:d2:62:4d:93:
         44:32:c2:4e:d2:d1:5d:18:0f:c9:3f:6e:29:5b:15:2f:bc:73:
         5e:5b:68:a6:67:21:6d:1a:f9:48:49:70:ac:b2:f4:de:b7:7d:
         72:1f:65:0a:2b:15:f1:11:15:52:fa:ee:a7:48:30:b3:df:14:
         63:dc:6e:b8:dd:76:c3:f4:80:0e:40:5c:85:ac:c3:22:ca:e6:
         10:b3:f8:c0:5f:6f:c4:94:a9:61:9b:06:34:ad:29:82:f2:3d:
         7c:a6:75:4f:2c:ca:0a:6c:c2:fd:df:14:68:18:28:63:87:eb:
         1f:f1:ac:f1:fd:0a:ef:12:2a:d9:82:4d:0d:33:06:d5:36:8e:
         ec:0e:f3:ad:87:1b:f5:b6:c5:47:e5:09:c8:cb:91:66:92:b0:
         55:b6:2a:bf:05:7c:5c:31:7a:56:90:da:76:07:3c:6c:2c:0b:
         fd:6b:7e:52:91:ce:5c:ef:64:8e:98:ad:14:df:42:36:9b:94:
         69:70:67:bb:8d:97:24:8f:f9:00:ce:45:0b:30:b5:8e:35:91:
         60:98:80:0f:e9:a0:f5:df:fb:72:2f:7c:1f:f0:6a:6a:89:c3:
         cf:b0:04:f8:4c:c9:a6:92:b1:bd:c3:f0:a4:21:78:e4:ec:18:
         35:73:16:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:31:33 2026 by rpki-client