Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0/f1f5d84d-9914-3ba4-80e6-0d59b1b791d5.roa
File:                     f1f5d84d-9914-3ba4-80e6-0d59b1b791d5.roa (raw, json)
Hash identifier:          Befn7h0e7Eru1HEq/rHryf75rEEFmyAry5xRFEU1iJE=
Subject key identifier:   74:74:27:EE:5D:EE:F2:D1:15:A8:F0:74:73:B8:91:56:AA:75:BE:9A
Certificate issuer:       /CN=b6fd9206-247a-4078-aca1-d3717a7d7ee0
Certificate serial:       010D0C9F4328584C8E3C3C80C8BAE6CA1F001F80
Authority key identifier: B2:7F:A2:54:04:79:6A:89:1A:C4:70:A5:86:82:F5:14:4B:74:35:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0/f1f5d84d-9914-3ba4-80e6-0d59b1b791d5.roa
Signing time:             Sat 17 Jan 2026 14:00:38 +0000
ROA not before:           Sat 17 Jan 2026 14:00:38 +0000
ROA not after:            Fri 17 Apr 2026 13:00:38 +0000
asID:                     15289
IP address blocks:        23.129.236.0/24 maxlen: 24
                          2602:f78c::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0/b6fd9206-247a-4078-aca1-d3717a7d7ee0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0/b6fd9206-247a-4078-aca1-d3717a7d7ee0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:8e:3c:3c:80:c8:ba:e6:ca:1f:00:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6fd9206-247a-4078-aca1-d3717a7d7ee0
        Validity
            Not Before: Jan 17 14:00:38 2026 GMT
            Not After : Apr 17 13:00:38 2026 GMT
        Subject: CN=37b7f589-7546-4ff9-b32f-de4c47a6246d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:74:f5:f3:1a:28:3b:74:8a:0f:6c:8e:55:d4:
                    db:38:b0:be:9b:e8:e8:59:59:44:80:d7:32:95:d1:
                    24:30:3c:51:40:a6:0e:f8:a6:6f:da:ce:41:1b:3b:
                    db:01:16:05:11:34:4e:81:ec:7a:a8:3d:46:1a:05:
                    7d:1d:98:01:eb:da:b8:d9:0b:4b:84:e9:ce:f4:a9:
                    e2:c2:e9:07:e5:39:e1:2c:0a:86:4f:7d:cc:7f:ad:
                    64:86:32:5f:4b:8d:7a:be:b4:c7:64:e1:8e:52:a8:
                    42:c6:23:32:8f:e4:87:4d:ee:e6:93:b7:4e:1a:74:
                    64:ca:9f:9f:7b:e7:40:67:fc:e1:65:6e:43:d6:b7:
                    47:5c:f9:0c:cb:29:a0:27:e0:f5:84:d3:ce:77:43:
                    82:ce:96:2d:0c:7f:d4:69:95:b9:74:d4:3e:a7:ff:
                    42:39:c4:0b:9d:03:31:a2:8d:fc:ee:4c:0c:66:64:
                    5a:24:ef:eb:8b:88:7e:54:9b:d8:47:d3:da:ad:cf:
                    69:9d:e3:74:95:58:94:6d:b9:4b:fd:9a:1d:75:28:
                    14:4d:20:21:0f:e2:29:ca:6e:e8:9f:33:4e:ff:de:
                    d9:db:65:14:c0:d3:04:96:e7:79:b8:cf:73:ca:02:
                    a8:75:b9:eb:81:e7:f2:f9:d9:fa:f1:11:81:01:ad:
                    da:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:74:27:EE:5D:EE:F2:D1:15:A8:F0:74:73:B8:91:56:AA:75:BE:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0/f1f5d84d-9914-3ba4-80e6-0d59b1b791d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0/b6fd9206-247a-4078-aca1-d3717a7d7ee0.crl

            X509v3 Authority Key Identifier:
                keyid:B2:7F:A2:54:04:79:6A:89:1A:C4:70:A5:86:82:F5:14:4B:74:35:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6fd9206-247a-4078-aca1-d3717a7d7ee0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.236.0/24
                IPv6:
                  2602:f78c::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:bf:ec:d0:75:38:da:3a:4d:12:ac:f6:7a:cc:d2:9a:bf:8e:
         fd:57:c8:36:5f:39:34:f1:51:f3:c2:18:52:c4:e4:42:4e:c5:
         7a:4f:b4:99:1c:f7:9e:e5:30:ad:64:2a:17:ea:34:85:3d:c1:
         39:a4:52:9a:fe:4c:22:25:a4:a9:0e:84:03:6b:64:ee:08:0b:
         65:75:b3:41:48:94:06:63:92:e6:51:8d:62:6e:ba:83:e8:f4:
         15:ae:45:2a:f1:2a:a8:55:15:31:b0:38:81:a6:0c:16:10:e0:
         d5:25:69:e4:fa:e4:37:1d:33:a7:6a:7c:e5:dc:7d:97:a1:d2:
         e4:3c:1d:eb:cd:74:57:15:95:e2:3f:aa:77:f3:37:37:53:6b:
         26:d5:4f:83:2a:b7:2e:4f:d4:f2:59:32:51:27:c3:c9:f4:de:
         74:46:f0:8b:12:51:f6:c9:b4:bc:27:7b:49:03:57:15:88:88:
         40:b4:f1:5c:03:a6:71:c7:dc:9c:57:09:eb:4e:a7:9a:d4:e3:
         1a:aa:ea:f3:58:43:b5:a1:80:34:bd:25:72:0d:cd:1b:17:4d:
         e0:24:dc:08:21:e4:3e:52:56:ec:65:02:05:ca:26:6c:10:17:
         3a:8e:b4:98:0c:1a:ed:05:c4:b4:2f:02:ec:49:8a:ab:ed:0b:
         02:d3:e3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:50 2026 by rpki-client