Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/304f2600-cd93-3a8d-a33f-9f57f863cc94.roa
File:                     304f2600-cd93-3a8d-a33f-9f57f863cc94.roa (raw, json)
Hash identifier:          Hfoq3LHzvm8jz0qRuHb3y75+jrREPTK0tKpS9lVvvsg=
Subject key identifier:   8B:89:E0:B2:B4:E9:0D:73:28:EC:F5:66:93:90:8D:5F:E3:6D:7E:E1
Certificate issuer:       /CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b
Certificate serial:       010D0C9F4328584D05242F04B2431DD2E0BD5720
Authority key identifier: D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/304f2600-cd93-3a8d-a33f-9f57f863cc94.roa
Signing time:             Sun 08 Feb 2026 21:09:18 +0000
ROA not before:           Sun 08 Feb 2026 21:09:18 +0000
ROA not after:            Sat 09 May 2026 20:09:18 +0000
asID:                     396982
IP address blocks:        23.148.252.0/24 maxlen: 24
                          70.40.190.0/23 maxlen: 23
                          2602:f4df::/48 maxlen: 48
                          2602:f4df:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:05:24:2f:04:b2:43:1d:d2:e0:bd:57:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9dd70a7-a6f5-4975-9c23-0ab1236e602b
        Validity
            Not Before: Feb  8 21:09:18 2026 GMT
            Not After : May  9 20:09:18 2026 GMT
        Subject: CN=1f38e55c-093d-4480-9a1a-9b8646e08fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:58:5a:49:79:24:0a:b7:cd:d0:2d:f2:0c:
                    58:b3:cf:a0:e5:f7:83:1b:78:71:58:0d:6a:48:1e:
                    ac:91:45:6f:38:bc:70:2e:a3:05:17:c5:a3:b5:bf:
                    6c:ed:39:a6:4e:4a:85:0d:dd:99:61:d1:41:33:17:
                    30:74:99:35:1d:31:5f:fc:95:37:ba:81:43:92:46:
                    f9:e2:9c:83:48:16:8a:4e:78:13:00:d4:15:fd:73:
                    83:49:af:27:f1:df:4b:54:57:1a:36:86:d0:11:64:
                    e7:22:52:19:4f:3f:63:b3:e6:76:66:0b:12:7d:32:
                    10:70:ac:e6:49:a5:b9:6b:38:f6:5c:5b:fe:18:71:
                    06:86:a7:8b:4f:76:1c:bc:0b:b6:77:b0:e7:6b:7d:
                    ca:97:12:12:50:7c:e8:01:59:32:c7:bb:f6:49:a7:
                    da:9c:3c:05:32:e6:8e:d4:a5:2a:8f:d8:96:1e:57:
                    fc:2e:ad:97:c4:60:9e:cf:e4:71:43:b9:41:20:c5:
                    59:a0:3d:39:c6:7a:b2:d8:24:8e:9c:1c:72:b2:b8:
                    01:57:1f:f5:7f:40:e8:6e:cb:51:ce:5b:71:e0:82:
                    2a:15:21:c0:84:ca:30:35:ad:92:7d:e3:8e:d8:d4:
                    2d:c8:3d:d2:24:d6:10:69:2f:49:5e:be:43:9f:bf:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:89:E0:B2:B4:E9:0D:73:28:EC:F5:66:93:90:8D:5F:E3:6D:7E:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/304f2600-cd93-3a8d-a33f-9f57f863cc94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.crl

            X509v3 Authority Key Identifier:
                keyid:D1:12:47:E1:FF:51:0E:1A:5E:E5:B2:FC:0F:3D:9D:FB:2E:80:95:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9dd70a7-a6f5-4975-9c23-0ab1236e602b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.252.0/24
                  70.40.190.0/23
                IPv6:
                  2602:f4df::/48
                  2602:f4df:100::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:3d:40:df:fc:98:bd:a8:c3:38:ee:7c:13:bf:76:80:cf:9c:
         4e:70:ed:aa:29:d0:3a:51:76:d2:cf:f1:6b:a1:e1:98:bc:2f:
         ad:88:3e:84:db:c4:5c:93:d4:e0:f2:1e:6c:13:1e:5d:02:08:
         7a:57:e4:81:a0:65:81:b8:ab:23:9f:52:fd:31:e3:0d:15:64:
         2d:30:c0:7e:96:c9:2a:a3:40:fc:18:40:1b:06:8d:d5:a8:45:
         fe:45:d5:8c:04:41:16:e6:13:39:34:c6:d1:32:bc:06:c8:e0:
         95:63:02:d6:be:05:65:ec:4c:74:d1:72:88:af:56:78:c7:fe:
         5a:f2:42:89:ab:bb:ff:fa:7d:87:7c:5b:08:15:0b:60:f8:73:
         f1:33:b7:20:7d:29:2e:a3:63:74:7c:3a:41:5e:56:d6:81:07:
         7e:66:21:cb:62:41:1f:f4:50:8b:29:cd:d7:56:2e:c8:39:a6:
         0a:77:c8:5b:0d:d7:3e:1f:2d:00:c9:76:22:da:fd:8c:fa:49:
         c0:a9:44:58:96:86:2e:1b:7d:e7:b8:87:9f:c3:1d:71:1d:5e:
         9d:45:aa:a1:6d:9b:e9:f0:09:37:87:7b:ce:6b:0d:ae:42:5e:
         92:e8:2c:ea:07:53:00:d1:e0:e4:38:3f:f3:94:61:7f:82:13:
         65:6e:1d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:15:45 2026 by rpki-client