Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/03ba8790-6437-3edb-9920-2755aa532085.roa
File:                     03ba8790-6437-3edb-9920-2755aa532085.roa (raw, json)
Hash identifier:          qUHZ202Q7xfjAPE115M8FqI6Dm4ZE6xrmpGWrJkC/Vs=
Subject key identifier:   3C:CA:F2:3F:CF:E8:86:C1:70:0F:8B:B0:41:B5:AB:3F:90:5B:58:C1
Certificate issuer:       /CN=6cfa06d7-0867-402b-ab91-a8affe4fb964
Certificate serial:       010D0C9F4328584CE268E9A0BD81AC183220E980
Authority key identifier: DD:20:70:BB:F2:5F:0C:43:B6:EA:69:47:C2:C6:8B:46:BA:56:17:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/03ba8790-6437-3edb-9920-2755aa532085.roa
Signing time:             Mon 16 Feb 2026 17:38:43 +0000
ROA not before:           Mon 16 Feb 2026 17:38:43 +0000
ROA not after:            Sun 17 May 2026 16:38:43 +0000
asID:                     63023
IP address blocks:        23.158.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/6cfa06d7-0867-402b-ab91-a8affe4fb964.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/6cfa06d7-0867-402b-ab91-a8affe4fb964.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e2:68:e9:a0:bd:81:ac:18:32:20:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cfa06d7-0867-402b-ab91-a8affe4fb964
        Validity
            Not Before: Feb 16 17:38:43 2026 GMT
            Not After : May 17 16:38:43 2026 GMT
        Subject: CN=8d1f0e5e-05cd-4a85-8e98-d7236e9e6034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:d1:ee:5f:30:8a:6d:f3:cd:75:b0:c0:a1:
                    29:85:cb:f6:67:04:2f:e8:20:8d:ea:66:2e:b1:54:
                    50:64:51:84:fe:cf:bf:a6:9a:83:1a:55:11:a0:4f:
                    da:4e:03:2b:70:04:ac:8f:1a:7c:5e:a3:19:b1:1b:
                    87:1e:c8:8d:25:bf:80:a7:8b:73:fc:3f:d1:d5:96:
                    21:c8:8f:ba:9e:7d:bb:37:35:04:39:14:73:d9:1c:
                    c6:79:4f:f5:f2:bb:a9:55:0c:4d:65:23:76:40:04:
                    1d:80:26:e5:82:e6:51:76:ec:59:1c:53:d2:d2:e6:
                    f7:68:5b:0f:66:83:17:08:fb:09:7b:97:3c:0f:1e:
                    95:d1:e6:f4:a1:7c:66:df:d6:73:b3:af:0f:ac:64:
                    0b:49:10:d0:44:b9:f2:5a:f1:44:b4:f7:f6:84:6f:
                    18:83:7b:c9:85:61:9d:b7:dd:94:01:77:2f:a5:63:
                    25:0f:c9:71:18:13:24:10:21:96:87:a2:05:b4:03:
                    5e:6e:b0:a7:0c:c5:d8:23:91:23:1a:7a:fa:2f:bd:
                    3d:34:90:8d:8d:d5:6a:3c:aa:e6:f0:84:fe:76:32:
                    33:07:fd:a2:1e:36:f3:ae:9f:b9:9c:f2:85:db:dd:
                    0d:6f:9e:af:0d:6a:94:c5:e0:e3:e8:f8:35:b9:73:
                    06:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:CA:F2:3F:CF:E8:86:C1:70:0F:8B:B0:41:B5:AB:3F:90:5B:58:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/03ba8790-6437-3edb-9920-2755aa532085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/6cfa06d7-0867-402b-ab91-a8affe4fb964.crl

            X509v3 Authority Key Identifier:
                keyid:DD:20:70:BB:F2:5F:0C:43:B6:EA:69:47:C2:C6:8B:46:BA:56:17:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:57:7e:77:31:15:f0:a2:dd:b0:cd:bb:a6:02:cb:8c:d6:3d:
         c0:cb:d8:8e:42:1e:a7:94:af:b5:52:7b:7f:77:a7:4b:55:5b:
         67:94:11:0a:03:c2:74:a2:78:49:8b:f1:8e:c4:f0:3e:bd:f6:
         fb:88:76:42:1c:3c:c2:d7:3f:53:0b:cf:d1:47:6e:15:47:4a:
         2e:67:f2:cc:78:9c:ee:77:57:d5:8d:f3:e0:36:9e:4c:60:7c:
         b4:21:d3:9b:3b:7d:96:c9:38:d1:3d:96:7e:58:34:ed:c3:12:
         ca:dd:da:b5:6c:ae:e6:c0:06:4a:ba:a9:37:6a:35:0d:8b:58:
         b1:11:36:4f:d5:67:dc:a5:64:c1:1d:a3:03:01:00:2b:30:62:
         47:e8:d2:de:d9:c1:ba:ca:bd:90:19:79:dd:62:fc:a3:54:ff:
         0e:9a:29:28:7c:fa:f1:e5:a0:62:57:df:cd:c8:03:f0:24:a7:
         14:1b:3e:ef:f8:45:bd:ea:8a:2b:68:f6:7f:45:46:32:a4:01:
         5e:33:ff:fa:26:1c:fb:dc:4c:89:4d:3b:b1:25:26:c0:ec:7c:
         da:ad:4d:f3:cf:21:3a:0e:c2:b3:7f:e7:82:9d:f6:54:d0:26:
         27:62:b4:3c:ba:90:fe:da:17:51:b9:b9:3a:35:a9:cd:59:bc:
         d3:8f:39:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:53:01 2026 by rpki-client