Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422d0ea0-6db0-3dd7-af10-0bbe1029845d.roa
File:                     422d0ea0-6db0-3dd7-af10-0bbe1029845d.roa (raw, json)
Hash identifier:          peBSLOIavw971mIIa2bDyQB/ipmWnXO0IRuQUSmswNs=
Subject key identifier:   AF:0B:36:9A:13:2B:CB:25:1D:55:CD:F9:A7:E8:44:FE:30:4B:6A:B8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CDB0224B76280CE625140A318
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422d0ea0-6db0-3dd7-af10-0bbe1029845d.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     16625
IP address blocks:        23.37.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:24:b7:62:80:ce:62:51:40:a3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=9f9a11dd-82da-49aa-bf1f-20c2d106e3db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:89:0d:04:b7:1e:04:14:2b:01:9b:7e:b3:0e:
                    ef:5f:58:97:21:c2:94:3c:cd:45:aa:b8:f9:c0:b3:
                    ac:0b:ac:09:48:75:10:f6:e0:b6:2c:a1:ce:7a:cf:
                    35:34:d9:81:8f:f0:c5:e2:c7:9f:9f:cd:b0:29:b4:
                    07:a8:60:29:49:ff:65:37:61:d2:11:42:8d:2e:df:
                    27:f8:a6:10:d3:cc:78:da:31:f6:66:59:31:66:55:
                    9e:57:cf:9e:66:af:4a:2b:1b:67:ee:cd:7d:b1:5c:
                    8b:c4:2c:d7:ab:aa:8d:7d:62:ec:dc:71:e7:55:7b:
                    50:27:f7:6d:99:65:f6:48:e2:6a:bb:6f:f2:c5:e6:
                    3e:81:b9:28:93:a3:20:da:91:c2:fa:88:b8:90:87:
                    84:0e:15:73:5c:af:c0:1b:1c:67:46:96:0d:36:b3:
                    22:cc:58:83:38:22:54:0b:f7:7b:a8:6c:0f:30:59:
                    f4:16:1b:19:93:d9:ef:c2:e7:da:9a:ca:78:b5:25:
                    8c:1b:9e:f4:0a:ce:40:52:a1:fc:60:b7:73:42:58:
                    b1:da:a3:99:f5:11:f3:97:5e:81:40:0a:8e:98:83:
                    2c:b4:ce:a4:f3:53:e8:0b:0c:b3:6d:35:23:0b:ae:
                    d1:a5:79:5c:f1:1e:3e:06:0e:76:84:54:b9:93:0b:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:0B:36:9A:13:2B:CB:25:1D:55:CD:F9:A7:E8:44:FE:30:4B:6A:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/422d0ea0-6db0-3dd7-af10-0bbe1029845d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.37.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:48:df:ac:38:73:61:39:a1:75:37:57:66:c5:cc:a2:34:f4:
         01:b8:0b:51:50:d9:21:ad:7f:f7:f9:b1:76:ee:17:56:11:01:
         0f:4a:b9:16:83:f6:73:cc:b2:86:81:e7:08:fb:da:a9:4f:34:
         d9:b3:cb:36:47:fe:82:7e:c9:54:ca:66:7d:98:6a:57:9e:88:
         43:ff:87:96:46:ea:6c:92:12:f6:00:02:97:1c:45:bf:36:87:
         84:5d:73:ca:9f:4d:8d:45:42:63:74:d7:8e:cd:53:e6:32:b4:
         14:e6:dd:a0:e1:51:b2:ca:8a:1b:ed:70:78:3b:84:db:95:bf:
         2e:1f:a4:80:60:b6:64:86:fa:fa:63:c0:d0:97:0b:bd:f3:00:
         c5:db:f2:71:23:ac:be:fc:91:d0:92:5b:25:79:ab:e7:21:74:
         5e:d0:e7:b2:1e:21:39:97:16:a6:39:0e:e7:8d:8b:4b:23:5c:
         ce:2f:13:b5:6c:c1:f1:cb:d0:f7:72:d8:63:48:ce:ad:f1:4a:
         98:a7:6c:3f:a1:c9:50:5d:c3:68:3c:26:12:bd:c3:d1:02:57:
         86:83:be:9c:cc:71:aa:55:0a:ec:11:f7:34:87:11:5f:42:23:
         b7:38:36:cf:ef:9c:fc:d6:b0:a0:0d:f6:c6:7d:36:f5:3d:2f:
         66:56:68:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:13:49 2026 by rpki-client