Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f5adc8e-fc23-32b0-9af5-3f84d1bc9a97.roa
File:                     4f5adc8e-fc23-32b0-9af5-3f84d1bc9a97.roa (raw, json)
Hash identifier:          E3UbNxAwPIfSWsBT2XldnYNflzW5LcWgB1bDhstbC/I=
Subject key identifier:   58:8C:2D:60:85:C8:FD:68:EA:52:BA:05:0C:DA:91:F7:2B:DF:D7:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CAB8C5EF0E92061C3197997C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f5adc8e-fc23-32b0-9af5-3f84d1bc9a97.roa
Signing time:             Wed 28 Jan 2026 02:00:29 +0000
ROA not before:           Wed 28 Jan 2026 02:00:29 +0000
ROA not after:            Tue 28 Apr 2026 01:00:29 +0000
asID:                     63949
IP address blocks:        172.235.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ab:8c:5e:f0:e9:20:61:c3:19:79:97:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jan 28 02:00:29 2026 GMT
            Not After : Apr 28 01:00:29 2026 GMT
        Subject: CN=179104f5-b5e9-4130-93c9-99a226843741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bf:0d:be:a9:40:31:f1:fd:b7:cf:9c:73:56:
                    e9:f6:5c:15:99:02:ec:63:1a:c4:83:c3:da:c7:d6:
                    6b:64:2e:53:f0:ab:0d:62:88:a2:c3:e2:4a:91:41:
                    51:af:00:0b:44:b2:14:b3:88:10:5e:57:c7:41:f0:
                    2e:e6:a3:fa:fb:df:72:b1:37:8d:1f:09:c9:63:95:
                    c7:f8:26:af:3e:07:bc:2e:d9:1f:e6:84:e5:fc:c7:
                    27:61:5a:65:29:6e:5d:c5:1e:12:e7:cf:e0:3f:a8:
                    f8:bc:89:53:bb:5e:cd:f8:3d:87:e8:39:64:f9:19:
                    34:21:d0:17:a0:cf:52:e9:3d:85:21:36:10:57:c7:
                    60:54:61:02:19:c1:73:fd:a4:b4:a1:64:c0:8c:33:
                    91:80:d7:25:22:9d:f6:4b:5d:dc:16:7e:8b:2e:ba:
                    bc:1a:d2:60:e8:ce:24:83:f5:30:e6:61:05:3e:63:
                    29:07:e1:e6:9f:ef:37:8d:3a:de:5a:8c:cc:19:3f:
                    58:24:df:6c:e1:ed:d1:d6:33:66:4a:f7:f5:a7:fb:
                    13:01:b8:03:64:3d:bf:ef:e2:ab:55:af:35:c9:2e:
                    03:68:34:62:1b:45:94:6b:85:6b:67:2f:d4:05:6b:
                    2d:90:ed:99:2e:aa:ab:c2:56:3f:6c:19:f6:8f:b6:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8C:2D:60:85:C8:FD:68:EA:52:BA:05:0C:DA:91:F7:2B:DF:D7:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f5adc8e-fc23-32b0-9af5-3f84d1bc9a97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.235.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:67:8b:12:ef:d4:7e:a9:c3:db:46:f2:06:43:dd:8b:c6:5e:
         33:0a:9c:32:8b:d3:64:f7:f1:1f:96:ba:11:1e:32:08:76:83:
         f6:0d:b7:68:96:79:86:b6:02:e6:39:1d:3e:e3:cd:9b:bd:33:
         6b:78:5b:fa:47:17:cc:22:90:04:02:46:03:af:b1:ff:19:ee:
         1d:be:9b:4e:74:0b:2e:96:85:26:66:aa:9a:7f:64:a4:2e:a9:
         86:db:33:d5:9c:79:99:c5:1c:f4:bb:15:20:18:96:95:f1:c1:
         09:ee:3e:2b:7f:ca:d7:8d:96:26:60:c3:b1:e9:24:03:16:a0:
         a1:06:fd:ea:57:7f:46:95:27:c8:b4:89:7a:fe:1b:5d:10:5d:
         e9:c6:82:55:76:b8:fa:91:77:a1:f1:e0:d5:4d:02:fa:a0:28:
         8c:aa:16:60:a8:70:06:19:88:77:de:b4:45:ec:11:13:7b:b9:
         3b:14:5b:88:63:61:91:3f:91:15:e7:f9:35:34:56:2c:7a:cf:
         93:dc:fd:58:2d:82:4f:12:65:4a:26:fc:eb:73:1f:3f:55:6a:
         30:d0:e5:f5:45:a5:50:a5:15:a6:e1:7b:28:40:8a:6d:b9:72:
         f6:4f:41:45:56:f1:05:04:8f:63:dd:a3:a5:5a:f3:5b:d2:53:
         8f:17:51:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:45 2026 by rpki-client