Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9885b-573a-3444-ad12-789f4bec8d6f.roa
File:                     5ab9885b-573a-3444-ad12-789f4bec8d6f.roa (raw, json)
Hash identifier:          bJq3R/eSl751NZgiPj4rqGuLrF2HFhU9kexe9rbxsGE=
Subject key identifier:   DA:4C:D7:19:9F:F1:D2:04:2B:8D:DB:C9:8B:2F:C8:3E:65:EC:EE:0C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D037D1D423247DC037EAC5800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9885b-573a-3444-ad12-789f4bec8d6f.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     16625
IP address blocks:        23.194.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:1d:42:32:47:dc:03:7e:ac:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=1ca5eb5e-b51f-41ef-ac8b-c59637ef1351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:94:7d:53:17:b9:81:99:d2:cb:d5:f8:35:c0:
                    bd:2b:dc:4d:b7:0b:cb:62:40:88:69:9f:e1:db:ad:
                    27:d0:77:bf:3e:bb:ee:e4:b7:c0:0e:2f:4f:51:bf:
                    a4:9b:46:2f:3f:71:62:2d:df:70:1c:6e:00:41:46:
                    08:e0:82:0f:55:e0:aa:6c:88:51:f8:0f:85:29:55:
                    1a:b3:3e:03:4c:ae:eb:79:eb:1a:c4:6d:e3:d8:69:
                    4a:9e:cb:38:d5:4f:74:a7:c1:f5:88:95:42:3e:32:
                    c7:f2:49:c0:97:35:69:06:f8:17:96:e2:7a:da:8f:
                    95:cf:fe:57:35:aa:92:dd:9c:90:c7:e5:98:6b:5d:
                    25:93:9e:1e:aa:7b:cb:84:76:d3:f5:8f:fa:86:93:
                    f3:db:55:30:72:d8:ab:13:c6:25:67:8f:a6:89:f0:
                    32:52:f2:23:a3:54:f1:cf:55:1c:90:5e:1e:f7:c2:
                    47:11:cc:f6:ef:30:fd:17:61:91:85:f9:83:85:4a:
                    b0:d5:62:e9:f1:43:db:af:c4:7b:5a:b8:0a:2d:b5:
                    6f:85:3f:3c:33:23:7e:db:25:b7:ff:29:5a:45:a6:
                    53:dd:3a:68:2b:77:e6:0c:90:2e:d8:b4:75:c7:c0:
                    06:01:e0:49:71:b7:7d:50:ee:03:76:88:87:d0:26:
                    ab:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4C:D7:19:9F:F1:D2:04:2B:8D:DB:C9:8B:2F:C8:3E:65:EC:EE:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ab9885b-573a-3444-ad12-789f4bec8d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.194.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:8e:75:5c:f2:3e:66:09:24:cb:e7:76:ec:78:26:db:32:60:
         a8:d0:45:10:87:b9:c8:4d:12:98:ec:1b:06:9c:88:f4:ed:7c:
         bd:f8:b3:ff:12:83:af:97:91:13:03:0c:dd:70:aa:72:a0:5b:
         b1:96:b4:28:e1:f7:2d:75:7b:bd:c6:fc:2b:83:1e:1a:d5:8e:
         b4:04:51:53:87:ec:e6:ff:36:38:de:a3:aa:4d:96:59:28:43:
         01:ef:31:5a:a4:f6:99:6d:39:92:27:07:16:d3:f2:96:fc:34:
         cf:91:94:69:0e:85:c1:b0:63:58:23:b1:82:93:b0:5a:4f:55:
         49:8c:d6:87:a7:e1:da:ed:7f:ff:c9:6e:a1:fb:31:28:b5:54:
         ae:74:0a:0b:f7:98:41:75:30:73:9a:4f:f3:1a:c5:8f:38:71:
         2d:85:6c:1d:23:1e:b9:68:e8:33:0a:9f:d6:79:22:85:6e:16:
         4f:d8:41:15:df:c2:a2:a7:2a:de:31:37:de:d4:63:e5:ba:0a:
         8f:77:95:2b:dc:9f:57:35:62:d7:2a:db:aa:ca:48:25:76:8d:
         a9:1a:99:01:b8:f4:5f:5e:8e:f3:16:d4:1d:a4:e9:c6:d6:7c:
         cc:60:16:9e:7a:6f:16:b7:34:47:bc:55:d0:b9:2f:70:9b:32:
         4b:9e:26:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:10 2026 by rpki-client