Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ad6f8a3-2d4e-3ae2-a8a4-a87f29cb8060.roa
File:                     5ad6f8a3-2d4e-3ae2-a8a4-a87f29cb8060.roa (raw, json)
Hash identifier:          8A2HujaEDOH/KBD0YLZcW/XYxm0cWIVAH++W1T43iRw=
Subject key identifier:   41:CF:39:66:DC:66:FF:B6:FF:62:88:CD:50:FD:D6:45:F7:4F:4C:52
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CCE72066F25FE750D0A7AE800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ad6f8a3-2d4e-3ae2-a8a4-a87f29cb8060.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     20940
IP address blocks:        23.35.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:72:06:6f:25:fe:75:0d:0a:7a:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=fff2ba7c-296a-4ebb-9501-edb46414656a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a9:06:c4:0d:8b:72:c1:12:a3:40:d0:cf:a2:
                    57:69:0f:f6:28:e0:fa:f4:3d:b6:bd:d7:e4:e0:78:
                    30:54:6f:d5:a5:e6:1a:ea:63:db:62:84:78:93:80:
                    e9:95:71:52:54:ad:06:22:ad:cb:4c:fd:8f:2d:f7:
                    59:76:ba:b5:ec:ea:20:67:99:1e:6f:a8:83:a7:5c:
                    c1:36:3d:3e:e2:92:41:cb:31:61:70:3b:94:8a:d4:
                    f8:1c:62:3a:d1:97:2d:ae:97:6c:f5:89:b9:23:92:
                    da:54:35:b0:c0:8f:cd:c5:b5:1c:00:45:e4:27:22:
                    9e:a2:41:75:7d:75:94:24:88:32:55:6a:ae:d1:7f:
                    85:b2:0a:63:bd:e5:e0:de:40:1d:14:c4:80:51:79:
                    22:3c:30:b3:81:7a:ef:65:39:34:4b:03:33:a9:7b:
                    b7:90:ea:d3:df:3b:20:b9:c8:19:7c:b8:24:7a:1b:
                    ab:ed:8d:db:27:9c:52:87:80:a4:3c:58:88:7a:8b:
                    b0:14:33:e0:b8:b3:5c:32:de:86:79:94:da:af:8c:
                    20:20:3f:31:47:a1:c2:57:d5:e2:58:f1:6d:51:ca:
                    a3:8c:a2:b2:b4:ab:9a:75:eb:c3:7b:ac:37:3e:58:
                    35:33:c0:bc:4c:84:9d:6e:64:34:a0:8a:3a:46:9d:
                    6a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CF:39:66:DC:66:FF:B6:FF:62:88:CD:50:FD:D6:45:F7:4F:4C:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5ad6f8a3-2d4e-3ae2-a8a4-a87f29cb8060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.35.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:54:0d:52:bb:bb:b2:6f:c9:bf:7d:c0:87:8f:2a:1d:27:2d:
         89:bd:30:2c:48:13:14:c0:5e:28:20:93:63:0c:30:6b:99:eb:
         57:0b:bc:cc:1a:19:6c:a8:87:11:64:51:70:6b:9b:8b:96:fc:
         2e:e7:a3:04:e0:a3:62:55:d5:2a:47:97:08:63:6f:7b:03:0d:
         a5:ab:70:56:c9:40:ba:3d:b5:c8:a4:b1:84:7b:d8:3d:ba:a4:
         82:41:d6:3a:d0:60:15:7f:d6:c4:fe:fb:13:f4:36:45:63:74:
         83:ca:08:b9:f2:ad:84:a0:f3:03:3f:4f:f1:6f:43:66:a8:57:
         11:36:8c:86:f0:d6:a1:27:75:2b:35:1c:f3:09:c7:0b:40:a0:
         07:6f:16:13:01:8a:09:16:56:db:47:e4:64:ab:c2:0f:9b:8e:
         17:dd:bf:4d:26:14:37:78:10:fc:ca:54:5e:ed:9f:fd:7f:a1:
         31:17:cc:b0:f3:b0:f7:2b:f6:b7:e7:3a:18:0d:5a:24:7e:db:
         b5:5e:55:4f:4c:eb:f2:5a:20:67:55:69:88:85:05:ff:a4:11:
         b8:c8:46:dc:ad:50:83:09:97:bf:8f:72:55:a1:24:8a:6a:aa:
         67:4d:b1:ea:b3:9d:e4:d5:bc:0f:8d:bb:e3:63:db:8e:7e:3d:
         15:58:ea:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:17:53 2026 by rpki-client