Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cad6a93-4de9-32f8-b777-1196979dc7a8.roa
File:                     5cad6a93-4de9-32f8-b777-1196979dc7a8.roa (raw, json)
Hash identifier:          6vFQu0PgsHhpPTwNAAcZFd9pKm0XWDN/yBOLYiWGMy0=
Subject key identifier:   15:4B:DF:62:54:A0:D8:AB:73:8F:ED:81:53:05:7E:EE:C5:7A:AA:17
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CDC67991FF1BE5FD9C27FCC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cad6a93-4de9-32f8-b777-1196979dc7a8.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.43.162.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:99:1f:f1:be:5f:d9:c2:7f:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=168f7dbf-f471-4af6-a5c1-0c25cce0a407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:10:74:10:b0:55:dc:73:a5:38:21:98:06:3a:
                    b7:d2:58:e5:22:70:e2:45:92:79:2c:23:7e:8a:6e:
                    6d:e9:88:e6:9f:bb:6f:86:f7:e8:8c:1b:af:21:c8:
                    bc:be:51:28:b8:77:dc:8a:b3:9e:0b:78:78:d3:fc:
                    14:e3:a8:dd:9f:7f:7c:34:9f:89:06:95:03:a8:ba:
                    30:1f:2c:cb:d8:3d:95:0c:0c:7b:a8:f9:62:fb:d8:
                    b1:4d:1d:fe:74:1b:1b:9f:9a:d8:5a:e1:19:c1:81:
                    37:17:7d:9e:4c:81:2e:e6:74:67:4f:2f:09:c8:14:
                    2c:5e:48:71:2d:9d:58:71:0a:64:20:69:9b:6c:b0:
                    28:21:23:fc:a9:c3:68:01:52:52:8e:da:24:51:5d:
                    d2:0d:f7:cc:91:f6:f5:20:11:9f:e9:6a:9b:b9:46:
                    d0:45:e8:8c:bb:c3:d9:5b:cc:f5:d3:de:5e:9f:5a:
                    7d:ed:df:55:13:e7:a1:54:f9:8d:5c:58:09:19:ff:
                    07:87:94:18:04:20:60:37:ee:ab:45:11:26:db:28:
                    f2:06:28:a7:d5:53:c9:73:c9:7e:55:8b:13:3d:d6:
                    87:ee:f2:ca:f6:cf:78:db:6c:0c:0f:07:e3:af:66:
                    f1:2a:36:9e:59:3c:c9:e6:7a:d9:fb:f2:45:40:68:
                    df:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4B:DF:62:54:A0:D8:AB:73:8F:ED:81:53:05:7E:EE:C5:7A:AA:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5cad6a93-4de9-32f8-b777-1196979dc7a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.43.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:9b:42:85:2d:03:69:03:46:b7:b3:0e:a6:01:de:d5:38:e2:
         3c:53:3c:57:b8:4a:e2:5c:80:15:8b:66:2e:1e:bf:b9:5d:dc:
         eb:58:fb:91:ba:87:da:60:7c:e2:71:70:c4:b3:4e:9e:ab:19:
         b3:ca:63:c2:6f:9a:24:ce:48:04:a0:b6:75:3e:78:f4:43:03:
         bc:3c:47:eb:e9:de:c9:83:1d:28:de:8d:c4:0a:28:f9:ee:2f:
         18:55:75:be:58:06:7a:5c:e0:82:51:37:b5:c4:66:f7:92:bd:
         8a:16:cf:21:45:3d:0e:77:b2:6e:3a:40:88:b8:51:a8:b4:fa:
         d6:92:c5:e9:9c:2f:a5:df:a6:91:a4:5f:19:81:2e:70:06:08:
         7c:44:49:97:63:4a:85:7e:53:72:a5:3e:e0:b8:45:fb:a5:1c:
         d0:3a:e1:a8:30:5b:0d:dd:20:f2:35:bb:08:7b:fa:eb:47:50:
         3e:8c:4b:9c:a9:60:9d:8b:e0:51:c7:44:e0:09:7a:9b:04:a8:
         1c:fc:f8:aa:c2:ed:57:f1:bd:5f:3e:73:3c:84:02:c2:08:fb:
         e3:2d:07:b8:9f:c4:0d:b6:7a:b9:72:f3:9a:fd:53:bd:33:a1:
         a4:4e:29:e3:30:82:29:be:be:0b:40:d0:c3:77:58:b9:6b:9c:
         00:60:05:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ5kf8b5f2cJ/zAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
MTY4ZjdkYmYtZjQ3MS00YWY2LWE1YzEtMGMyNWNjZTBhNDA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxB0ELBV3HOlOCGYBjq30ljlInDiRZJ5LCN+
im5t6Yjmn7tvhvfojBuvIci8vlEouHfcirOeC3h40/wU46jdn398NJ+JBpUDqLow
HyzL2D2VDAx7qPli+9ixTR3+dBsbn5rYWuEZwYE3F32eTIEu5nRnTy8JyBQsXkhx
LZ1YcQpkIGmbbLAoISP8qcNoAVJSjtokUV3SDffMkfb1IBGf6WqbuUbQReiMu8PZ
W8z1095en1p97d9VE+ehVPmNXFgJGf8Hh5QYBCBgN+6rRREm2yjyBiin1VPJc8l+
VYsTPdaH7vLK9s9422wMDwfjr2bxKjaeWTzJ5nrZ+/JFQGjfpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBVL32JUoNirc4/tgVMFfu7FeqoXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNWNhZDZhOTMtNGRlOS0z
MmY4LWI3NzctMTE5Njk3OWRjN2E4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFyuiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFWbQoUtA2kDRrezDqYB3tU44jxTPFe4SuJcgBWLZi4ev7ld3OtY+5G6
h9pgfOJxcMSzTp6rGbPKY8JvmiTOSASgtnU+ePRDA7w8R+vp3smDHSjejcQKKPnu
LxhVdb5YBnpc4IJRN7XEZveSvYoWzyFFPQ53sm46QIi4Uai0+taSxemcL6XfppGk
XxmBLnAGCHxESZdjSoV+U3KlPuC4RfulHNA64agwWw3dIPI1uwh7+utHUD6MS5yp
YJ2L4FHHROAJepsEqBz8+KrC7VfxvV8+czyEAsII++MtB7ifxA22erly85r9U70z
oaROKeMwgim+vgtA0MN3WLlrnABgBeg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:09:32 2026 by rpki-client