Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/658c05ec-1037-32f2-8565-8dac5d06186e.roa
File:                     658c05ec-1037-32f2-8565-8dac5d06186e.roa (raw, json)
Hash identifier:          voqp1t4zlHZ0d2iJClBVkvRx2HXp5pwUJXfl4hiCqXw=
Subject key identifier:   F3:6A:9A:75:F5:AD:A1:FC:3E:A7:19:6C:BF:CB:30:13:21:FD:F4:6F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CCBA776C7D031F2BEC5912720
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/658c05ec-1037-32f2-8565-8dac5d06186e.roa
Signing time:             Sun 08 Feb 2026 14:00:41 +0000
ROA not before:           Sun 08 Feb 2026 14:00:41 +0000
ROA not after:            Sat 09 May 2026 13:00:41 +0000
asID:                     35994
IP address blocks:        23.62.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cb:a7:76:c7:d0:31:f2:be:c5:91:27:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  8 14:00:41 2026 GMT
            Not After : May  9 13:00:41 2026 GMT
        Subject: CN=1dd0db53-8a86-487e-8cd2-b45407df8e69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a7:bc:1f:07:15:c6:99:6d:ff:21:0a:d9:05:
                    f5:b0:d5:bc:2f:79:a2:68:38:e1:da:1e:ff:e8:ac:
                    ca:ea:47:f1:3e:d3:5e:d4:df:11:b6:d6:97:1e:52:
                    c2:be:6d:08:0e:54:91:28:a1:9b:5c:70:38:38:63:
                    b8:30:08:fd:7c:b4:df:38:47:ce:fd:4f:3f:af:48:
                    9c:d7:33:f4:79:de:30:eb:a3:e4:26:0a:44:1a:fa:
                    d9:8f:69:52:b0:13:27:5e:ff:39:15:e8:b6:c5:7c:
                    ef:24:50:23:9a:6a:4d:70:76:9f:39:cb:23:55:89:
                    3b:10:e2:2f:af:89:f2:16:6a:cf:a6:45:6b:b3:8b:
                    5d:0a:9f:e4:73:96:61:cb:d0:74:0b:5e:12:94:31:
                    61:3b:15:82:9b:4f:d9:fd:f7:f8:09:7a:d3:12:7c:
                    29:0f:60:f2:02:24:7e:7b:34:1c:b3:02:23:a9:2a:
                    34:31:38:95:be:ac:a1:a9:35:73:77:08:63:b7:f5:
                    61:ae:fe:c3:fa:40:5b:ca:2b:56:01:c5:70:ae:74:
                    d7:6d:07:67:3b:b2:e3:6e:13:88:da:5c:a2:b3:04:
                    ad:6e:d4:22:ce:a1:ce:fa:28:b1:13:1f:49:d6:19:
                    86:46:38:7f:b4:fc:29:ca:a0:9e:a0:ab:cd:3f:62:
                    c7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6A:9A:75:F5:AD:A1:FC:3E:A7:19:6C:BF:CB:30:13:21:FD:F4:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/658c05ec-1037-32f2-8565-8dac5d06186e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:39:50:db:b6:42:b6:19:d0:e1:e1:42:75:bc:88:91:33:fe:
         d9:e0:3d:c2:42:37:4f:e3:83:94:dc:ce:3e:e2:c1:a2:07:f6:
         81:ac:6f:98:55:44:2e:44:c8:01:4c:17:e8:ad:aa:39:65:da:
         b4:54:26:c5:1e:90:f5:e7:63:eb:7b:60:11:4d:5f:4e:7f:3c:
         77:64:41:4f:a4:74:50:cf:d2:74:f0:51:66:6f:a4:ee:5c:15:
         87:b7:7b:dc:a6:05:a3:31:25:ff:93:ba:b8:6a:2c:3a:63:de:
         ec:d4:d4:f2:4f:f5:c7:94:cb:f8:81:cc:4f:c9:17:2f:47:8e:
         50:64:f6:38:af:d8:a8:ac:08:b5:a8:21:26:ea:34:f2:f6:c6:
         fb:4b:43:49:66:de:58:f6:3d:cb:ea:82:e1:bf:df:cd:de:a8:
         44:e6:34:4e:96:77:60:88:04:8a:d2:9d:8f:c5:95:c2:bb:70:
         16:92:a3:9c:53:04:97:f7:af:07:99:69:2e:3d:6d:1d:62:b3:
         fa:bd:84:34:e6:51:30:36:b8:b8:34:74:81:86:04:a2:03:e3:
         ba:66:d9:6f:3b:de:89:58:9a:db:0d:d9:46:7f:2b:01:ec:b2:
         4f:6d:a7:3d:8d:03:5b:c8:12:53:01:22:8f:7e:90:14:6a:29:
         ea:9c:bc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:14:32 2026 by rpki-client