Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2a4247b-0746-37d0-8a66-1270c25b3185.roa
File:                     a2a4247b-0746-37d0-8a66-1270c25b3185.roa (raw, json)
Hash identifier:          wEEmn2VfQW23FkvFRSGimYkcI0Z6CaE6qW1BP9gjWqQ=
Subject key identifier:   6A:61:D1:DB:F1:7D:88:BC:37:A0:0A:80:16:07:2F:C9:15:BC:3E:1D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CED279FA78A008FF02EF56700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2a4247b-0746-37d0-8a66-1270c25b3185.roa
Signing time:             Fri 20 Feb 2026 14:00:41 +0000
ROA not before:           Fri 20 Feb 2026 14:00:41 +0000
ROA not after:            Thu 21 May 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.58.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ed:27:9f:a7:8a:00:8f:f0:2e:f5:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 20 14:00:41 2026 GMT
            Not After : May 21 13:00:41 2026 GMT
        Subject: CN=311465ae-5191-4db0-b9df-774dd0f6fa4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:15:0e:40:6b:47:1d:e7:02:63:d4:05:82:77:
                    4d:be:e3:e5:d4:9b:1f:c7:58:4e:b8:81:69:0a:c8:
                    15:8f:ab:39:ca:8c:47:f9:6e:9f:84:ee:9e:87:7d:
                    be:b2:41:e5:8d:00:b5:c4:14:b8:6a:59:77:61:14:
                    00:61:f0:2a:fe:bc:a5:68:65:06:15:fa:db:d4:0b:
                    eb:45:27:b1:80:99:f0:dc:65:51:a0:1d:a3:30:f1:
                    bb:be:88:60:bb:9a:92:0c:dc:12:d5:66:d9:db:c4:
                    c2:2c:d1:3a:62:cb:f0:91:a0:07:36:7a:7f:c1:54:
                    94:fa:fd:4f:f4:7a:05:60:a6:20:35:68:ee:6e:90:
                    90:ec:be:2b:8c:85:40:f3:1f:2c:7e:23:bf:a4:81:
                    ed:ef:b1:7a:31:50:0e:21:1c:a7:74:83:8f:94:aa:
                    2c:49:d7:b2:6d:ee:e1:04:c3:77:d9:cc:9a:8c:49:
                    0e:89:84:83:cd:7c:c1:e9:49:56:1c:a4:2e:c5:c2:
                    bd:63:07:b1:8a:fe:03:bf:28:de:20:c2:f9:69:5f:
                    a1:c4:69:78:05:b8:4d:f9:fe:36:a3:90:97:b3:78:
                    ad:29:d9:5b:21:9a:81:c7:e6:dc:03:0f:c8:c1:89:
                    4e:13:cf:36:1f:7f:4c:10:47:22:42:c0:81:e9:d7:
                    84:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:61:D1:DB:F1:7D:88:BC:37:A0:0A:80:16:07:2F:C9:15:BC:3E:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a2a4247b-0746-37d0-8a66-1270c25b3185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.58.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a9:ac:80:fc:0a:62:cd:f5:95:09:22:07:0a:3a:79:7b:cd:
         4c:f5:2b:3e:22:aa:a7:cc:cc:2e:53:0f:ac:90:92:28:85:54:
         89:2d:17:0b:ff:ca:8f:55:bc:83:12:5b:e4:35:0c:70:56:20:
         13:5a:5a:57:e5:d4:b6:91:31:7b:d4:40:9b:b6:d6:84:fd:00:
         96:0f:2f:73:4c:a6:ee:58:19:80:e5:49:2c:09:17:29:30:ab:
         af:38:13:1d:d6:eb:66:fc:9a:43:ef:e7:90:fc:c0:5c:cc:74:
         d9:29:30:80:d0:35:63:cd:5b:10:f4:e5:4a:8f:20:ca:ec:ca:
         6d:cb:ae:f4:17:93:c2:1b:88:ee:5a:11:c5:5b:6c:41:0d:ae:
         ae:3b:76:20:a3:8d:5f:c1:ac:30:70:69:12:06:8d:c9:64:27:
         dc:e5:5a:2e:28:a5:16:23:9c:25:b8:a8:c1:d8:1f:1f:79:e9:
         db:1d:b3:98:71:ac:c9:16:3f:16:cf:ab:81:be:69:13:41:ad:
         fd:0c:1b:52:0e:8c:b0:d0:0e:ec:0e:9a:0c:f6:7d:46:f8:92:
         70:c2:2c:d2:2a:be:c5:28:8a:1d:53:c4:b4:ed:a7:32:79:f8:
         26:a9:7a:15:b5:68:af:99:3a:66:4a:9c:61:63:8c:b0:99:9d:
         a2:58:30:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:22 2026 by rpki-client