Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68aa592-841f-3fcd-b6a9-79fe0ac36d39.roa
File:                     a68aa592-841f-3fcd-b6a9-79fe0ac36d39.roa (raw, json)
Hash identifier:          Dp+vlDZMSNMhsBsouXOgueObKEnW+0gFywWN31FAKtc=
Subject key identifier:   28:54:92:94:4F:77:66:8B:61:47:1D:3B:BE:2F:1F:3D:1E:44:EE:CA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CCD0CAC6AD14E976987ADEF40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68aa592-841f-3fcd-b6a9-79fe0ac36d39.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     33650
IP address blocks:        23.32.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:ac:6a:d1:4e:97:69:87:ad:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=d7dc5f1f-68e6-4d4e-bfaf-1a69e24e1a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:46:6f:4b:5f:4b:98:be:45:50:1a:f2:48:3b:
                    8d:28:13:0b:67:06:98:d6:eb:bf:bf:f4:bc:61:40:
                    fe:1f:88:84:54:76:b5:96:a6:92:04:20:0b:b6:0f:
                    a5:99:0e:e6:cb:2f:04:06:3c:c4:a2:82:08:65:95:
                    26:ae:6f:bb:59:be:04:27:58:1c:e8:91:26:41:29:
                    7e:b3:3a:45:09:41:64:97:50:c5:8d:a6:55:07:98:
                    c7:e1:46:6c:6d:2f:91:bc:d0:83:1a:52:9c:7e:aa:
                    5f:a1:be:8c:90:b2:a5:95:5e:90:39:b7:47:8e:56:
                    8e:a3:93:85:80:2a:b6:6e:8a:a7:17:9f:9d:bb:12:
                    a1:f5:c2:dd:ca:dd:2b:70:f5:43:51:1e:53:b6:1b:
                    c9:88:58:3e:75:7a:d5:c6:74:86:b7:14:cb:7b:6e:
                    4d:f3:b2:e6:84:4a:61:56:cc:37:b2:0f:2e:80:37:
                    d8:9c:3e:76:c8:1e:f5:4c:91:1b:e2:01:4e:dc:73:
                    dc:43:ca:81:9f:d0:c2:70:86:07:3f:18:ac:b7:58:
                    b7:73:58:37:6d:4d:4e:f9:4b:d4:e6:09:0f:d9:22:
                    e4:0e:3a:4a:52:00:fc:47:f6:c3:83:f2:70:eb:ec:
                    2d:da:53:b5:27:74:eb:82:27:db:be:a3:d8:d2:8e:
                    ec:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:54:92:94:4F:77:66:8B:61:47:1D:3B:BE:2F:1F:3D:1E:44:EE:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a68aa592-841f-3fcd-b6a9-79fe0ac36d39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:03:5f:61:00:a7:d4:a7:30:c8:58:66:b7:d1:83:90:cc:8c:
         0d:01:f2:63:c0:99:8b:01:5b:3d:b0:e6:59:75:52:12:4f:eb:
         38:da:55:e9:da:99:3d:02:b7:47:77:33:52:b4:21:1f:df:de:
         b4:8e:b5:53:b3:95:b4:86:54:3b:66:cc:b4:dc:e8:4d:ef:c2:
         21:a1:47:57:b4:5a:91:76:5a:a3:28:81:a7:12:d9:84:3e:97:
         04:1d:26:99:43:4d:89:be:20:2b:0b:23:8b:ec:29:13:ef:43:
         77:f3:b0:91:2a:00:db:3b:64:5d:88:a4:2a:37:b9:75:c0:8d:
         c2:2a:f7:ab:fc:0a:88:06:1c:bb:8c:63:f5:ea:78:c6:c1:0f:
         67:82:03:4d:3e:32:7a:e4:bf:c8:47:b7:3c:05:1a:34:0b:fe:
         49:62:b3:b2:d4:57:8f:8d:bf:71:69:ef:a2:35:4c:7f:0b:c6:
         a0:95:ae:2c:e0:56:47:2b:f5:6c:45:f0:5c:95:8d:28:e1:ce:
         80:c2:bb:88:8f:49:eb:f3:dd:3a:00:f7:0f:63:71:85:74:10:
         0d:29:fc:f5:85:52:f0:dc:f5:82:88:cf:94:40:b7:ee:83:75:
         98:c4:f1:d7:b0:67:ad:00:45:eb:87:29:14:fb:02:1c:a2:91:
         60:ee:d3:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:01:14 2026 by rpki-client