Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa7e9c8a-ae0d-3aad-af5b-d7ddfa1bcae0.roa
File:                     aa7e9c8a-ae0d-3aad-af5b-d7ddfa1bcae0.roa (raw, json)
Hash identifier:          Pf1rZxN5e+HwiYDxp5+Lzp2VLoaLHbF18X6Bg1viihE=
Subject key identifier:   76:A6:27:61:D3:AA:FA:5A:02:DA:C3:BC:CC:7E:64:04:5F:E9:B9:FD
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CDC679A1830A5FA0344C15FE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa7e9c8a-ae0d-3aad-af5b-d7ddfa1bcae0.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     16625
IP address blocks:        23.44.28.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:9a:18:30:a5:fa:03:44:c1:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=2feb8571-5271-49ca-943d-2186fc0d76ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:34:3a:49:2a:69:43:66:98:0c:78:b5:6e:
                    40:24:f0:1c:4c:77:27:09:f5:f5:0e:e3:d2:b7:24:
                    15:6d:b4:19:a8:c7:ea:0b:94:06:3e:fe:76:c1:6a:
                    06:58:fd:5e:86:1e:68:1a:07:df:8b:05:a6:0d:6f:
                    76:cb:9f:0f:c6:53:a1:60:38:fa:ce:ce:db:45:db:
                    2c:9f:db:e9:4c:ac:61:95:7b:0e:96:d6:c6:28:5f:
                    25:09:d5:a7:86:92:cf:e1:7f:92:e3:4e:87:f2:0e:
                    eb:58:44:aa:0d:1d:56:28:84:bb:13:da:1a:8c:0f:
                    09:63:e4:59:4f:22:17:33:6b:80:44:50:56:01:44:
                    4a:f5:7b:07:23:4c:ac:37:32:46:88:ff:ef:2d:92:
                    f9:20:fb:d2:81:57:0c:24:27:61:9b:5d:cb:3b:5d:
                    5e:98:cd:18:d4:89:41:9e:f3:31:a2:69:87:a1:27:
                    0a:f1:91:52:d7:00:18:9d:82:20:e0:41:f4:4e:a4:
                    c3:cf:27:c9:38:cf:d6:05:79:65:47:bf:a8:34:84:
                    fb:15:a2:15:51:00:19:d8:e9:99:1c:8c:91:62:fa:
                    7d:39:5d:13:af:90:2c:73:86:1b:d2:15:c9:9e:7e:
                    6a:08:0f:d6:e2:a0:1b:5d:7e:55:60:82:de:9b:af:
                    f4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:A6:27:61:D3:AA:FA:5A:02:DA:C3:BC:CC:7E:64:04:5F:E9:B9:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/aa7e9c8a-ae0d-3aad-af5b-d7ddfa1bcae0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:54:92:31:b3:70:aa:fe:de:ed:dc:e7:c2:57:6c:75:ca:bd:
         d5:8a:9b:7b:f9:f4:85:b3:d4:7d:6b:b0:1f:a7:ab:95:60:4f:
         3a:cb:28:60:ec:b0:44:30:d7:79:55:24:e3:2d:6b:e1:e8:c4:
         e1:93:99:9b:d7:e0:0a:51:78:b6:41:78:da:f5:0a:c1:81:f5:
         d3:3f:8b:2a:ea:e8:a0:87:33:0c:90:bb:ad:05:ad:23:c0:9a:
         08:63:6d:0c:a2:a7:0b:55:52:bf:5c:d3:07:12:80:d5:e1:40:
         18:36:55:9b:0a:9a:43:f1:05:03:9b:04:c8:34:a1:f5:8f:0c:
         5d:52:8a:74:70:d6:7e:53:66:fc:a4:09:d3:9e:1e:d3:34:78:
         2a:19:1b:c8:47:3b:44:e0:57:06:1f:be:f9:b9:25:ca:c0:d3:
         de:ec:b7:7d:87:94:dd:f4:9b:45:e1:b8:e2:ae:df:cc:95:d5:
         36:27:bc:ce:87:12:87:42:6b:85:aa:50:21:1b:ae:57:a8:93:
         5d:57:18:1d:a2:0d:8f:25:ac:05:de:3d:c4:2d:c7:b5:7c:67:
         b5:2e:37:7b:d5:72:58:fc:f4:04:c7:60:b7:67:f6:53:fa:d4:
         2c:d0:fc:f5:00:0d:e4:42:92:bf:90:c9:c6:a2:97:bd:a2:15:
         25:2f:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:15:39 2026 by rpki-client