Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9b27fc6-f8af-3e3d-b57a-a9ae527d322e.roa
File:                     d9b27fc6-f8af-3e3d-b57a-a9ae527d322e.roa (raw, json)
Hash identifier:          gY+oeOZxrifpc4v8YhFH1eFymgJ2+wMtj4b3mPAppzc=
Subject key identifier:   34:5A:35:80:D2:B8:20:62:3C:E0:75:DE:FE:0F:86:E0:BD:3A:67:9D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CDB022589C3844927EB038000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9b27fc6-f8af-3e3d-b57a-a9ae527d322e.roa
Signing time:             Sat 14 Feb 2026 02:00:32 +0000
ROA not before:           Sat 14 Feb 2026 02:00:32 +0000
ROA not after:            Fri 15 May 2026 01:00:32 +0000
asID:                     20940
IP address blocks:        23.38.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:db:02:25:89:c3:84:49:27:eb:03:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 14 02:00:32 2026 GMT
            Not After : May 15 01:00:32 2026 GMT
        Subject: CN=9e914741-b67c-4134-a971-1ef2444e7907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:21:f5:c0:cc:8e:0e:c2:60:cc:ac:ad:69:
                    d7:a8:c7:98:d7:38:1d:35:8d:86:98:24:83:28:5f:
                    11:56:4a:71:7a:1d:4f:6b:ce:b1:8e:e4:0a:35:8d:
                    6d:bd:d0:7c:c8:db:1f:ad:84:4a:6c:51:7f:f0:b6:
                    68:f2:d8:8b:15:ca:73:1c:5e:38:64:19:de:c9:63:
                    6d:06:87:d2:77:ab:0b:c6:7a:36:b4:06:f0:62:7c:
                    f6:04:26:86:c2:a0:e6:96:77:46:dc:10:87:f9:2f:
                    8a:a5:d2:55:aa:1c:f5:c9:75:ae:a7:6c:8a:9e:05:
                    02:13:90:c6:58:70:5c:4b:96:4c:0a:b0:1f:b9:e9:
                    2b:c7:89:ff:a4:bd:40:90:8f:06:44:39:e5:91:d9:
                    9e:c5:5f:67:e2:fe:0e:c2:b9:d2:05:f2:3c:07:46:
                    9e:a7:27:d2:00:6c:de:20:b6:71:06:d2:bd:68:ec:
                    62:08:4d:0f:de:1a:36:ae:1c:69:a1:14:45:62:46:
                    c6:77:de:e7:6a:4e:31:b8:86:56:d6:fe:54:4e:be:
                    c8:35:e8:5d:f3:80:da:b4:c7:23:ec:73:86:d5:28:
                    d2:ad:c3:91:94:2e:aa:a6:89:07:7f:c4:a7:4a:67:
                    19:ae:2d:fa:64:43:57:41:8e:6c:11:b5:79:2c:8a:
                    39:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:5A:35:80:D2:B8:20:62:3C:E0:75:DE:FE:0F:86:E0:BD:3A:67:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9b27fc6-f8af-3e3d-b57a-a9ae527d322e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2f:62:e3:c1:ff:97:0a:6e:81:26:54:ce:f7:24:08:98:c2:
         5b:73:04:3d:5b:1b:ee:9b:52:d5:32:1b:c3:a5:9b:3b:cc:e0:
         1c:f1:22:81:da:e0:df:44:6f:fe:11:52:e8:50:ed:ac:c2:24:
         3c:60:f2:f1:32:8a:a8:6b:c8:23:4e:3e:cf:51:67:45:93:41:
         10:18:3d:0f:07:97:5f:4a:0a:d6:1b:13:ba:eb:43:ff:de:d1:
         cd:06:19:90:d5:23:fc:f2:44:a4:1c:a3:ba:77:b2:08:43:e5:
         09:3d:7e:d0:f7:e7:01:a5:59:18:29:4d:4b:cc:ff:f7:4e:04:
         e1:2c:9c:d4:f7:4a:71:e7:e4:82:d5:ad:76:58:6f:0c:8d:d3:
         5f:74:7e:15:d9:db:1b:de:d4:0b:ae:a2:a0:02:30:53:ba:04:
         f7:c0:2b:1a:16:d4:63:0d:9e:7a:83:1e:1d:e3:dd:b4:bc:6e:
         38:cc:df:04:52:5f:4f:5d:87:3c:c8:83:9a:35:02:48:a2:d9:
         e4:46:b7:19:d3:32:8c:5b:3e:a7:09:82:81:4e:f2:f3:56:d7:
         68:16:22:03:2f:0b:bb:a6:28:c9:dc:ef:62:84:96:f7:79:af:
         e5:dd:25:85:9f:8c:31:fb:3d:eb:b3:ac:a9:11:5e:09:52:a4:
         a6:86:e8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:11:06 2026 by rpki-client