Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddc77088-857c-3b1f-b5ea-34bcc6209011.roa
File:                     ddc77088-857c-3b1f-b5ea-34bcc6209011.roa (raw, json)
Hash identifier:          21fIgMOZQB1A09sQiwTfctEsyIXAbqerKIrrF/Y6B/M=
Subject key identifier:   0B:38:8D:3B:21:A5:E8:15:1E:0E:C1:31:2B:72:2F:14:A7:51:6E:9D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CF587A2C0C1401C83BF859C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddc77088-857c-3b1f-b5ea-34bcc6209011.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        23.223.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:a2:c0:c1:40:1c:83:bf:85:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=0adb5663-8ff4-4dcc-bdb1-733ee569ec3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:5c:c9:c9:a7:d5:b2:cf:12:2a:bf:70:5f:
                    4c:01:38:94:2d:3a:9c:5c:a9:61:91:44:9b:12:82:
                    8f:0c:20:28:ed:53:6c:ac:aa:55:0c:0f:6b:57:20:
                    f9:8c:c6:de:28:33:76:65:4e:0c:f8:8d:75:fe:30:
                    a4:87:52:5b:fb:16:41:55:5b:53:35:0b:ef:cc:af:
                    79:14:34:77:5e:9b:18:15:10:3f:f2:f7:56:37:28:
                    5b:69:29:f6:d7:dd:4e:af:de:27:9c:7a:df:f2:70:
                    45:6b:03:ec:5c:cb:4b:a7:26:c2:bd:5a:e4:56:4e:
                    b9:be:2e:af:ee:56:8d:14:a3:64:7b:a6:45:f0:ac:
                    03:e7:2d:02:fd:96:78:ff:30:51:24:9b:e4:86:87:
                    94:6d:cb:05:9e:6b:94:cd:ad:66:1b:f3:54:66:1f:
                    72:a5:e9:5f:eb:58:73:ae:02:d0:4d:bf:cf:1a:64:
                    14:27:17:53:d6:da:4a:88:1e:1e:4e:83:62:d0:0b:
                    cc:fe:3d:90:41:a5:74:24:35:fb:28:9a:77:97:3a:
                    9e:19:49:52:e4:53:43:2c:9b:38:b9:f6:af:14:b7:
                    ac:97:20:34:64:33:4d:77:45:a2:b3:4e:71:45:ff:
                    1b:d3:ad:91:01:7a:db:5a:96:67:39:72:2c:e4:3b:
                    8e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:38:8D:3B:21:A5:E8:15:1E:0E:C1:31:2B:72:2F:14:A7:51:6E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ddc77088-857c-3b1f-b5ea-34bcc6209011.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.223.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:db:43:48:dc:20:76:4c:0d:39:aa:49:39:86:af:97:c2:07:
         48:76:35:a8:ee:d0:8d:6e:e1:ca:e6:8d:37:3a:9f:c4:e1:13:
         88:75:f5:45:46:4a:1c:23:8d:14:f1:35:00:d0:d8:01:e4:41:
         a9:8f:8a:55:b6:03:e5:97:c5:93:de:a0:ae:46:e8:90:e3:c0:
         d7:fb:02:74:0e:d2:7b:1c:c1:90:93:14:7a:30:ab:b2:ee:56:
         9b:d7:ad:99:95:b6:8a:96:f4:2c:e5:f1:61:00:e6:3e:b9:eb:
         b6:64:fe:54:af:20:f2:22:e8:89:b6:2e:09:88:d9:e2:5a:06:
         6e:97:be:94:58:14:41:83:af:18:e2:a0:36:4c:02:ee:c1:1f:
         d6:57:4e:e3:a2:32:56:b8:11:18:09:b5:91:ce:94:14:13:91:
         05:bf:6c:33:07:33:b5:11:0d:88:2b:3e:51:67:6b:81:b8:cf:
         dc:dd:38:33:98:56:62:00:35:a2:85:82:2a:46:6a:01:f9:fa:
         67:5b:c6:9b:f3:e3:dd:c0:eb:f6:a8:68:73:24:d3:db:ff:7b:
         02:0e:e7:e3:40:d5:48:01:11:29:9c:ba:1c:fd:14:a9:bc:eb:
         8e:df:7c:e7:73:cb:a2:f4:51:02:6e:86:65:96:70:40:5d:58:
         2c:a0:de:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:40:19 2026 by rpki-client