Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f6810be8-11d5-3dd6-a226-f31d0c204d9d.roa
File:                     f6810be8-11d5-3dd6-a226-f31d0c204d9d.roa (raw, json)
Hash identifier:          0/cOBmZDhN5AjtvLrDrpBj1hMQHqYvAski1AcT0tqYs=
Subject key identifier:   8C:A9:DB:0D:47:A0:6D:D3:4A:7D:0A:7A:CB:F0:74:C8:71:B0:1D:BF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CF2BCFCF878629B4004FC8BC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f6810be8-11d5-3dd6-a226-f31d0c204d9d.roa
Signing time:             Sun 22 Feb 2026 14:00:41 +0000
ROA not before:           Sun 22 Feb 2026 14:00:41 +0000
ROA not after:            Sat 23 May 2026 13:00:41 +0000
asID:                     35994
IP address blocks:        23.204.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f2:bc:fc:f8:78:62:9b:40:04:fc:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 22 14:00:41 2026 GMT
            Not After : May 23 13:00:41 2026 GMT
        Subject: CN=998292e9-5085-43f7-85fd-fb139f15381a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:34:04:65:aa:c7:b6:32:e7:b3:15:fd:c0:5f:
                    29:20:ad:2d:b9:2d:0e:d9:78:af:a2:24:f1:d7:3f:
                    1c:1b:45:41:07:e8:2e:f1:59:d7:8b:10:43:fd:f8:
                    6d:27:66:8c:0a:e0:b5:48:e3:4f:f5:ba:cb:ef:0e:
                    b1:5c:e0:29:f3:f2:49:0e:31:6c:61:f8:3c:a1:85:
                    9e:f0:bd:bd:85:2a:c2:25:d3:c1:28:ab:8a:35:a4:
                    2a:a2:8b:bb:cb:87:35:68:e5:73:0f:f4:1b:32:c4:
                    36:41:fb:df:6d:2e:0f:59:6e:ba:c9:3a:43:ef:79:
                    a3:df:59:34:ce:98:b0:30:7e:b2:d9:a0:e5:49:86:
                    b7:07:17:ee:14:cc:4e:64:92:77:89:a7:4e:a0:a3:
                    96:20:50:94:5b:88:a9:22:d5:d8:ef:0b:c8:07:11:
                    68:a6:bf:e4:e4:b9:34:d4:09:39:70:15:fe:11:9c:
                    8a:8c:25:8b:d3:a5:1b:2b:bf:2f:2e:4e:58:90:a2:
                    d3:4b:98:0c:25:25:51:d5:2f:aa:53:24:7b:94:4a:
                    92:f5:57:ed:b0:31:4d:4c:5b:c4:69:39:d7:e2:b4:
                    2d:93:37:be:ff:31:91:64:2c:9b:c2:dc:eb:4a:62:
                    19:eb:db:5f:a9:86:bf:97:ad:6b:99:0c:bb:90:a4:
                    87:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A9:DB:0D:47:A0:6D:D3:4A:7D:0A:7A:CB:F0:74:C8:71:B0:1D:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f6810be8-11d5-3dd6-a226-f31d0c204d9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.204.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:cc:7f:7c:f3:5b:5a:94:5b:9a:49:2f:3b:83:40:6b:ed:a9:
         22:97:55:7f:e5:20:67:61:fd:71:c2:ea:60:37:8d:70:c9:1c:
         69:93:b9:7e:62:88:dc:56:a9:98:f5:81:e4:a2:45:2f:ec:74:
         bb:60:82:4c:27:f2:38:62:e7:02:91:67:ac:10:b5:f1:dd:eb:
         3f:31:81:95:e9:2b:1c:e3:a8:61:5c:96:a0:d7:34:77:f1:a4:
         69:90:54:53:9d:54:ed:ca:9c:37:20:0e:43:65:59:4c:02:0a:
         56:be:07:6b:6b:03:92:f7:ff:ed:0a:c6:95:89:10:06:97:00:
         e0:f4:ef:12:69:6b:68:ee:f3:0a:97:da:74:31:41:21:dd:24:
         e8:26:11:db:2e:82:eb:0c:93:29:4c:7e:26:2a:8a:d4:ac:dc:
         07:f6:e6:57:78:3b:34:81:de:24:aa:92:3f:9a:4e:8f:32:8e:
         77:85:24:3c:e4:9d:13:0f:c4:c7:05:3a:b2:ef:29:b4:3c:65:
         56:54:71:e4:f9:55:66:13:f5:7d:9a:20:4c:d4:75:89:d6:9c:
         f9:d0:03:c9:90:8f:7b:1a:d5:3e:fa:9a:6c:af:db:91:03:61:
         57:35:00:0b:8b:d5:ae:7f:12:9f:19:9c:4a:33:75:88:7e:81:
         2a:13:8b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:16:15 2026 by rpki-client