Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/c5e4f88d-2b48-3259-a1dc-3a1d758134d2.roa
File:                     c5e4f88d-2b48-3259-a1dc-3a1d758134d2.roa (raw, json)
Hash identifier:          xXkM5mn/6Z13YLUr18GgsaCKZi38dVbJV1Ofd0zq2zM=
Subject key identifier:   DA:D9:4E:16:2E:71:54:36:F2:E7:D8:A0:0F:CF:37:3F:55:83:99:0C
Certificate issuer:       /CN=05e336d7-fd68-448f-97a9-1e062f1a6b56
Certificate serial:       010D0C9F4328584C794C3FB15357DE891070F780
Authority key identifier: F0:6A:81:19:4F:8E:3A:C2:D0:9B:49:21:60:40:EB:81:4C:2F:00:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/c5e4f88d-2b48-3259-a1dc-3a1d758134d2.roa
Signing time:             Sat 10 Jan 2026 02:00:31 +0000
ROA not before:           Sat 10 Jan 2026 02:00:31 +0000
ROA not after:            Fri 10 Apr 2026 01:00:31 +0000
asID:                     31898
IP address blocks:        23.172.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/05e336d7-fd68-448f-97a9-1e062f1a6b56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/05e336d7-fd68-448f-97a9-1e062f1a6b56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:79:4c:3f:b1:53:57:de:89:10:70:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05e336d7-fd68-448f-97a9-1e062f1a6b56
        Validity
            Not Before: Jan 10 02:00:31 2026 GMT
            Not After : Apr 10 01:00:31 2026 GMT
        Subject: CN=4f7f4c88-3b31-4c06-9641-1836d40da934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:5c:de:a0:65:2f:e9:18:b5:ea:05:87:b6:1b:
                    8b:f6:e5:8e:6d:f9:fd:64:ee:ff:43:6d:d3:60:c3:
                    50:c2:0d:8c:18:c0:f4:9e:cb:1a:95:81:a8:9e:1e:
                    40:c5:07:db:66:e6:13:8e:85:6b:64:19:95:63:68:
                    83:ee:e9:45:a1:54:45:43:76:fe:b7:ce:5d:60:41:
                    6f:4a:43:e4:30:75:11:de:8d:a5:a2:00:7f:6b:90:
                    e9:34:77:f0:f1:2a:58:c2:c8:e1:37:a7:46:95:63:
                    8f:ec:36:2f:6b:40:ad:3a:44:5f:e0:19:74:af:4c:
                    78:b8:a8:e4:59:09:47:d1:3a:eb:e9:32:39:a7:df:
                    5d:ff:af:d0:b3:81:ac:72:d0:31:85:b3:94:3b:96:
                    73:55:7b:bf:0f:9c:eb:28:26:75:f6:b7:81:2b:4a:
                    c2:99:f0:61:83:59:eb:63:d7:7d:4f:f7:11:c8:65:
                    0a:28:d3:3b:45:fe:7c:6d:f0:76:3d:96:1d:cb:78:
                    a6:f7:02:35:89:1c:06:5d:e5:cd:8b:b6:2e:c8:2e:
                    9b:9f:e0:4d:3f:4a:45:97:5a:e7:56:7e:41:a9:84:
                    53:af:f3:5c:4d:b9:bf:8a:aa:1d:ae:59:0b:1c:4a:
                    3b:a1:70:86:29:3c:ae:40:ad:2a:57:f0:f3:cf:d0:
                    98:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D9:4E:16:2E:71:54:36:F2:E7:D8:A0:0F:CF:37:3F:55:83:99:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/c5e4f88d-2b48-3259-a1dc-3a1d758134d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56/05e336d7-fd68-448f-97a9-1e062f1a6b56.crl

            X509v3 Authority Key Identifier:
                keyid:F0:6A:81:19:4F:8E:3A:C2:D0:9B:49:21:60:40:EB:81:4C:2F:00:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05e336d7-fd68-448f-97a9-1e062f1a6b56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:13:d6:1e:f8:f9:8b:d6:c5:1f:86:29:d2:74:7f:b0:c2:2a:
         78:af:ed:3f:be:6b:43:3f:f1:80:92:b3:d4:30:4a:28:ab:47:
         94:5a:de:72:75:9b:8c:d4:6a:2b:05:ac:0d:54:c8:97:34:35:
         60:9a:50:0c:2a:a6:fe:45:26:f5:89:c2:a2:40:fb:7e:67:5e:
         d7:01:45:98:61:35:02:c0:16:c9:09:a9:dc:5d:8d:c7:2e:f6:
         f9:54:1f:ce:4b:17:a7:bc:a7:fb:f1:5b:4e:f4:c5:cb:fd:fe:
         06:c7:3a:35:78:9b:db:68:47:24:4e:93:9e:d2:ab:7a:41:cd:
         6a:cd:c1:24:43:74:21:fb:50:d5:e3:96:dc:a7:ba:34:2a:f4:
         38:67:53:48:51:42:e3:13:75:0e:2b:dd:15:cd:41:dd:d5:df:
         26:4b:14:62:fb:ae:bb:25:b1:b6:dc:4f:a8:3f:ed:32:5e:2e:
         79:6a:bc:f7:37:dc:ba:11:27:37:aa:ba:39:5c:73:c0:1c:c9:
         d7:48:c1:ca:57:a1:57:a6:fc:c5:15:57:dd:40:6a:8e:87:23:
         d3:4f:56:52:e4:30:90:6f:e2:8f:ac:80:89:2a:38:32:8e:84:
         0f:21:aa:d5:3b:42:7c:46:82:ab:bc:28:12:ce:00:88:eb:3f:
         5c:c9:0e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 04:07:28 2026 by rpki-client