Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/f165927a-53de-3a0c-b494-0086f4e6bc36.roa
File:                     f165927a-53de-3a0c-b494-0086f4e6bc36.roa (raw, json)
Hash identifier:          yhraaJdCrFAmdhPQ1Ilv0o3kLXvH08POJCFbxltXSGo=
Subject key identifier:   06:BD:3F:D0:B3:DD:B2:ED:86:03:28:B0:6D:C9:96:A4:16:82:EC:E8
Certificate issuer:       /CN=8c2edafd-cabf-41fb-a360-7f06dd982529
Certificate serial:       010D0C9F4328584C969C46B6EB60C950B63C68C0
Authority key identifier: 82:81:2B:E4:FB:03:3A:95:F7:77:E0:7F:55:59:95:AD:59:04:4F:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/f165927a-53de-3a0c-b494-0086f4e6bc36.roa
Signing time:             Tue 20 Jan 2026 14:00:39 +0000
ROA not before:           Tue 20 Jan 2026 14:00:39 +0000
ROA not after:            Mon 20 Apr 2026 13:00:39 +0000
asID:                     397454
IP address blocks:        23.131.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/8c2edafd-cabf-41fb-a360-7f06dd982529.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/8c2edafd-cabf-41fb-a360-7f06dd982529.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:96:9c:46:b6:eb:60:c9:50:b6:3c:68:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c2edafd-cabf-41fb-a360-7f06dd982529
        Validity
            Not Before: Jan 20 14:00:39 2026 GMT
            Not After : Apr 20 13:00:39 2026 GMT
        Subject: CN=2ccba3b5-2481-49c4-a27b-ea1d71ce6c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:be:54:63:f2:54:23:8e:ca:e0:0d:87:45:e5:
                    20:33:f9:51:a2:d0:9c:6a:6b:fe:b8:82:2d:56:ad:
                    0f:a3:7c:b6:ab:8f:51:68:32:73:eb:f7:fb:ce:d7:
                    69:9d:f2:a8:5b:13:2c:ca:76:25:4b:c7:78:7b:b2:
                    26:03:3a:a2:ec:48:87:46:59:2f:b5:91:61:12:22:
                    92:e4:48:23:1e:72:50:7b:82:7c:9a:69:99:76:e4:
                    7c:b0:a2:8a:7c:c0:90:ab:a4:f2:da:df:50:5f:95:
                    1c:eb:0f:89:e7:c7:02:ad:4f:df:69:15:27:7c:bf:
                    19:99:00:cb:58:10:64:e3:97:08:4e:ca:05:90:bb:
                    b3:df:d3:cc:90:46:8a:ec:c8:63:79:bb:ec:65:49:
                    ad:99:a8:e7:73:ec:57:28:a5:7e:3d:dc:0c:8f:cc:
                    f9:8c:a0:79:1b:54:81:ff:92:ff:35:74:dc:f1:51:
                    40:67:d0:d8:58:e1:ae:55:b5:66:25:1e:54:3f:8f:
                    9e:4b:17:15:ed:d5:5c:5c:7c:37:af:68:a8:e4:b6:
                    27:ad:3c:ba:a9:e5:18:50:0a:e5:75:f6:3a:30:33:
                    f4:53:8d:21:e8:9c:88:a6:a5:90:b2:95:a4:56:f5:
                    d1:6f:b5:b9:a8:32:3f:56:80:0e:64:a9:65:ab:fe:
                    b8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:BD:3F:D0:B3:DD:B2:ED:86:03:28:B0:6D:C9:96:A4:16:82:EC:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/f165927a-53de-3a0c-b494-0086f4e6bc36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529/8c2edafd-cabf-41fb-a360-7f06dd982529.crl

            X509v3 Authority Key Identifier:
                keyid:82:81:2B:E4:FB:03:3A:95:F7:77:E0:7F:55:59:95:AD:59:04:4F:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8c2edafd-cabf-41fb-a360-7f06dd982529.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:31:e3:eb:a0:ed:bb:12:b5:05:c3:58:63:4e:a3:b1:9c:24:
         69:22:eb:97:4c:db:a9:78:43:63:16:b1:d0:a2:de:df:01:03:
         2a:33:90:4e:02:5f:db:1d:57:3b:a3:0c:d7:77:e0:47:f2:da:
         7e:27:13:b9:8b:a4:61:c4:41:ee:c2:8e:8c:e3:24:87:22:d9:
         05:9d:c3:de:88:1c:bb:b3:25:3e:33:5f:01:3f:54:38:63:1d:
         91:fd:ca:f5:1a:e3:1a:e0:2c:ef:10:a9:da:a0:9b:d7:ae:91:
         d0:91:dd:ef:34:60:18:80:21:e2:dc:a1:57:ff:6c:08:96:d1:
         89:42:5b:be:e3:b6:f2:74:9e:db:0d:0f:6e:4c:01:05:45:43:
         5d:3b:dc:63:e4:37:2f:5a:3f:38:ee:b4:d5:56:85:10:ba:3c:
         2b:bd:75:65:67:ab:c0:64:dd:ea:85:80:48:1a:da:87:d5:2c:
         5b:02:4b:7c:43:8a:f0:e8:41:0a:dc:b2:68:bf:7a:26:75:d2:
         cd:54:55:2d:f6:68:5a:f3:c3:57:21:66:50:b7:d2:ed:69:87:
         ce:45:55:10:30:e4:12:97:4c:30:7f:ab:9e:bc:6d:93:6e:c4:
         0d:eb:0b:8d:a1:7b:e2:aa:45:a1:74:47:d8:d2:a5:c5:cd:d4:
         ec:20:29:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 04:07:30 2026 by rpki-client