Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23ab77ad-748c-3f01-9478-7faff3319263.roa
File:                     23ab77ad-748c-3f01-9478-7faff3319263.roa (raw, json)
Hash identifier:          /qnAqCrz+YBgwZ4jRitdWivNDHyzjDqJ4RUGylmYeOw=
Subject key identifier:   CC:84:23:26:75:EF:A7:91:1F:69:2A:DC:44:A0:CE:B4:FE:E6:C9:4E
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584CB981E39001CB22B31A545600
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23ab77ad-748c-3f01-9478-7faff3319263.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     5650
IP address blocks:        168.93.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:e3:90:01:cb:22:b3:1a:54:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=4be16b32-8f64-4987-81f4-3743629841ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:35:fd:b3:10:b9:ba:88:e9:54:36:88:20:a9:
                    35:8c:ac:66:49:c1:b3:a4:ee:ac:7a:32:57:1d:a4:
                    cd:f8:eb:58:5b:fe:9d:0f:03:df:3b:dd:b0:6d:2e:
                    c9:75:2b:9a:2c:7c:32:fa:e9:fe:83:28:d1:bb:74:
                    27:eb:b4:6f:8e:1f:a5:02:28:d7:78:1f:8f:f6:81:
                    b3:6a:08:b7:2b:d8:3d:fe:ca:0f:07:dc:66:38:8b:
                    b4:ea:7a:93:f9:c8:6c:74:a5:1d:a8:04:b5:fb:d2:
                    89:20:c0:09:b5:06:4d:f7:c5:a0:0c:16:a4:69:ac:
                    44:10:c0:a0:72:76:90:34:c6:4c:de:0c:b0:55:f2:
                    a7:ac:26:ce:ea:06:07:30:91:f3:b1:72:d2:e1:a5:
                    58:4b:c7:ac:d4:c2:23:e7:ef:cf:a3:f0:7c:d3:c1:
                    6e:ab:e4:7a:44:92:46:df:eb:f3:dd:d6:ab:55:22:
                    e9:97:6f:35:4f:68:5c:ef:4c:ef:98:81:06:96:4a:
                    12:f7:8c:8e:a5:90:c7:d0:39:d9:e0:77:fc:0a:83:
                    a8:6c:47:87:08:8b:d7:a3:87:69:93:8d:bc:16:cf:
                    d6:e4:89:95:74:80:34:f3:a3:22:0d:37:f6:8e:85:
                    7c:26:b6:88:c8:d2:c6:00:bd:51:2c:c7:04:ca:f8:
                    5f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:84:23:26:75:EF:A7:91:1F:69:2A:DC:44:A0:CE:B4:FE:E6:C9:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/23ab77ad-748c-3f01-9478-7faff3319263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.93.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:41:ac:7a:3f:46:06:b4:7b:89:0a:cf:2e:b4:10:a9:1f:18:
         2c:4d:ea:06:c2:de:4a:d0:49:b8:51:ca:3a:86:ee:75:f4:bd:
         df:84:14:76:ac:02:86:c9:a1:80:17:ca:ef:14:b9:6a:e9:e6:
         37:27:81:35:45:6e:8e:02:a7:d3:e6:04:5d:ff:bc:f9:64:28:
         b7:f0:d1:7f:b4:c2:36:02:d1:f1:77:90:f1:21:98:8f:16:cb:
         3d:16:9e:ae:d0:88:36:81:3e:fe:27:7b:72:fb:2d:0b:e5:95:
         62:03:71:9c:b3:9b:ab:84:f9:8b:af:ff:49:8e:90:3c:f2:92:
         65:95:39:a6:80:cd:e3:e9:5e:5d:b8:dc:be:78:00:00:25:60:
         f9:71:ec:e8:05:23:f2:58:bf:91:44:21:6c:b0:6d:60:3f:8c:
         7d:2c:08:84:ed:7d:55:90:f2:d2:81:bd:68:84:9b:95:6b:79:
         07:6a:88:03:d2:81:2d:9e:7b:0a:04:f6:03:3d:01:68:f8:12:
         9f:66:29:9f:44:11:91:d5:4d:34:80:a9:a6:99:94:55:99:70:
         b1:7d:92:d1:41:87:1d:23:52:c6:73:80:8e:08:53:0e:28:4a:
         5c:d6:c9:d8:00:f5:a1:86:d4:a4:80:8a:b7:6a:5d:2c:7a:3d:
         51:c9:d0:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:29:35 2026 by rpki-client