Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa
File:                     12e1d236-b7f8-37db-8d5d-f604225f8f77.roa (raw, json)
Hash identifier:          9ETpHbdWyshrYybU6xBm1UVxB5O/SR0wu5WbYHB6i7Q=
Subject key identifier:   18:3C:6E:CF:23:1D:5D:1F:5C:98:B9:50:08:6D:CC:ED:B8:2B:2C:CE
Certificate issuer:       /CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
Certificate serial:       010D0C9F4328584CC7774D71F2B8C6312E680B00
Authority key identifier: 8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa
Signing time:             Sat 07 Feb 2026 02:00:31 +0000
ROA not before:           Sat 07 Feb 2026 02:00:31 +0000
ROA not after:            Fri 08 May 2026 01:00:31 +0000
asID:                     30006
IP address blocks:        23.191.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c7:77:4d:71:f2:b8:c6:31:2e:68:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d619cd3-f969-49ad-ac09-3fb40392cdc5
        Validity
            Not Before: Feb  7 02:00:31 2026 GMT
            Not After : May  8 01:00:31 2026 GMT
        Subject: CN=f3dd7af5-c749-4d13-9876-614ff9288230
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f0:a3:b9:a1:4a:55:26:ef:1e:ec:9c:ac:9d:
                    9a:bb:c8:62:d6:c7:02:7c:2d:08:26:8a:af:09:1c:
                    e1:81:9f:f1:4d:41:65:ff:3e:90:d5:f7:83:ba:24:
                    ab:06:92:74:0b:36:58:3e:a7:03:20:83:12:b5:f4:
                    de:06:8c:27:54:af:83:4c:9e:e1:a6:b5:de:c8:52:
                    af:43:f9:ea:6d:80:10:1c:ee:11:61:52:6a:0d:5c:
                    fa:28:fe:4e:ab:02:8b:bb:73:4b:ce:bb:14:a4:82:
                    7a:dd:49:52:9a:43:6b:9f:0e:99:ea:45:49:37:74:
                    2f:db:b6:e6:59:52:0c:f9:5b:c6:6b:4a:65:e0:65:
                    39:62:ea:d7:6d:4e:86:de:1e:02:6b:51:53:55:51:
                    9e:fb:27:a0:15:d3:95:90:d4:d8:9e:a6:59:9f:32:
                    87:91:d8:8a:4f:10:44:eb:06:e0:c3:8b:b0:8e:2e:
                    1f:a3:2f:e9:ee:ff:ed:c9:32:ba:5d:5d:7b:fa:d1:
                    96:ee:a1:77:6a:4e:a2:ce:89:96:80:ef:77:8c:78:
                    a9:b1:46:aa:a4:a9:f7:89:09:b0:e4:c0:df:d2:ce:
                    07:4f:7f:dd:5f:6a:9f:db:29:06:9d:33:28:d7:59:
                    85:d2:1f:f3:96:ed:f3:a9:65:24:8b:71:dd:7d:d1:
                    5c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3C:6E:CF:23:1D:5D:1F:5C:98:B9:50:08:6D:CC:ED:B8:2B:2C:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/12e1d236-b7f8-37db-8d5d-f604225f8f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5/8d619cd3-f969-49ad-ac09-3fb40392cdc5.crl

            X509v3 Authority Key Identifier:
                keyid:8F:79:41:42:96:99:E1:90:A8:95:56:77:57:30:D5:D3:A9:09:80:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8d619cd3-f969-49ad-ac09-3fb40392cdc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:7a:a5:fa:90:e3:47:63:57:c1:93:fa:93:29:4e:9c:a0:32:
         7e:02:5c:45:a2:c2:c9:31:45:58:dd:c6:b9:26:9b:be:b2:70:
         28:2e:ec:d1:14:5d:71:df:2e:fb:11:d2:8d:da:7d:4f:72:20:
         b6:50:2d:c6:7a:9b:8d:77:f3:c5:f5:75:69:0b:40:bd:18:60:
         cf:57:02:37:00:0d:ba:bb:9e:c2:cb:c6:b3:e2:d8:79:66:bd:
         d0:e5:fc:aa:1d:51:92:4d:7a:dd:18:e4:c0:80:cd:5e:cf:9b:
         96:d9:f7:22:c0:f0:62:19:50:e9:e4:d3:4c:12:16:2b:76:78:
         dd:a9:ad:cc:58:9c:b9:b3:68:55:e0:d6:98:93:a8:71:b6:df:
         43:c0:48:e5:e3:59:67:f5:ba:46:06:82:8a:4f:f1:54:0b:a1:
         0d:f0:dc:74:73:dc:a9:d0:b9:e4:ea:15:17:d1:62:d1:4b:ec:
         42:49:62:81:87:c6:e3:55:5d:1d:9c:bb:13:88:bc:ef:f0:72:
         67:5b:4a:6d:9a:9f:ff:4b:60:82:68:3a:75:e0:5d:05:5f:da:
         df:70:fc:5f:29:76:0c:cc:99:37:94:6a:0a:9e:2e:cf:b0:b2:
         26:e2:6e:05:2c:06:37:78:7e:ba:9f:ff:2d:e6:65:d3:99:e0:
         e6:e3:ec:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 03:40:37 2026 by rpki-client