Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa
File:                     c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa (raw, json)
Hash identifier:          AQCldDeNF8yCEpBwuTEn2oSQGcYIYSw7egIKY+eMLHY=
Subject key identifier:   6C:7B:D7:26:FB:3D:7E:32:A2:C8:EA:51:94:FD:96:37:40:C2:CB:05
Certificate issuer:       /CN=cf96d190-5b35-4b24-ac78-599aa0e50405
Certificate serial:       010D0C9F4328584CCD0CA32A64129A921EBB9840
Authority key identifier: 56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa
Signing time:             Mon 09 Feb 2026 02:00:31 +0000
ROA not before:           Mon 09 Feb 2026 02:00:31 +0000
ROA not after:            Sun 10 May 2026 01:00:31 +0000
asID:                     400655
IP address blocks:        23.191.184.0/24 maxlen: 24
                          2602:f7e4::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:cd:0c:a3:2a:64:12:9a:92:1e:bb:98:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf96d190-5b35-4b24-ac78-599aa0e50405
        Validity
            Not Before: Feb  9 02:00:31 2026 GMT
            Not After : May 10 01:00:31 2026 GMT
        Subject: CN=f4405532-049d-46c4-8e83-b288e1ed4c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ab:1b:f0:f2:a2:d1:ab:f2:4c:eb:77:11:ef:
                    e6:74:41:8d:f7:4a:ac:e4:16:0e:70:e0:5f:a5:86:
                    54:a5:ee:c5:87:6c:bd:36:20:38:ec:e5:fa:6b:e9:
                    3c:90:fd:02:41:18:89:9c:83:cb:09:d0:7d:47:92:
                    de:53:9d:9e:b6:cf:2f:89:94:dc:d8:d3:63:a4:e3:
                    cc:bf:6c:06:52:0d:f8:55:55:9e:35:c6:a6:1f:5d:
                    da:0a:82:68:6b:5a:1a:53:6c:89:40:a2:0e:40:9e:
                    11:e1:51:a8:76:91:25:31:61:55:f3:ea:78:57:c9:
                    d7:22:08:a1:5e:4f:40:16:9f:7b:1b:9c:4c:b8:d2:
                    14:06:99:df:a0:d8:12:a7:e9:3b:f8:85:ed:a5:6f:
                    8e:5e:ba:f9:88:cf:6b:e0:54:57:42:0b:12:da:59:
                    54:e0:3c:61:29:2b:ce:7f:36:6c:f8:0f:5e:1a:56:
                    e2:98:0f:24:26:14:f4:17:f5:92:9a:fa:69:35:6d:
                    bd:2a:9d:70:5f:52:b2:11:c2:f5:85:3f:ba:67:2b:
                    1d:a1:8d:fb:9e:a2:b1:b1:bb:e1:3b:44:60:0d:af:
                    b2:c8:3f:13:09:d6:ae:6a:99:cd:73:6a:22:a1:2d:
                    66:14:d6:f1:b9:ed:ed:24:28:24:f0:3f:68:50:76:
                    29:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:7B:D7:26:FB:3D:7E:32:A2:C8:EA:51:94:FD:96:37:40:C2:CB:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/c7802a2b-f10d-3f9f-b4b5-5f85ccb933de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405/cf96d190-5b35-4b24-ac78-599aa0e50405.crl

            X509v3 Authority Key Identifier:
                keyid:56:97:1D:BB:93:D3:52:CE:15:61:9B:81:22:B2:A7:B6:42:51:FB:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cf96d190-5b35-4b24-ac78-599aa0e50405.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.184.0/24
                IPv6:
                  2602:f7e4::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:a7:79:a4:18:2e:26:9f:6b:48:31:c2:fc:94:91:ef:4d:aa:
         73:69:b8:f3:ba:eb:54:37:b5:12:3a:13:72:2e:aa:00:e6:c2:
         0f:15:15:69:9a:5a:88:62:f0:59:a6:a0:79:83:fb:4d:a7:fb:
         a3:c1:75:98:38:9e:11:ed:92:6a:98:be:c4:fc:e8:25:73:8d:
         6c:f6:b9:78:c6:72:bd:ba:6b:30:69:bd:f3:11:df:33:e1:df:
         0f:fd:bd:21:11:51:c8:ac:43:5d:94:de:a6:69:2f:3b:ae:74:
         25:e0:61:69:19:61:85:ca:31:51:9b:f4:fe:09:52:75:64:2d:
         30:31:54:4b:41:31:3b:c2:f2:e6:f9:72:b9:67:d2:c2:5a:7e:
         1d:8b:b8:67:00:27:99:b0:17:98:f2:0c:a4:53:2c:55:de:d6:
         90:31:32:07:12:6f:dc:0f:94:16:90:06:16:8f:9f:aa:c2:09:
         86:ad:d6:b0:ef:ba:75:f6:b2:c1:8b:91:c7:85:d2:ee:d1:b0:
         e7:09:96:76:08:79:61:51:b8:6c:bf:24:31:a8:ed:06:b8:72:
         ad:a1:2b:39:f3:9c:29:c6:97:c9:44:57:b2:0f:ac:4e:25:94:
         0f:c7:29:b4:ac:96:5b:db:07:64:8e:bc:fc:93:77:28:05:de:
         d3:fb:95:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 17:01:29 2026 by rpki-client