Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b2529281-328f-3c56-ba26-fa3369935be8.roa
File:                     b2529281-328f-3c56-ba26-fa3369935be8.roa (raw, json)
Hash identifier:          H/ITs9ggzXB9nHmSqa97nhzCOKLEG3pRLdwEkr9rkp4=
Subject key identifier:   A1:F6:7A:E2:AF:B4:FC:75:13:31:BB:4D:FD:D8:C9:A7:0A:DD:69:39
Certificate issuer:       /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial:       010D0C9F4328584CE8F7683D2EBF28241056A5E0
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b2529281-328f-3c56-ba26-fa3369935be8.roa
Signing time:             Thu 19 Feb 2026 02:00:32 +0000
ROA not before:           Thu 19 Feb 2026 02:00:32 +0000
ROA not after:            Wed 20 May 2026 01:00:32 +0000
asID:                     55286
IP address blocks:        23.236.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e8:f7:68:3d:2e:bf:28:24:10:56:a5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
        Validity
            Not Before: Feb 19 02:00:32 2026 GMT
            Not After : May 20 01:00:32 2026 GMT
        Subject: CN=c395a17d-6d3c-4af1-9723-6f1827400441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:5d:99:13:26:54:e1:28:7c:2f:6a:4c:a3:
                    c5:f0:5a:eb:50:fa:7a:5d:46:62:ea:9d:92:0c:b8:
                    6a:89:00:32:f1:60:72:54:ba:47:97:13:7b:fe:d9:
                    ac:0f:14:78:b0:da:79:24:f8:09:a8:79:92:8b:fb:
                    d3:b8:04:4d:4a:a2:77:c1:f7:81:2d:bb:8e:0b:48:
                    01:67:b4:a9:aa:9c:da:4d:e5:5d:83:66:d6:57:cd:
                    6b:05:b1:b1:b3:14:31:14:7b:78:35:1f:15:81:2f:
                    bb:da:06:ed:e9:58:3f:46:69:e4:31:57:f8:1b:0c:
                    e4:f2:7a:5c:0c:ad:57:7b:09:5d:21:69:d8:cd:8a:
                    3b:b9:e4:2d:8e:89:9e:59:c7:b4:1f:b2:93:1a:43:
                    b0:a0:bd:10:d1:00:6e:fe:05:2d:59:34:24:69:a8:
                    3f:aa:a7:4c:27:9e:53:d6:bf:52:ff:bc:c3:14:49:
                    ec:df:7b:46:92:a1:2d:5f:90:10:06:d3:39:2a:9e:
                    5c:6e:e9:75:6e:10:3a:6c:1c:4a:81:32:6a:32:e0:
                    8d:3c:42:b2:0c:73:6b:b8:e2:02:0b:80:1e:dd:a7:
                    5e:26:da:f3:e8:65:c8:8b:d2:0d:72:01:3b:6c:69:
                    23:55:17:c8:5e:fa:89:cb:07:1e:8d:7b:39:67:c5:
                    c4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F6:7A:E2:AF:B4:FC:75:13:31:BB:4D:FD:D8:C9:A7:0A:DD:69:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b2529281-328f-3c56-ba26-fa3369935be8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl

            X509v3 Authority Key Identifier:
                keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.236.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:01:e4:47:ae:1c:17:46:e5:a0:51:15:b4:15:86:75:02:2b:
         37:3c:30:7b:24:fc:89:d9:fe:05:35:66:9b:74:b4:93:47:0a:
         bf:8c:d6:21:ea:37:99:a3:a9:30:d9:08:67:5a:5c:46:6b:23:
         73:fa:fa:9b:db:ec:13:bc:a8:a6:0d:03:d0:a4:e3:70:6f:8f:
         59:a5:71:4b:63:25:18:76:31:b6:a6:fe:96:b9:72:6d:2d:ac:
         dc:50:8f:7d:b7:0c:e4:cd:bc:60:e7:88:26:3c:f8:f0:a6:dd:
         23:df:dd:0f:0c:4c:f1:a9:a5:b9:97:bd:48:73:07:dd:ff:b0:
         6c:83:84:f7:32:af:57:1d:81:e3:b7:bb:95:eb:e5:6f:28:c3:
         63:2b:55:62:bf:e9:f0:89:7d:b5:a0:2d:52:4c:a0:bb:60:63:
         98:a1:8e:c7:43:75:b4:e6:5a:86:72:32:fc:1b:57:c6:93:06:
         57:09:26:aa:ae:37:31:99:3f:a4:70:46:10:cd:7e:4f:66:5a:
         f6:55:63:68:e3:69:51:83:88:08:e9:f6:6f:6a:cc:9d:b5:82:
         93:b7:87:86:e1:d3:cd:d7:33:cb:d7:08:13:64:dd:27:39:1c:
         61:9e:dd:2b:16:2e:92:c8:b5:09:8a:a9:d0:92:aa:cf:10:5f:
         94:bb:e7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 23:52:24 2026 by rpki-client