Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666/b5d3b8b8-63ac-36ae-b644-79499caed76d.roa
File:                     b5d3b8b8-63ac-36ae-b644-79499caed76d.roa (raw, json)
Hash identifier:          Ki7l2FnWHa0sX7Mcz8YSHiEjLNBiKlt9MWpH1OZ9X6Q=
Subject key identifier:   74:AB:99:E6:5C:DB:1D:27:48:59:B2:76:7A:A7:E0:02:FC:12:38:85
Certificate issuer:       /CN=30fb5362-ced8-4e1b-93c6-3ce7a2019666
Certificate serial:       010D0C9F4328584CB551C37B1A9B9C7283E5AA00
Authority key identifier: 54:78:83:B4:D0:E8:07:DB:C4:45:BD:F6:C1:93:DD:78:3E:61:AF:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666/b5d3b8b8-63ac-36ae-b644-79499caed76d.roa
Signing time:             Sat 31 Jan 2026 14:00:39 +0000
ROA not before:           Sat 31 Jan 2026 14:00:39 +0000
ROA not after:            Fri 01 May 2026 13:00:39 +0000
asID:                     30381
IP address blocks:        23.146.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666/30fb5362-ced8-4e1b-93c6-3ce7a2019666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666/30fb5362-ced8-4e1b-93c6-3ce7a2019666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Feb 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b5:51:c3:7b:1a:9b:9c:72:83:e5:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30fb5362-ced8-4e1b-93c6-3ce7a2019666
        Validity
            Not Before: Jan 31 14:00:39 2026 GMT
            Not After : May  1 13:00:39 2026 GMT
        Subject: CN=f46373ce-8e70-4586-a4da-b92d1a170610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1e:6a:f5:14:45:9e:ca:8d:b7:02:62:96:55:
                    90:a7:bf:7e:54:57:06:a5:30:aa:ea:bc:b1:85:88:
                    e9:82:1a:fe:c5:19:e2:d2:90:38:12:cb:72:e9:3b:
                    fb:1c:a8:01:a0:ca:87:05:fb:c0:ef:6a:7d:6e:0e:
                    fe:09:4f:f7:ec:91:1a:5b:62:ee:81:48:a9:fe:6c:
                    d5:43:29:87:36:5f:69:6b:13:a2:83:fd:80:c3:8a:
                    5b:2f:2f:14:43:af:bf:0c:a7:dd:4b:f3:cb:9c:a6:
                    c5:fc:21:08:f6:7b:39:b0:28:9b:d0:9a:e7:e7:52:
                    75:ed:e8:30:5f:9f:96:fc:44:eb:9a:bb:85:1b:d7:
                    f9:24:e3:e5:f9:d3:90:19:cc:52:7e:44:27:4c:a8:
                    9f:60:56:df:04:e8:c6:90:c1:c0:5b:82:93:1a:a6:
                    c7:cc:ff:57:a5:1d:63:b5:9e:eb:32:4e:67:81:03:
                    f3:f9:ad:27:51:3f:98:22:0c:53:01:88:ba:4c:2d:
                    dd:eb:fb:a1:9f:b4:ce:42:a6:3d:34:d4:9f:7d:3f:
                    d9:5a:39:1d:cb:07:6a:03:1e:b2:d9:23:0c:d4:6c:
                    76:26:91:dc:2e:dd:63:3e:65:64:e0:50:23:8d:ae:
                    c9:e0:f4:bf:15:cd:99:67:f0:5f:3a:fa:2d:ed:78:
                    c2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:AB:99:E6:5C:DB:1D:27:48:59:B2:76:7A:A7:E0:02:FC:12:38:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666/b5d3b8b8-63ac-36ae-b644-79499caed76d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666/30fb5362-ced8-4e1b-93c6-3ce7a2019666.crl

            X509v3 Authority Key Identifier:
                keyid:54:78:83:B4:D0:E8:07:DB:C4:45:BD:F6:C1:93:DD:78:3E:61:AF:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30fb5362-ced8-4e1b-93c6-3ce7a2019666.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ff:db:1b:1d:bb:92:cd:54:83:2e:54:4b:b5:d1:95:e0:e9:
         72:b2:38:24:c9:32:c0:ef:91:9b:0d:c8:59:b5:aa:f7:f0:bc:
         6e:b9:98:8d:f6:c7:cf:2c:14:26:be:8e:07:ad:a5:11:c2:08:
         1e:d8:1b:49:3b:47:3d:55:d1:69:67:3b:01:09:0b:35:cf:f6:
         f8:ad:52:ef:bf:40:0c:93:6a:7e:c3:6e:91:84:a1:75:c3:16:
         c4:70:a4:aa:fe:69:b2:ef:71:7c:9b:87:04:38:d2:34:20:59:
         10:c1:17:42:da:e0:23:1a:8b:2d:2c:57:ce:df:2d:55:93:bd:
         e2:a0:30:91:c6:bc:d6:cc:b7:ea:41:a4:54:2c:4c:e4:df:5e:
         6c:89:77:b9:e2:ac:9d:7c:4c:63:71:98:a4:c5:ea:5a:96:8f:
         22:38:bb:04:62:74:d4:d1:87:b6:09:55:3f:76:b8:95:46:49:
         48:d1:89:51:1d:cf:71:a0:b9:e4:3e:2b:52:63:73:4f:31:87:
         a2:06:93:bc:99:31:e4:1f:3d:d7:fd:40:96:8a:c3:f7:ae:9f:
         72:4c:a0:b7:de:7e:aa:02:f5:f4:13:23:60:9f:b9:ef:30:7d:
         75:e4:2e:46:f3:66:01:87:2c:85:17:a4:6f:60:52:95:a6:d3:
         57:20:36:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:57:44 2026 by rpki-client