Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/80c574ba-2db3-36e1-9b1a-9fca3475e4d0.roa
File:                     80c574ba-2db3-36e1-9b1a-9fca3475e4d0.roa (raw, json)
Hash identifier:          VE99DcaIF5bveylna8W+EkdwpboG1R6CA5Dj55ufNsM=
Subject key identifier:   39:9E:DB:D5:B8:D1:B3:CE:12:55:64:9A:9B:0C:8A:43:46:F2:27:7A
Certificate issuer:       /CN=3f5f9855-5e8e-495a-9caa-dee2f22bdbc6
Certificate serial:       010D0C9F4328584F86DDB23331ED5DD34E0FF7D0
Authority key identifier: CE:04:33:09:CA:13:55:30:CB:8E:7E:93:C8:41:FC:57:75:8F:AE:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/80c574ba-2db3-36e1-9b1a-9fca3475e4d0.roa
Signing time:             Sat 17 Oct 2026 01:00:13 +0000
ROA not before:           Sat 17 Oct 2026 01:00:13 +0000
ROA not after:            Fri 15 Jan 2027 02:00:13 +0000
asID:                     906
IP address blocks:        23.176.200.0/24 maxlen: 24
                          131.143.180.0/22 maxlen: 24
                          179.253.224.0/19 maxlen: 24
                          179.255.96.0/19 maxlen: 24
                          179.255.128.0/19 maxlen: 24
                          191.222.208.0/20 maxlen: 24
                          191.223.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:86:dd:b2:33:31:ed:5d:d3:4e:0f:f7:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f5f9855-5e8e-495a-9caa-dee2f22bdbc6
        Validity
            Not Before: Oct 17 01:00:13 2026 GMT
            Not After : Jan 15 02:00:13 2027 GMT
        Subject: CN=65f45384-1c78-43e5-adcb-57e5bcfa892c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:99:13:9a:32:ce:2a:f7:a7:d5:0e:1b:8c:59:
                    c9:8b:4b:d3:0f:15:f5:0a:f0:87:08:54:1b:0d:9c:
                    71:86:89:31:06:97:d9:a7:4b:49:f1:b8:c4:b0:21:
                    1f:c5:92:c8:40:64:b8:62:b5:14:10:23:7d:5b:0a:
                    71:f8:06:5a:4c:14:0c:17:ee:47:d9:56:c6:69:e5:
                    54:01:79:bd:f9:84:9e:27:95:2d:87:a6:17:56:41:
                    98:c2:34:ab:3a:6f:e5:b1:90:96:fc:b5:8b:a8:82:
                    0a:59:48:33:44:01:1a:09:80:d1:65:d5:ee:91:07:
                    ce:04:bb:ac:a2:49:9b:30:9e:fe:44:45:4b:69:49:
                    cb:d7:96:f1:b5:6a:aa:cb:b9:c4:90:dd:dc:31:87:
                    69:f7:6a:0a:61:83:2f:c7:20:34:6d:6a:76:ea:40:
                    b3:16:bb:02:86:a5:18:3a:97:84:7f:1f:08:28:4d:
                    c8:c7:e0:2b:8d:01:87:fe:57:0a:76:21:43:f4:e7:
                    24:76:30:8d:6f:e0:28:ca:28:7f:86:7e:88:3b:b4:
                    e5:70:1f:0f:ed:66:b4:f7:43:8e:9d:5b:ee:ba:67:
                    c1:1f:46:85:e7:fe:74:da:19:2c:be:83:d2:0a:71:
                    22:65:7c:84:ec:77:40:50:ac:60:e2:cc:db:1d:7b:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:9E:DB:D5:B8:D1:B3:CE:12:55:64:9A:9B:0C:8A:43:46:F2:27:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/80c574ba-2db3-36e1-9b1a-9fca3475e4d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.crl

            X509v3 Authority Key Identifier:
                keyid:CE:04:33:09:CA:13:55:30:CB:8E:7E:93:C8:41:FC:57:75:8F:AE:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.200.0/24
                  131.143.180.0/22
                  179.253.224.0/19
                  179.255.96.0-179.255.159.255
                  191.222.208.0/20
                  191.223.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:22:b5:f0:c6:67:3e:88:13:fd:5f:3d:aa:18:2c:2e:44:31:
         bd:5d:84:8d:e4:a4:27:f5:fd:5d:ce:2d:68:f0:66:e1:6b:23:
         af:bb:ba:cf:c6:31:01:41:f3:d7:c4:62:55:db:9d:52:42:1f:
         b0:25:6a:3c:af:ab:41:57:55:15:c1:76:60:6e:11:88:1f:21:
         8b:c5:13:2f:ec:b6:ff:5a:86:13:37:6d:7e:5d:d8:6a:cb:1d:
         48:62:ae:2e:a0:61:cf:7c:0b:91:e1:bd:b8:b0:03:73:3c:22:
         f3:ee:b9:5a:b4:6b:4d:d5:3e:ba:f5:79:81:29:aa:25:e2:f7:
         ca:12:68:e7:7a:13:3b:41:dd:da:d5:b7:84:55:8d:ba:bf:a4:
         08:cc:55:48:3c:81:97:84:d3:ba:b2:80:dc:db:88:25:14:c0:
         cd:86:23:b4:8d:17:f6:a2:0c:69:72:78:1c:c1:30:03:80:92:
         78:d9:e4:70:91:a6:87:88:be:0d:8b:67:e9:b8:24:43:75:90:
         fe:f8:77:5c:48:39:1e:14:5d:27:86:7a:33:b6:64:2a:86:20:
         81:77:8e:13:97:38:38:c1:5d:aa:5b:de:9e:09:bf:76:17:7a:
         06:9f:86:3c:ec:3d:8c:03:74:e3:6b:cf:6a:4b:37:32:11:62:
         5e:15:f0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:26:15 2026 by rpki-client