Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/535a6c1a-5c26-31c8-b977-f58b54b4f2df.roa
File:                     535a6c1a-5c26-31c8-b977-f58b54b4f2df.roa (raw, json)
Hash identifier:          utR0GO8U33aawzscMfPSO9XFSKI1hQaSVE0QYsMBteA=
Subject key identifier:   91:27:57:98:E1:A5:7B:7F:29:0C:E6:C2:61:53:BD:8D:6C:0F:08:0E
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584F8F82B266C2633ECFD88356C0
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/535a6c1a-5c26-31c8-b977-f58b54b4f2df.roa
Signing time:             Tue 20 Oct 2026 03:19:23 +0000
ROA not before:           Tue 20 Oct 2026 03:19:23 +0000
ROA not after:            Sun 27 Dec 2026 10:43:50 +0000
asID:                     958
IP address blocks:        23.226.48.0/20 maxlen: 32
                          23.235.160.0/19 maxlen: 32
                          23.248.192.0/18 maxlen: 32
                          43.225.124.0/22 maxlen: 32
                          43.229.112.0/22 maxlen: 32
                          43.240.236.0/22 maxlen: 32
                          43.243.188.0/22 maxlen: 32
                          43.249.172.0/22 maxlen: 32
                          45.114.104.0/22 maxlen: 32
                          103.37.0.0/22 maxlen: 32
                          103.39.16.0/22 maxlen: 32
                          103.41.4.0/22 maxlen: 32
                          103.44.88.0/22 maxlen: 32
                          103.48.132.0/22 maxlen: 32
                          103.54.60.0/22 maxlen: 32
                          103.199.100.0/22 maxlen: 32
                          137.59.16.0/22 maxlen: 32
                          2604:1420::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:82:b2:66:c2:63:3e:cf:d8:83:56:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Oct 20 03:19:23 2026 GMT
            Not After : Dec 27 10:43:50 2026 GMT
        Subject: CN=a79247ae-6f24-4881-9fbc-8a19667a07ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2a:77:0e:49:b3:77:53:b9:4e:fc:fa:c2:3b:
                    8e:90:52:6e:19:5c:0f:78:01:f3:83:8a:d8:77:54:
                    2d:be:f6:a8:26:04:79:be:59:e3:c2:5d:80:7a:62:
                    e3:ee:93:f7:29:1d:95:0a:bd:ef:57:11:7c:3d:89:
                    09:ab:f5:35:85:50:45:74:d1:06:db:f6:04:14:f7:
                    39:54:2f:4f:e8:69:d8:1c:38:07:5b:b7:da:57:c0:
                    f4:7e:91:e6:f8:30:c0:62:f5:21:1e:f3:5c:dd:2e:
                    6f:ed:f3:9d:1a:64:74:bc:bc:5b:d6:3f:68:c1:38:
                    73:08:15:d2:f6:77:a3:97:bd:c0:20:9e:fc:81:fd:
                    a4:87:a8:25:78:ef:7f:18:65:74:f4:8f:c0:11:1b:
                    47:37:1d:c4:0d:6f:13:87:e3:72:26:e5:9a:28:ed:
                    d6:2f:6a:47:37:a6:31:de:c1:3c:2e:c4:de:dd:69:
                    52:2e:43:99:22:e2:54:12:a5:95:5b:c4:ba:c9:d5:
                    5d:61:06:79:52:9c:6a:d4:71:cd:8e:e6:dc:b4:29:
                    ff:56:51:93:4e:44:cb:95:28:a4:88:ba:0a:8b:c1:
                    76:e0:5f:a6:94:30:ed:07:23:14:24:39:5b:9f:84:
                    8b:86:36:b7:74:4d:0b:7a:bc:61:f2:bd:f7:2a:bc:
                    b2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:27:57:98:E1:A5:7B:7F:29:0C:E6:C2:61:53:BD:8D:6C:0F:08:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/535a6c1a-5c26-31c8-b977-f58b54b4f2df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.48.0/20
                  23.235.160.0/19
                  23.248.192.0/18
                  43.225.124.0/22
                  43.229.112.0/22
                  43.240.236.0/22
                  43.243.188.0/22
                  43.249.172.0/22
                  45.114.104.0/22
                  103.37.0.0/22
                  103.39.16.0/22
                  103.41.4.0/22
                  103.44.88.0/22
                  103.48.132.0/22
                  103.54.60.0/22
                  103.199.100.0/22
                  137.59.16.0/22
                IPv6:
                  2604:1420::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d7:ab:10:5d:6e:08:54:d3:fb:f8:75:6e:26:66:0a:62:e8:
         3b:11:7c:4f:32:e4:db:aa:f8:93:80:fc:8a:59:88:0c:7a:b9:
         ec:e2:c5:d3:96:31:46:26:16:65:37:95:80:b2:10:b0:62:dd:
         4c:f8:78:7b:23:6d:ee:2c:4e:4b:b0:e9:e7:cc:fe:a5:f4:c1:
         85:5a:dc:2d:f2:f0:fa:91:2b:ce:e3:cf:a2:7a:7a:39:ce:5c:
         df:9e:20:30:48:63:6d:b8:79:7d:9c:5f:92:ab:3b:ea:66:78:
         8f:ce:e1:d0:da:13:d9:f9:f0:be:c2:ff:7f:d3:a4:03:95:99:
         f4:36:84:7f:3e:f3:60:58:91:ff:5a:76:08:e1:9d:46:10:38:
         a8:03:c3:52:df:75:1e:5d:55:e2:fd:65:10:68:09:a8:27:6e:
         69:37:1b:04:ee:a9:aa:56:24:33:70:62:87:3a:a0:e3:2e:40:
         1f:ad:45:b3:ea:78:b3:43:c8:7c:38:ca:c1:71:44:1c:74:16:
         db:62:19:2d:67:04:bf:c5:f9:3d:a1:2a:de:58:8e:14:d3:e6:
         45:2d:77:72:30:29:ba:be:59:0b:d1:c1:5d:7a:eb:12:39:22:
         f0:6e:4e:b0:9d:c9:4f:9d:b3:75:16:19:da:f4:60:f4:15:59:
         05:48:92:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:31:54 2026 by rpki-client