Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/834feef8-08c6-3ac0-9304-82e2ffd86bf7.roa
File:                     834feef8-08c6-3ac0-9304-82e2ffd86bf7.roa (raw, json)
Hash identifier:          ilM4pvB+7LtEgLWxbQlj+hYojnhmwWvrecvSfqrjqn4=
Subject key identifier:   4B:01:BD:C5:D1:CF:49:C3:CB:D8:6B:53:DA:FC:2C:EF:0D:D6:05:63
Certificate issuer:       /CN=5157764b-7b30-4f19-a9ca-30a5dfefa332
Certificate serial:       010D0C9F4328584D80FFDD34BE2F7F71389AAF80
Authority key identifier: BD:78:DF:BF:1B:39:18:A5:6F:C7:79:A8:1D:F4:E1:99:EA:21:55:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/834feef8-08c6-3ac0-9304-82e2ffd86bf7.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     13737
IP address blocks:        23.136.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:ff:dd:34:be:2f:7f:71:38:9a:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5157764b-7b30-4f19-a9ca-30a5dfefa332
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=71bdd390-e1a8-4b35-bfbc-b46502f6028e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:3f:fd:e5:45:5c:a0:16:d2:93:f6:20:0c:
                    8e:a1:d3:ba:ac:86:f1:de:a5:dc:e4:91:d2:1a:cc:
                    7e:52:5a:b0:8a:e7:31:74:bf:4c:47:57:12:84:77:
                    a0:0b:46:53:5a:cc:0a:05:b9:82:2a:48:af:68:ba:
                    27:18:c9:82:78:ef:14:93:02:d6:e5:eb:dc:5b:5a:
                    8b:b3:e9:15:85:6a:44:75:fc:77:7b:06:99:c0:87:
                    74:a1:92:84:9a:cf:1f:75:ae:63:7c:5e:b1:be:56:
                    3b:e4:15:92:bc:ab:b0:37:90:83:cc:f6:1b:67:45:
                    73:5e:36:35:a6:cd:47:fa:2b:c1:4e:6a:66:81:07:
                    22:54:17:0d:b3:ef:82:28:d7:15:50:b0:c7:ea:30:
                    3b:fc:f0:8e:5e:a2:1d:35:dd:ac:57:0e:3c:02:a6:
                    ce:a9:08:41:6c:16:0f:c7:be:6d:23:da:06:75:63:
                    d1:19:9c:1d:9d:8c:85:2a:38:9f:47:c7:69:c6:66:
                    99:ba:de:52:7e:0d:9b:7a:c6:b3:4f:d3:84:ec:80:
                    a9:1c:a0:45:de:41:fb:4b:67:a5:4c:d6:52:ff:3e:
                    9d:1e:3f:90:b7:15:bd:11:73:b3:24:72:15:48:61:
                    70:f4:13:b1:e2:62:47:bd:7b:4c:cc:3d:f5:fa:70:
                    39:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:01:BD:C5:D1:CF:49:C3:CB:D8:6B:53:DA:FC:2C:EF:0D:D6:05:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/834feef8-08c6-3ac0-9304-82e2ffd86bf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.crl

            X509v3 Authority Key Identifier:
                keyid:BD:78:DF:BF:1B:39:18:A5:6F:C7:79:A8:1D:F4:E1:99:EA:21:55:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:31:38:5a:c3:49:51:18:cc:0e:b5:e5:ea:e3:07:a3:cd:9b:
         f7:fb:c9:8e:b0:7c:90:f2:7a:63:3d:62:f4:19:1f:a3:98:3a:
         3e:94:ad:73:35:48:f5:b8:29:38:78:0b:db:91:58:b8:13:be:
         9f:13:c6:9d:47:1a:06:b7:35:3f:12:f0:00:45:29:19:04:2d:
         93:ee:92:94:41:c8:ae:05:e4:75:7a:c2:09:10:92:08:a5:94:
         c6:24:8a:14:68:99:05:c8:ad:38:50:c1:1a:01:43:0a:5f:82:
         e8:43:28:37:01:a9:d9:58:f2:c4:5d:da:eb:cb:29:6c:63:0d:
         79:a6:b0:90:1d:eb:e3:a0:5b:70:b6:67:d1:bc:cc:99:19:40:
         ab:d1:ab:86:de:bf:e4:f8:bd:32:22:10:97:14:bd:e1:2f:8f:
         41:37:1d:56:30:f9:ae:9f:bc:8c:26:dc:b5:e9:84:6e:d4:0d:
         41:04:a3:3b:2e:12:22:db:ee:ba:79:98:74:0b:9e:71:a8:26:
         94:8e:97:cf:4f:73:92:56:26:9c:b4:4c:d7:ff:62:ed:51:18:
         35:57:2a:ec:93:d3:e1:7a:1f:9e:9f:a8:0c:a5:ff:92:af:c3:
         e3:6e:81:73:37:f8:f1:c8:e6:6f:f7:68:6e:89:63:0f:63:0b:
         da:88:ef:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:03:20 2026 by rpki-client