Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa
File:                     9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa (raw, json)
Hash identifier:          bGpVyPDjSuAbM/l6tLC5Q1cBTMEfpYftf4zhWU9XZ10=
Subject key identifier:   98:BF:73:F9:95:73:3B:CD:F3:2C:E5:5C:6B:18:66:A9:3F:F2:35:33
Certificate issuer:       /CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a
Certificate serial:       010D0C9F4328584E253F030A91209C0AA4878E80
Authority key identifier: 8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa
Signing time:             Fri 12 Jun 2026 09:00:11 +0000
ROA not before:           Fri 12 Jun 2026 09:00:11 +0000
ROA not after:            Thu 10 Sep 2026 09:00:11 +0000
asID:                     948
IP address blocks:        23.152.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:25:3f:03:0a:91:20:9c:0a:a4:87:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a
        Validity
            Not Before: Jun 12 09:00:11 2026 GMT
            Not After : Sep 10 09:00:11 2026 GMT
        Subject: CN=3851f4a7-4495-49fe-bdfd-130718266c39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:54:25:89:85:79:dc:6e:75:3c:79:9b:de:b1:
                    ea:6b:f1:a6:75:6b:d4:89:b6:94:86:aa:7b:78:3f:
                    da:82:cc:49:e7:50:14:ed:a7:2f:45:c6:27:80:cc:
                    58:a5:c9:78:04:00:cd:b7:2b:3f:19:eb:fa:d9:1c:
                    94:40:c8:74:90:db:8e:7e:a0:c9:45:08:73:06:9f:
                    d9:a9:4e:3d:ae:84:43:f3:a4:75:65:b2:76:68:b8:
                    cb:a3:41:e4:e1:2e:7d:49:fb:79:01:b7:78:af:7e:
                    62:49:32:3c:51:66:3b:ab:a0:e0:32:17:c6:2e:cb:
                    e8:12:65:04:02:cf:a6:dc:cb:2e:65:3e:d2:ac:1f:
                    c5:58:5a:2d:9f:00:2e:d6:eb:48:db:8a:45:d1:7a:
                    1b:df:7d:7d:9c:b7:5f:59:82:52:f9:83:8b:85:de:
                    bd:9e:68:f3:bc:b2:09:a0:ef:f9:06:de:c5:d8:84:
                    f9:71:33:05:17:ae:a9:50:7b:5b:47:59:92:1f:e3:
                    22:fc:e2:44:7f:46:29:9d:fb:88:cb:ca:05:81:9b:
                    be:ef:ca:71:35:c8:4c:a1:d8:3f:af:c6:b6:65:4b:
                    48:a7:62:de:a7:1e:81:8f:79:b7:98:4f:be:13:bb:
                    f3:91:e4:6f:51:1f:2f:fc:73:a2:0f:6c:77:8e:10:
                    74:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BF:73:F9:95:73:3B:CD:F3:2C:E5:5C:6B:18:66:A9:3F:F2:35:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:91:6f:77:36:fa:71:d9:64:86:f3:6f:52:31:7a:f1:27:d6:
         25:16:de:bb:50:3d:04:e2:9a:11:c4:ec:2d:71:68:41:71:0d:
         d2:29:b7:5b:0d:4b:d8:72:d8:56:1d:4c:d3:bb:b5:39:d1:6d:
         bd:41:20:3e:58:a4:51:06:c4:6e:58:e4:b2:15:f1:bf:2c:de:
         b2:b1:67:41:36:63:86:11:3e:32:fb:cd:e0:bf:81:b0:0f:fe:
         e3:c2:6d:7a:74:fe:fb:3f:1f:55:77:e1:dd:d6:a1:ed:ba:63:
         ba:62:8e:15:27:bf:35:5b:ed:ae:58:8f:35:1f:9a:a4:6f:5e:
         49:38:85:df:4d:be:26:19:da:99:f7:cc:19:a1:8d:d6:e8:92:
         3b:db:86:93:3a:cf:06:8e:bc:b4:b7:8e:5f:89:40:d2:cf:5c:
         47:0e:98:42:6c:a3:26:ec:01:cd:4f:13:22:87:14:cb:3f:1e:
         12:dd:ca:de:98:59:10:1b:87:9a:ee:be:e9:86:b1:7f:c3:0a:
         5d:57:e7:0f:de:6b:2c:01:d0:b8:d5:87:10:cb:b1:22:63:58:
         a9:e8:3b:66:73:9b:3b:b0:92:1f:f9:e9:e5:cb:d4:f2:23:74:
         c3:c4:32:32:9c:2f:46:2a:1e:15:8b:cd:e9:c6:d7:fe:82:63:
         f2:76:7b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:31:15 2026 by rpki-client