Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/61056ad9-f13f-349d-b7a3-338282adb5d3.roa
File:                     61056ad9-f13f-349d-b7a3-338282adb5d3.roa (raw, json)
Hash identifier:          k3W8bV+ufIxo1Maa/+I6o9ZVLDjMmFScdBUEUlE4M/Q=
Subject key identifier:   29:94:8D:2F:7F:18:A4:65:E2:92:22:0A:DE:FE:A3:5B:95:47:8F:10
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D7E3530CBB13B792EF16F8880
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/61056ad9-f13f-349d-b7a3-338282adb5d3.roa
Signing time:             Mon 13 Apr 2026 13:00:30 +0000
ROA not before:           Mon 13 Apr 2026 13:00:30 +0000
ROA not after:            Sun 12 Jul 2026 13:00:30 +0000
asID:                     30036
IP address blocks:        64.237.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7e:35:30:cb:b1:3b:79:2e:f1:6f:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 13 13:00:30 2026 GMT
            Not After : Jul 12 13:00:30 2026 GMT
        Subject: CN=b0b08ba2-fded-4fea-ace3-1236f2dabaff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0a:09:2d:68:70:cb:be:b2:91:a3:e5:60:9b:
                    54:a3:64:6c:a2:9f:5e:3a:23:10:de:a6:da:b0:af:
                    cf:40:54:92:21:58:2b:9e:91:b9:d7:27:81:91:9a:
                    e5:ff:18:0b:56:d8:ef:f3:9a:92:1a:5c:2d:01:63:
                    f1:77:71:2e:3d:6b:21:6c:a4:e8:a4:9d:72:f2:76:
                    69:77:b6:5a:d4:e1:cd:f1:ed:24:ac:94:d0:b6:68:
                    2c:2b:02:1d:0b:e5:3f:d7:72:87:e7:0f:d5:82:c1:
                    df:ff:b6:6e:78:3b:d5:68:7c:57:0a:79:c6:a1:8f:
                    0b:bc:67:c5:27:67:73:1a:a9:4d:77:21:30:c8:4d:
                    dd:0c:2b:1c:57:d8:2e:0a:25:92:61:a6:c8:6c:a2:
                    76:69:27:47:a6:a3:f3:9e:c1:cc:fb:06:02:18:dc:
                    a0:44:42:7e:e2:1a:c2:60:b4:85:ae:46:6e:75:11:
                    b0:87:38:9c:82:b1:ea:db:d4:63:d2:f3:c4:2a:0d:
                    09:42:65:06:ec:92:1e:da:35:8d:6e:02:c0:22:2a:
                    7d:00:d7:e8:77:15:d0:7a:34:15:23:39:fe:57:7c:
                    4a:91:cd:47:77:c8:f9:c7:4b:96:20:ea:70:d2:d2:
                    8e:07:e5:5a:1c:13:2e:68:a2:a5:68:52:21:82:d9:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:94:8D:2F:7F:18:A4:65:E2:92:22:0A:DE:FE:A3:5B:95:47:8F:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/61056ad9-f13f-349d-b7a3-338282adb5d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ef:c6:81:00:c9:b4:b3:09:34:45:11:3f:d2:84:b5:f7:30:
         1b:21:a7:9b:cf:b2:4d:2c:5d:2c:d8:23:ac:b2:dd:95:e0:82:
         7f:03:a4:0f:46:84:e5:c2:57:21:ec:42:c3:ae:4b:d1:78:31:
         41:fa:00:c3:ba:e2:1f:dd:83:ab:c6:43:8d:ad:6d:ce:e7:98:
         69:b9:b8:37:c3:9b:97:2d:db:fd:c7:a4:c7:6b:da:56:2d:76:
         8d:d0:a2:cc:8a:fd:4b:a9:7f:c3:4a:4c:db:e3:6f:56:e0:4f:
         df:6c:86:80:fe:17:11:da:a1:b2:bd:b1:ee:39:39:ba:da:dd:
         16:a5:66:4e:b7:59:f6:df:3b:92:2c:40:65:9e:d5:d8:6a:4b:
         47:63:65:a0:b2:79:02:1c:16:c5:33:55:b4:01:47:b9:6d:89:
         54:cf:a4:ee:04:d9:c1:f8:6a:87:b9:f7:b9:22:32:be:cd:68:
         ed:02:19:42:6f:53:35:b2:6b:9c:40:fa:b8:69:6e:ff:77:fb:
         27:d0:7d:c3:c2:cc:d8:96:df:4a:88:52:e2:dc:56:e1:6f:ac:
         1f:94:cf:0b:67:4f:23:55:8a:6f:e4:a5:87:6d:e2:b0:58:3f:
         00:ac:10:df:e4:28:9e:62:56:19:ff:76:bb:cd:b1:0b:69:6e:
         11:19:41:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:08:01 2026 by rpki-client