Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/088952e0-7d03-3267-b368-d7b87c6ee22a.roa
File:                     088952e0-7d03-3267-b368-d7b87c6ee22a.roa (raw, json)
Hash identifier:          fJlNZa4CZW64kFzBS4aGpKBx845zdSEUBCy59LdrlvU=
Subject key identifier:   8F:61:AE:1E:9F:D4:1B:86:EB:1A:EA:79:F5:18:59:A9:D0:50:90:8D
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584D4D5A5A9AB8CABAAA3B915D80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/088952e0-7d03-3267-b368-d7b87c6ee22a.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     26114
IP address blocks:        8.47.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:5a:9a:b8:ca:ba:aa:3b:91:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=9c7d10f8-669c-43fc-8245-079c4f6022c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:0d:08:f1:c7:a0:c6:f2:cb:06:54:53:90:
                    d7:d1:04:65:23:1b:58:2d:98:b2:18:d3:e6:92:f3:
                    0e:5a:97:a0:b9:29:d2:b8:11:87:82:f9:0c:1f:23:
                    1d:51:e6:60:2a:cb:8b:0d:44:7a:0c:8b:45:79:1d:
                    b1:d5:88:5f:27:8b:21:21:87:da:35:eb:92:1f:c9:
                    b8:b3:d2:4f:da:9f:20:68:9c:5e:c0:1a:6f:75:70:
                    ee:b6:86:89:94:80:57:0a:66:8a:6c:2e:11:3c:d8:
                    10:65:25:0b:16:3e:4f:ad:2a:72:a6:19:d5:09:bd:
                    17:44:69:32:fa:c3:9f:fd:81:24:5b:54:f8:89:bb:
                    d5:8c:6c:27:31:b8:03:62:d1:36:9a:f5:7e:0a:0f:
                    c0:48:17:0e:07:3e:81:38:66:e8:f4:02:8c:e6:ce:
                    fd:19:80:c1:8c:a1:26:1a:63:7a:9e:58:b2:c7:12:
                    67:94:b0:07:7d:77:a0:96:cd:a2:28:a2:8b:8f:5b:
                    ab:f9:5b:26:61:1b:64:fa:80:cd:50:9d:1a:7b:ef:
                    82:73:11:11:d1:f2:75:df:f7:4a:aa:a6:d3:4c:07:
                    a6:ba:e5:a6:4f:e6:2f:d8:0b:c6:99:48:8d:40:3f:
                    db:c4:ca:0c:de:61:d5:b2:08:7f:c1:c2:16:1b:e4:
                    1f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:61:AE:1E:9F:D4:1B:86:EB:1A:EA:79:F5:18:59:A9:D0:50:90:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/088952e0-7d03-3267-b368-d7b87c6ee22a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.47.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:d8:d5:5f:81:fd:0f:1e:ff:77:06:8b:0d:73:3a:a5:49:a2:
         6a:96:d5:b0:02:ba:9a:db:45:ba:1d:6a:ff:ad:a2:f0:20:5b:
         95:b5:e5:c6:2f:8e:e6:98:09:7a:91:ec:04:13:86:5b:f8:58:
         bd:2e:12:04:5d:28:06:64:45:f8:54:e1:f3:8c:2e:4c:6b:b8:
         34:fe:2f:19:91:e3:b4:b1:a5:af:d5:b4:a1:cf:ab:5e:76:51:
         8b:ae:a1:f2:b3:98:13:cc:8a:8e:fe:71:a6:05:30:9a:81:53:
         63:03:14:14:41:d4:be:b6:c8:50:7a:f7:ae:9d:b4:96:ac:49:
         ce:5c:fc:12:c1:60:88:c2:0a:4b:0a:c7:dd:17:a0:8c:56:c7:
         c4:89:af:2f:80:e0:9f:4d:1e:88:59:bf:27:4a:cb:5c:59:21:
         7a:b1:16:d0:53:31:36:21:e5:99:02:9a:a7:a7:00:bf:a1:6f:
         06:d6:c5:19:5b:32:bd:ae:b9:03:bc:b5:4a:df:8f:f0:41:23:
         0e:d4:20:c5:95:99:b9:4d:46:b5:ae:7f:6c:c5:29:99:27:8d:
         85:5b:4b:b4:3c:5c:e6:ee:98:46:2c:bb:c4:bd:78:75:f1:5d:
         f4:66:29:c9:75:79:c1:b5:59:3b:95:76:43:87:b1:da:13:3b:
         bb:cc:c6:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:13:15 2026 by rpki-client