Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8962954f-6a47-3b4d-96eb-ad904226465d.roa
File:                     8962954f-6a47-3b4d-96eb-ad904226465d.roa (raw, json)
Hash identifier:          3ykDLmGUAOzmNS9hAnf/QNDtiCb1xtcMx/TBwB8Hw+8=
Subject key identifier:   9D:D3:C7:4F:D5:5F:73:51:3A:35:93:7B:9E:43:F5:4F:83:EA:B3:2F
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584D83CA9920A2C98F73506BD065
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8962954f-6a47-3b4d-96eb-ad904226465d.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     11572
IP address blocks:        63.214.166.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:99:20:a2:c9:8f:73:50:6b:d0:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=e2dadda6-74a0-4f0f-962a-7e4944c81fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:1c:4e:3a:5b:1c:50:d5:6d:93:6a:2a:3b:65:
                    39:0a:ab:79:f8:4a:59:74:6a:c3:4e:de:71:24:b7:
                    32:e4:01:01:95:2f:02:29:b4:7c:f3:d0:f8:68:0a:
                    d0:6c:44:f1:81:25:55:4c:3f:0b:2f:3f:f5:b4:f9:
                    86:19:cf:6b:4b:91:e6:79:5a:36:50:f8:4e:22:01:
                    2c:cf:7b:fc:46:ba:ba:f2:c8:e4:f5:36:7e:0c:63:
                    d6:15:25:67:e0:60:89:ad:8c:ca:d8:c0:12:8b:62:
                    9e:3b:02:31:02:29:fe:ce:fa:6c:6d:21:be:d6:b4:
                    ff:bd:3e:59:5b:dc:23:be:5e:9f:30:58:e4:d4:1a:
                    18:24:bf:89:10:df:1a:7e:54:b4:c2:04:5b:29:79:
                    34:39:2b:a6:3d:74:30:a0:1e:ba:28:e6:a4:9a:e4:
                    e2:cb:e0:37:ff:ae:77:d3:ad:00:ba:07:e8:69:73:
                    bc:ab:08:c1:60:1b:32:95:75:80:96:0f:f3:02:88:
                    29:f4:d6:5a:82:77:3f:ab:10:f2:c3:4b:17:99:81:
                    77:7d:5e:8c:bf:8b:56:ca:95:a5:8a:e8:d5:31:c7:
                    0c:b6:af:e8:e1:b0:08:99:26:53:64:67:8f:88:4d:
                    bb:fc:f3:27:80:1a:1d:d9:d6:68:50:ad:d5:7b:57:
                    3b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D3:C7:4F:D5:5F:73:51:3A:35:93:7B:9E:43:F5:4F:83:EA:B3:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8962954f-6a47-3b4d-96eb-ad904226465d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.214.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:02:08:54:da:7a:56:28:2d:a1:0b:f1:c5:62:ed:5b:66:bc:
         a3:5b:f5:4f:c4:ee:f9:38:17:85:3e:cf:71:61:ff:79:c1:c1:
         9a:b7:71:13:c0:c3:56:23:df:14:4e:20:95:c7:ce:6b:23:95:
         dc:b5:c2:e9:12:65:0d:09:1d:ee:04:f9:38:9a:9f:8f:ae:62:
         d9:48:3b:7f:37:cd:f8:56:90:5a:c7:4d:f2:ec:31:b0:c6:4e:
         09:9f:01:96:82:1d:bf:0a:8f:06:97:a4:29:16:7d:ec:f8:1e:
         2e:73:1d:56:fb:3e:a7:d9:20:6f:cf:1d:07:f1:b2:70:30:7b:
         a6:99:bf:66:5c:44:02:74:0f:f4:55:80:a3:6c:52:2f:71:6e:
         4b:40:ed:64:1b:d3:00:15:20:88:74:e6:a4:f7:5f:1a:7d:d2:
         1d:ef:63:47:2a:31:95:f6:b1:91:68:d3:9e:d8:28:9c:68:64:
         3c:f4:bc:b6:ba:94:f1:aa:e3:df:ef:55:ae:1a:b9:52:1e:2f:
         d3:8f:06:c4:13:62:5e:dd:0c:58:00:cb:44:e3:96:fc:67:d9:
         08:32:65:49:dd:1d:31:0a:aa:25:94:3a:e8:4e:31:95:5e:58:
         8c:78:9d:a3:4f:e9:bd:67:5c:0b:b3:a7:c1:ea:31:1d:82:ff:
         37:08:53:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:38 2026 by rpki-client