Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/614cd895-dc9b-30df-8992-ecca998fa5ee.roa
File:                     614cd895-dc9b-30df-8992-ecca998fa5ee.roa (raw, json)
Hash identifier:          3/ShCuNJ2sEHp+MPuWYZ/5GXv4G13qqSW7Z8leIt6/0=
Subject key identifier:   9B:26:EB:40:84:44:41:75:3D:EC:10:1F:63:22:74:69:58:80:5D:6B
Certificate issuer:       /CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
Certificate serial:       010D0C9F4328584D5E1A7B2717644952F566E440
Authority key identifier: 95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/614cd895-dc9b-30df-8992-ecca998fa5ee.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     147002
IP address blocks:        23.173.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:7b:27:17:64:49:52:f5:66:e4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=7ef2eb55-a9f0-46e9-835e-eef31bf46229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:b4:33:33:b0:f9:5d:7a:ac:6e:68:ee:df:e7:
                    2f:f5:6f:ba:c6:e8:95:bb:32:f7:b1:ef:06:87:5d:
                    9a:f1:ba:ca:fe:7c:f2:44:f2:95:8e:58:58:48:f1:
                    e5:b4:e8:e1:65:32:9b:8d:b8:71:21:b0:95:86:4f:
                    44:18:d6:a9:e2:fa:cb:46:13:08:84:1a:74:69:4b:
                    8b:5d:c7:a0:2f:da:93:9f:b3:7f:83:c3:84:2a:0c:
                    d4:ed:f0:30:b9:4e:e6:d0:82:e3:18:d0:de:3d:7e:
                    ae:55:95:6b:a6:69:a0:20:0c:0e:a0:75:de:34:57:
                    1b:69:68:17:97:8a:49:de:f2:ff:99:a3:ca:a5:c5:
                    51:50:e0:a2:7b:ae:6d:0a:72:0c:b5:87:35:93:3d:
                    90:f5:91:65:af:9c:fc:58:f2:02:36:77:79:c1:7f:
                    ab:9f:e1:ce:1f:54:2f:ed:98:78:88:3e:70:12:52:
                    ab:6a:f8:69:47:53:c2:9e:1a:95:fe:a4:c6:5f:9f:
                    96:d6:a0:71:e5:ed:89:4c:89:82:86:e5:2a:ed:1c:
                    8d:13:7c:98:30:76:18:8a:e9:7f:d8:68:88:0b:45:
                    95:2e:fd:cf:2a:36:29:d7:3f:81:8f:b3:bf:f1:1a:
                    c0:50:be:3a:d0:a3:68:ad:a8:51:89:ed:d6:13:c1:
                    8b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:26:EB:40:84:44:41:75:3D:EC:10:1F:63:22:74:69:58:80:5D:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/614cd895-dc9b-30df-8992-ecca998fa5ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl

            X509v3 Authority Key Identifier:
                keyid:95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d8:ec:df:f9:6d:d6:cf:e6:81:ab:57:36:b0:ef:7e:6c:d7:
         11:2a:77:3b:ad:aa:89:7d:60:32:bc:ad:cc:b3:69:ad:32:66:
         a4:4c:d6:d0:1f:fb:4a:b5:71:8e:e7:9d:96:6b:6f:b5:f5:d7:
         5f:85:c6:54:6c:43:4e:17:0d:e1:e9:b6:a7:1b:f1:40:ae:26:
         00:ce:eb:2a:ef:1e:2d:40:56:08:a4:70:1c:d7:9e:2c:0b:2e:
         f1:ed:bf:7d:ee:14:fb:b7:cf:21:c9:2b:d8:8d:ef:24:34:07:
         e8:81:19:b0:f9:7f:df:82:5b:8c:08:31:b0:0e:f4:9e:2f:cf:
         81:64:7c:6c:0d:10:07:a0:ce:fe:c2:2c:64:51:a7:52:24:9a:
         95:23:97:0a:bd:16:a0:f0:80:95:09:a1:ed:ba:4c:71:c7:81:
         f8:1d:c8:c6:34:b4:70:8e:88:82:7e:36:a1:73:5e:f0:36:da:
         da:e1:80:70:9b:fe:04:e1:85:a4:6e:49:49:5a:35:d4:05:51:
         b4:34:c2:91:de:a9:25:da:2f:49:ba:e0:e5:22:af:ab:60:f0:
         a0:4f:0f:3c:b7:14:b1:0f:a6:99:4a:23:d8:9c:0b:c5:08:ec:
         a3:27:7e:8c:82:db:12:cc:39:da:01:c0:47:0d:52:6c:74:a7:
         d0:e8:0a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:52 2026 by rpki-client