Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa
File:                     8e5abe26-35c1-3b16-9b96-323c165f8420.roa (raw, json)
Hash identifier:          tin+Fln6qJx794YxTWSL3zeoNQpvYo2Tfczua+dHaQo=
Subject key identifier:   28:55:28:F6:E9:0A:A6:21:51:FD:F8:E9:2C:30:3A:3B:B1:F6:F9:8E
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584E059B5A43B10C8F7A45ECCD80
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     11870
IP address blocks:        167.23.96.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:5a:43:b1:0c:8f:7a:45:ec:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=2337e219-c59b-413b-bebc-f7cb20b78f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:a1:04:05:00:bb:17:cc:6d:36:96:03:d1:
                    98:0e:9b:5e:bc:65:5c:47:4f:ed:17:93:b5:90:71:
                    ac:10:54:45:44:91:d1:ad:98:25:16:b2:92:6a:ef:
                    ab:1c:ba:18:e0:b4:00:8f:dd:e5:3c:76:97:8d:6c:
                    81:b7:a8:48:0f:da:a3:ac:ce:19:f2:53:d0:47:57:
                    cc:e3:8a:77:67:6c:bb:c7:c0:03:c4:cf:c6:d8:6c:
                    38:10:19:7b:bb:0f:42:7a:4a:9a:18:a0:23:bf:07:
                    be:07:6e:8c:54:a5:a6:0f:00:64:49:85:9b:9c:e1:
                    7e:f4:4f:2e:82:8d:30:eb:63:f1:c8:91:81:14:79:
                    f2:a2:14:45:6f:fc:0c:b6:67:1d:37:8c:1b:ee:7a:
                    c3:08:0e:65:29:bc:f0:08:e5:83:b1:c4:a7:01:c7:
                    07:bb:55:76:31:02:bf:f4:38:40:ec:27:eb:84:0e:
                    fa:13:0d:b9:3b:f9:d7:6d:81:dc:35:4b:0a:34:78:
                    10:0d:98:79:00:1b:a2:b5:8d:ff:34:75:f2:c5:a6:
                    44:ce:cc:e4:e3:22:4b:41:93:3b:24:f2:95:e5:96:
                    1c:95:5a:0f:37:d7:59:f5:8e:ed:6a:f5:47:2b:1f:
                    03:a0:1b:8c:96:27:5a:6e:2f:a2:5b:74:18:40:04:
                    2e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:55:28:F6:E9:0A:A6:21:51:FD:F8:E9:2C:30:3A:3B:B1:F6:F9:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.96.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:09:20:cc:cf:f5:77:f9:08:ce:9c:34:89:7d:60:5b:9c:23:
         bb:6b:4f:8c:0d:27:f8:93:34:7f:9c:aa:92:82:c2:ab:b2:9f:
         6e:15:6e:b5:85:dd:07:5d:3c:68:d8:21:a7:cb:90:86:63:ad:
         ad:8e:53:34:05:a6:fe:f3:c0:97:3d:24:68:0e:32:9a:1c:67:
         d5:93:20:57:df:f4:3a:ba:20:c6:3d:8a:0c:73:9a:e4:13:99:
         d4:52:1d:ea:e9:f9:0f:15:d4:e3:31:a2:65:b4:ea:49:11:e6:
         af:10:e7:2c:1a:bb:a1:58:27:0d:3d:70:02:19:e8:c3:c1:ba:
         f6:9d:eb:6f:99:79:3a:26:e1:dd:dc:b6:e1:e8:f1:07:a7:58:
         57:56:8f:9c:e3:47:78:8f:8a:fb:5f:38:8a:e6:67:29:4a:aa:
         34:ae:b8:c8:05:65:cb:c8:ef:73:36:f9:2b:28:ca:2a:aa:57:
         ae:00:92:50:33:3c:79:5d:ee:f7:d3:13:73:48:5f:cd:7f:17:
         71:a0:db:18:5f:a1:e2:c9:43:87:ba:b8:58:4d:8a:46:81:30:
         57:7e:3b:c4:5e:2e:4e:77:d5:47:fd:87:fd:92:12:60:4f:13:
         27:f3:0e:85:62:03:f3:d4:d3:4f:07:4b:de:5b:84:da:60:51:
         eb:27:df:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:52:17 2026 by rpki-client