Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/08535f17-0651-3437-9b8b-325b581a9259.roa
File:                     08535f17-0651-3437-9b8b-325b581a9259.roa (raw, json)
Hash identifier:          woQISRlk5XNDLrn1oNLhan50i337/3xpMrMSBTFtmuU=
Subject key identifier:   AC:35:96:27:06:D7:98:04:ED:DB:F4:AA:4E:C4:1D:24:EE:A4:CB:CC
Certificate issuer:       /CN=cf6e862f-83c2-4143-b47a-74db6f210162
Certificate serial:       010D0C9F4328584D4D5A6BBF031B5910B7AEE880
Authority key identifier: 4E:A7:5F:25:70:1C:46:B0:35:50:43:28:59:2C:BD:32:4F:A8:D1:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/08535f17-0651-3437-9b8b-325b581a9259.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     400034
IP address blocks:        23.144.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:6b:bf:03:1b:59:10:b7:ae:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf6e862f-83c2-4143-b47a-74db6f210162
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=f84fa1fe-da60-4a8e-96cb-7c50f193c856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:82:44:20:df:92:91:01:26:fb:2b:ed:13:ad:
                    68:03:42:32:97:00:6b:f3:ca:71:a7:ee:49:4e:66:
                    8c:03:48:38:cc:1a:02:b4:eb:bf:a9:48:13:f7:3e:
                    41:58:1a:31:45:ca:6a:49:9a:68:3a:46:27:3d:19:
                    36:ec:25:85:ec:22:c7:86:16:95:9c:d1:ff:df:27:
                    22:7b:15:f8:a7:e2:00:0d:8c:c4:32:a5:36:df:47:
                    38:6a:d6:2e:ca:d7:8e:ab:4f:c3:8a:37:e5:6c:94:
                    b0:9a:a1:49:a7:c1:13:cd:13:71:16:fa:34:c0:86:
                    19:44:b0:33:fe:6c:03:d8:af:ab:3b:69:18:ae:19:
                    fb:3e:2a:cc:70:f7:ec:39:c3:61:26:2e:d0:48:7c:
                    02:be:82:d8:1a:1c:b9:6b:da:c8:82:a5:41:f3:bf:
                    3e:c4:4e:af:48:67:a6:d3:f8:53:97:8a:fe:6a:d6:
                    45:1e:47:56:9a:fd:ae:48:f0:7b:12:fc:2b:98:14:
                    0a:61:85:86:41:c4:d0:de:fd:81:9b:f6:dc:36:1f:
                    80:04:bc:74:0a:14:de:4e:8c:04:10:33:bf:6a:5a:
                    d0:c1:56:43:1f:c0:36:5a:26:93:51:20:61:93:fd:
                    87:aa:2f:c6:00:4b:56:7a:28:38:e3:16:24:6b:ca:
                    80:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:35:96:27:06:D7:98:04:ED:DB:F4:AA:4E:C4:1D:24:EE:A4:CB:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/08535f17-0651-3437-9b8b-325b581a9259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162/cf6e862f-83c2-4143-b47a-74db6f210162.crl

            X509v3 Authority Key Identifier:
                keyid:4E:A7:5F:25:70:1C:46:B0:35:50:43:28:59:2C:BD:32:4F:A8:D1:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cf6e862f-83c2-4143-b47a-74db6f210162.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4f:3b:89:53:cf:cb:be:ca:98:bc:77:8b:dd:40:db:38:90:
         bc:33:4a:66:ee:ee:9e:32:60:5e:e8:15:f0:ab:5f:c3:5e:a5:
         47:83:e8:60:2d:cd:28:29:82:f3:28:f9:c8:6a:89:75:cb:2c:
         c1:68:50:54:e3:90:4d:ff:fc:16:e1:a6:33:80:10:16:66:e0:
         b0:bf:1b:38:1f:3f:c3:42:b6:55:5a:bd:60:13:b1:af:8e:bd:
         fb:74:7b:61:ed:fd:ee:5b:9a:b6:8f:8c:b8:56:ac:24:24:bc:
         e6:9f:56:a5:b2:96:10:3c:86:22:88:18:a7:ff:f8:c0:10:74:
         bb:29:9a:c3:56:17:3a:4a:8f:0a:55:ac:d7:1b:24:00:93:7d:
         59:3b:f2:8e:0e:58:60:a8:2f:e0:93:21:08:2c:51:6a:00:44:
         69:eb:b9:b9:9a:92:5a:7c:5d:0e:c7:45:c1:06:30:1f:00:72:
         59:c6:2b:be:cc:11:83:1f:a0:65:6b:c4:32:ca:59:71:e6:cd:
         b7:68:c3:24:c4:e2:85:12:30:c9:e8:1c:63:c2:97:fe:0e:ff:
         7e:5c:aa:fe:5c:87:45:d2:ad:c5:62:73:f3:31:42:e3:43:10:
         09:48:b3:0f:e2:0e:cf:dc:93:67:56:a4:5a:57:c7:87:ba:b5:
         bd:82:7b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:00:09 2026 by rpki-client