Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b9f58910-7a6a-3513-a211-eee2edda1654.roa
File:                     b9f58910-7a6a-3513-a211-eee2edda1654.roa (raw, json)
Hash identifier:          RDKzTdYwIfmihMbKZd5NjDIkcaEZ19baJPOY9+QjmWc=
Subject key identifier:   AD:BC:2F:BF:EC:A4:52:0C:1C:5F:FD:1E:52:33:3D:4F:9E:31:90:74
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584D4D5A3A16BE0D384039A25C00
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b9f58910-7a6a-3513-a211-eee2edda1654.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     62610
IP address blocks:        23.251.47.0/24 maxlen: 24
                          23.251.48.0/24 maxlen: 24
                          23.251.49.0/24 maxlen: 24
                          23.251.50.0/24 maxlen: 24
                          23.251.51.0/24 maxlen: 24
                          23.251.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:3a:16:be:0d:38:40:39:a2:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=405a6be3-980f-4636-a169-0f1f1c071fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:88:6c:84:9e:9f:20:64:ae:06:c9:d2:8e:2e:
                    5d:0c:2a:77:e7:a5:8e:4e:e7:85:53:eb:7e:66:8f:
                    d5:05:a5:af:16:d0:cc:94:5d:2d:77:76:ae:b6:3f:
                    f1:bd:a1:3e:8d:28:b4:d9:bd:b6:cf:4e:cd:29:c3:
                    01:b8:a3:d0:97:c5:6a:5f:5c:b7:e6:3b:7e:bb:69:
                    d2:63:32:22:5c:1a:b3:48:66:85:84:20:af:03:6b:
                    bb:06:d6:a2:48:f2:a9:b3:5a:11:fb:5f:60:52:d5:
                    9f:b1:98:4a:b9:59:0b:eb:cf:10:08:0c:67:e4:6f:
                    62:d3:84:b9:62:2a:85:eb:c1:9a:f0:fb:5d:6b:2b:
                    41:84:2d:67:ac:bc:a1:15:14:4b:82:ac:4a:4f:3f:
                    ed:d1:fe:94:37:4b:3a:62:cf:21:7c:37:7a:a1:ca:
                    b8:4e:c4:e2:c6:ef:4f:bc:b9:db:61:9a:6a:60:05:
                    cb:bd:aa:c4:48:c3:8c:b4:3c:e5:56:18:de:a1:18:
                    53:fe:c0:2b:fd:af:55:42:7f:f3:39:1e:fc:26:ce:
                    95:14:a0:36:2b:4e:16:93:4d:c7:c6:0a:27:67:c8:
                    eb:d7:4a:7d:4a:b0:35:fc:27:a3:f0:4b:ef:2e:f8:
                    09:2a:85:63:99:ed:0f:d2:0d:94:9a:b2:92:53:cb:
                    17:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:BC:2F:BF:EC:A4:52:0C:1C:5F:FD:1E:52:33:3D:4F:9E:31:90:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b9f58910-7a6a-3513-a211-eee2edda1654.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.251.47.0-23.251.52.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:95:27:7b:98:ce:01:b0:2c:23:3c:34:89:04:ec:e9:d7:75:
         88:01:ab:db:eb:2b:b3:1d:02:76:65:1d:c5:0a:e8:71:d2:81:
         59:b3:f6:ce:53:8a:18:57:4a:bd:40:be:7d:72:ce:01:26:83:
         83:28:62:2e:08:5f:4f:80:8e:31:17:24:0f:64:99:b0:af:06:
         cb:e6:b5:d6:56:37:f5:5b:0e:4f:37:23:b1:a1:6b:57:55:ec:
         0a:33:00:a2:4c:21:0b:89:64:a4:1f:04:39:b5:d5:bc:44:5d:
         0f:f8:4c:c1:ba:82:a9:6d:d4:55:ce:0e:9b:57:62:05:5d:42:
         f2:97:76:6c:23:a2:49:d3:fa:56:ee:16:5a:88:93:8e:a4:c3:
         30:e2:47:35:49:2e:b3:68:48:7c:04:30:f7:08:73:50:fb:8d:
         e9:e7:a3:58:7e:7b:57:5a:10:74:9f:3b:02:b1:18:17:2e:e1:
         58:9b:8f:c1:f7:d3:ae:eb:9d:27:6e:96:8a:18:2c:00:75:23:
         5d:1a:c7:53:00:89:ad:aa:50:aa:cc:69:5e:30:f1:9c:33:4e:
         e8:ee:fa:25:50:08:cd:49:b7:6f:be:0f:7a:ac:c7:d4:b5:07:
         b8:a3:67:fa:5f:52:d7:ea:68:5d:48:4e:58:43:e2:11:15:c0:
         38:9f:51:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:39:41 2026 by rpki-client