Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cddc0c68-446e-31fe-99bc-861b5dfc7a6b.roa
File:                     cddc0c68-446e-31fe-99bc-861b5dfc7a6b.roa (raw, json)
Hash identifier:          6h5KCXS7N4hj7VPl/0whVGcaAaeaVM6kEKklea+DevM=
Subject key identifier:   B0:B0:4E:3D:42:6A:32:46:1B:43:B0:13:BB:2E:A0:4E:17:1F:B6:24
Certificate issuer:       /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
Certificate serial:       010D0C9F4328584DD8F06ACEF23E35F16ED1D7A0
Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cddc0c68-446e-31fe-99bc-861b5dfc7a6b.roa
Signing time:             Sat 16 May 2026 01:00:26 +0000
ROA not before:           Sat 16 May 2026 01:00:26 +0000
ROA not after:            Fri 14 Aug 2026 01:00:26 +0000
asID:                     399805
IP address blocks:        23.179.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d8:f0:6a:ce:f2:3e:35:f1:6e:d1:d7:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395
        Validity
            Not Before: May 16 01:00:26 2026 GMT
            Not After : Aug 14 01:00:26 2026 GMT
        Subject: CN=f8b12aee-acb1-40ba-b9de-ce81da6781e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3f:0a:85:81:32:c7:28:68:12:5b:92:33:b7:
                    a0:74:c9:c2:06:37:01:8f:02:38:a9:79:82:e6:b1:
                    5e:36:31:7e:29:12:70:fd:4d:0b:f9:bb:27:4f:ac:
                    a9:02:18:7a:38:be:fa:e3:16:0b:7c:01:47:1a:a9:
                    d3:9e:c4:38:0c:50:78:fa:d5:c3:d9:35:99:e4:31:
                    33:dd:9c:fb:51:cc:ca:6a:ba:a8:c9:5f:df:99:2b:
                    84:62:d1:a5:89:fa:e8:f0:28:d0:27:d2:58:7d:46:
                    a5:c1:41:60:dc:fd:da:1a:86:4c:cc:9c:1b:a6:23:
                    b1:e5:94:0f:cb:d3:bf:fa:22:c5:fe:29:b3:26:a1:
                    31:bc:15:02:70:a1:5e:ab:8a:cf:af:f2:99:b6:52:
                    4a:d0:e9:0c:61:b0:9f:85:37:f0:3a:85:32:f9:7a:
                    18:4b:20:00:0a:cd:ea:3b:ea:d3:12:c3:4f:31:89:
                    2f:0f:b6:03:c1:b3:f1:28:5e:f2:de:91:e3:a2:49:
                    52:37:2a:5b:57:d4:10:8a:9d:77:46:cb:b5:d8:5e:
                    79:cb:a7:8a:ae:48:35:7f:40:46:82:d4:47:ef:87:
                    aa:a5:3c:d9:f2:6c:e3:52:d0:e1:9c:6c:62:9f:23:
                    d3:e3:df:8a:bd:17:88:94:a3:28:44:e2:38:d7:69:
                    1a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B0:4E:3D:42:6A:32:46:1B:43:B0:13:BB:2E:A0:4E:17:1F:B6:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/cddc0c68-446e-31fe-99bc-861b5dfc7a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl

            X509v3 Authority Key Identifier:
                keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:02:07:c4:dd:7d:9b:f8:12:4d:ea:35:ff:60:8e:c9:3c:0d:
         61:dd:6d:a1:87:fd:ff:de:ad:f9:ae:10:d5:b0:c7:20:c6:96:
         0d:d6:ef:2c:ad:52:52:57:4f:e9:d0:fd:39:d2:d0:a5:3b:aa:
         60:ec:f1:d4:92:8e:b9:f8:45:e0:18:b3:63:14:19:b2:b8:fa:
         d1:62:bd:be:0f:cf:68:34:05:5b:1d:77:b0:3d:c6:2e:ef:15:
         d9:3b:95:ae:c6:f9:ac:f3:7c:30:45:63:16:1a:69:ea:5f:a9:
         74:8b:7c:29:00:19:92:45:1a:c7:4a:25:40:b1:a6:45:78:07:
         b5:8d:1d:56:33:88:c6:58:01:0c:83:4e:ce:e8:ae:29:96:28:
         e8:79:ca:d6:1a:d7:d5:48:72:60:cc:6d:b1:2b:1c:61:c5:dc:
         df:11:5c:62:db:16:de:c3:18:b6:e0:c9:5f:5b:2d:a7:fc:96:
         aa:de:93:3b:d0:b6:94:56:a3:bf:e4:4b:a4:fd:f0:d2:15:44:
         44:30:cf:fe:1e:df:58:2c:64:7a:df:87:25:0d:27:47:47:d3:
         66:2e:1b:24:78:16:8e:bf:6c:85:3e:88:37:60:b6:9d:4f:a0:
         0b:ec:c1:cd:69:aa:23:80:4d:df:9d:1e:a9:b2:39:0d:38:7e:
         2d:be:2c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:34:37 2026 by rpki-client