Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/03050cf7-f1b0-3ffd-afcb-0bb14eb66c2a.roa
File:                     03050cf7-f1b0-3ffd-afcb-0bb14eb66c2a.roa (raw, json)
Hash identifier:          uS8jSvL86bd3lwr1p5SqhU6THsgb9/zO90vBn7daZxs=
Subject key identifier:   16:71:FF:10:32:89:30:39:AD:A1:27:ED:80:C6:F1:6F:9D:BA:3E:06
Certificate issuer:       /CN=5b411b8e-3c6b-4743-ad39-50a32a716ad4
Certificate serial:       010D0C9F4328584D8413EB765AE516B6403654B0
Authority key identifier: D4:30:90:3D:0D:8B:97:AF:18:3F:98:C4:51:DB:CF:8F:7D:1A:84:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/03050cf7-f1b0-3ffd-afcb-0bb14eb66c2a.roa
Signing time:             Wed 15 Apr 2026 15:28:25 +0000
ROA not before:           Wed 15 Apr 2026 15:28:25 +0000
ROA not after:            Tue 14 Jul 2026 15:28:25 +0000
asID:                     30041
IP address blocks:        23.185.64.0/24 maxlen: 24
                          2602:fe76::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:84:13:eb:76:5a:e5:16:b6:40:36:54:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b411b8e-3c6b-4743-ad39-50a32a716ad4
        Validity
            Not Before: Apr 15 15:28:25 2026 GMT
            Not After : Jul 14 15:28:25 2026 GMT
        Subject: CN=ce060215-cb20-490b-8d42-d1a77bbe9510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:f8:04:f3:9f:e6:1c:6d:d0:22:69:57:88:
                    b8:2c:92:09:b4:dc:e3:37:87:52:57:4b:73:1c:96:
                    94:21:00:f7:c6:95:1b:f5:68:f7:ff:7c:da:e3:74:
                    0a:82:fa:02:48:60:2f:f5:80:1a:7f:d7:92:e7:1d:
                    ff:e9:25:84:61:a6:c0:f3:4d:58:af:5c:3f:6d:a6:
                    8b:2f:96:4a:59:40:e8:ce:5b:13:49:53:d2:b7:5a:
                    35:2d:2d:ae:d3:98:9e:7b:29:07:15:56:1b:5a:5c:
                    38:b2:b5:f1:0f:36:22:71:36:7c:b8:dd:3d:2d:eb:
                    c0:6b:d5:3e:84:e3:5c:50:23:3b:6e:6c:35:9e:52:
                    2a:3e:2a:6c:2d:8d:77:f2:a8:25:b7:e0:ec:bb:77:
                    8b:39:dc:a2:8f:74:08:69:0f:e8:ae:b8:f8:dd:d3:
                    3f:8c:57:f4:af:bf:ad:b5:bb:fd:42:d7:10:76:52:
                    e2:e1:c0:71:f8:77:1f:0d:d9:88:2e:51:21:9b:a2:
                    dc:6d:85:9f:e3:a5:29:77:ec:97:38:fe:f3:e5:bb:
                    b3:69:b7:a6:92:91:2a:ee:a5:28:e8:2e:48:57:ed:
                    2a:9d:8a:e9:05:c1:55:c4:7d:00:f5:e8:4a:1c:c4:
                    ec:40:38:85:89:34:c8:58:13:56:ed:d9:a0:40:31:
                    f4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:71:FF:10:32:89:30:39:AD:A1:27:ED:80:C6:F1:6F:9D:BA:3E:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/03050cf7-f1b0-3ffd-afcb-0bb14eb66c2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4/5b411b8e-3c6b-4743-ad39-50a32a716ad4.crl

            X509v3 Authority Key Identifier:
                keyid:D4:30:90:3D:0D:8B:97:AF:18:3F:98:C4:51:DB:CF:8F:7D:1A:84:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b411b8e-3c6b-4743-ad39-50a32a716ad4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.64.0/24
                IPv6:
                  2602:fe76::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:01:bf:e8:a3:2d:db:19:f5:67:11:8c:b0:9f:77:24:0e:c0:
         e9:d4:62:f0:d5:aa:f1:2c:96:67:dc:71:94:1a:33:63:1e:3b:
         b6:ae:80:c2:41:37:a5:60:07:94:7d:b0:cc:39:6d:32:b0:74:
         d2:a0:4b:7f:79:53:09:2a:ae:97:d7:5b:81:92:1a:66:3c:ec:
         2a:00:25:9a:f0:2b:d0:fc:55:53:37:5e:54:cc:a2:34:c4:d6:
         dc:6c:67:ba:cb:1a:75:9c:8c:25:25:59:bc:f4:5a:c2:0e:28:
         35:19:6b:7c:5e:09:1e:45:31:a1:43:63:28:5f:d7:00:99:2f:
         a8:1e:35:b1:7a:09:9a:53:d4:65:3e:80:67:f9:d5:22:4e:58:
         f8:dc:25:46:ec:bd:2d:27:f4:75:d9:91:a5:4b:3a:97:9f:85:
         7c:c7:95:6d:75:24:71:56:33:c7:ca:ba:19:6b:87:c7:c0:51:
         61:f4:8c:99:aa:f4:d0:25:44:bf:0f:a7:0d:e6:7c:61:1d:b0:
         53:90:94:da:8e:45:4a:01:2d:ce:a9:4f:53:1f:ef:1c:a0:f5:
         92:0d:62:17:72:97:16:61:5f:81:f1:85:3e:88:b2:fe:36:29:
         03:63:a7:5c:41:49:0d:35:bb:18:04:38:bb:96:55:5a:de:eb:
         a2:d4:5f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:59 2026 by rpki-client