Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/df871159-6ea6-31a7-9d8c-875a3108e463.roa
File:                     df871159-6ea6-31a7-9d8c-875a3108e463.roa (raw, json)
Hash identifier:          pD/NFheU5gOCQS8JxW3a6EOy47LTK9ywFWdhgyXsCz0=
Subject key identifier:   FA:AA:65:1B:DA:65:A8:98:DE:C9:76:FB:E1:8F:2B:31:31:8A:EA:20
Certificate issuer:       /CN=9725766d-5d42-4fa1-a253-80bd88dabc8d
Certificate serial:       010D0C9F4328584DE15081AFFE6C339BE1CA0D80
Authority key identifier: E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/df871159-6ea6-31a7-9d8c-875a3108e463.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     25942
IP address blocks:        23.156.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:81:af:fe:6c:33:9b:e1:ca:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9725766d-5d42-4fa1-a253-80bd88dabc8d
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=2767dec3-59d1-49f5-ab07-93e28cc06897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3c:9d:47:3f:49:76:b1:b1:94:12:f8:50:59:
                    e2:78:ce:43:dd:1e:72:63:c0:11:d9:82:63:f0:73:
                    a8:d2:34:a7:c3:74:a4:51:34:23:46:aa:96:e9:91:
                    85:ce:24:2a:61:31:e7:24:9d:7b:2e:95:f0:53:9e:
                    fd:ba:f3:74:91:17:5b:2d:b5:8e:44:e2:ce:d3:db:
                    31:d1:fe:38:d9:2b:8f:62:d6:09:f0:61:aa:a2:df:
                    31:16:9d:b2:32:f1:37:63:2a:35:58:7d:d1:76:82:
                    6d:69:80:4b:83:0e:4c:56:ee:ff:29:d2:a2:28:1b:
                    dd:f8:02:e7:2f:cd:3a:40:0d:1d:da:62:8f:a7:da:
                    dd:fa:4c:32:96:7b:5d:0a:86:89:75:5d:f6:51:c1:
                    f1:83:e0:c3:42:b2:73:c1:37:7c:cf:d5:eb:bc:18:
                    10:57:a6:62:90:82:99:36:c3:d0:15:c6:3b:05:09:
                    22:4f:e4:cd:54:7c:4b:f7:f9:4f:eb:1a:28:23:c8:
                    b8:85:7f:cc:20:d9:71:7a:95:3a:e8:c7:a7:a6:97:
                    2d:4a:31:0e:7b:3e:89:fd:70:f0:79:09:22:3a:46:
                    fb:12:93:eb:2e:50:11:68:3d:98:8a:72:41:96:dd:
                    13:21:57:4b:5d:63:d7:d9:c4:f1:09:da:8b:40:f0:
                    9c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:AA:65:1B:DA:65:A8:98:DE:C9:76:FB:E1:8F:2B:31:31:8A:EA:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/df871159-6ea6-31a7-9d8c-875a3108e463.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d/9725766d-5d42-4fa1-a253-80bd88dabc8d.crl

            X509v3 Authority Key Identifier:
                keyid:E1:5D:89:84:70:6F:0F:C7:C2:0B:72:16:4E:C0:DB:9A:0C:60:E5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9725766d-5d42-4fa1-a253-80bd88dabc8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:ec:86:4f:d5:36:a6:8a:61:fd:a7:41:04:e7:f3:e7:32:2e:
         ad:fa:43:d3:9f:01:83:10:dd:06:f0:b8:3f:0c:d7:6e:70:19:
         db:1f:f3:c0:2e:b6:a8:8e:61:ef:d7:a2:3c:bb:65:be:30:4a:
         a2:cc:13:e8:2c:f8:62:0a:e6:5b:95:b0:35:f1:d4:f3:2c:03:
         f9:f8:e2:81:dc:ba:c2:fe:69:58:7d:a7:1b:16:85:f5:22:b8:
         61:1d:1f:c0:17:32:7e:57:b7:d8:8f:27:8e:ce:29:77:cb:fa:
         60:cf:4b:7c:fd:19:ec:6f:5b:12:71:81:c6:b7:e1:ad:00:8c:
         00:64:99:8d:d2:85:63:e6:e0:cc:f0:6d:c9:2b:a8:e1:62:18:
         5a:ec:ef:2b:2b:ec:65:36:0d:55:e2:62:7e:68:2b:d9:16:99:
         bd:38:1c:88:fc:50:2f:6b:fa:45:9f:c0:6c:19:87:9c:a2:8a:
         32:6e:ca:12:05:f5:db:94:7d:a4:50:19:8e:3e:3e:d0:e1:52:
         23:53:16:a1:d8:ce:83:4b:e7:f2:da:3c:e8:cf:b5:6f:9b:f0:
         4e:56:e9:de:45:e7:aa:fb:19:8b:95:a7:ab:6f:4d:f0:dc:ef:
         e3:e4:a2:8e:69:9a:0e:a2:56:73:14:b4:fb:ca:6b:d6:8f:a4:
         56:e6:78:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:43:54 2026 by rpki-client