Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/b22c7947-61f7-34ea-95cf-9caf14e975ac.roa
File:                     b22c7947-61f7-34ea-95cf-9caf14e975ac.roa (raw, json)
Hash identifier:          zC1nixDNKUL1ViSwznlvhwQ955vqsBsZWJcAVjdBptE=
Subject key identifier:   DB:83:57:68:55:C8:FE:CC:05:9C:A0:3F:15:0D:EC:21:89:26:80:C7
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F4328584D5B4FA9FC409A2F17C306C880
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/b22c7947-61f7-34ea-95cf-9caf14e975ac.roa
Signing time:             Wed 01 Apr 2026 01:00:23 +0000
ROA not before:           Wed 01 Apr 2026 01:00:23 +0000
ROA not after:            Tue 30 Jun 2026 01:00:23 +0000
asID:                     401443
IP address blocks:        23.156.152.0/24 maxlen: 24
                          23.156.153.0/24 maxlen: 24
                          216.238.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5b:4f:a9:fc:40:9a:2f:17:c3:06:c8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: Apr  1 01:00:23 2026 GMT
            Not After : Jun 30 01:00:23 2026 GMT
        Subject: CN=199198a8-1bd6-476d-a7a1-0c0deba49b90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6b:82:ec:99:d3:f3:42:4e:60:d4:ed:cf:bb:
                    e6:94:6a:f0:56:90:9c:a5:6d:bb:a5:39:2f:90:85:
                    04:26:d5:8e:29:6e:fd:9f:d8:fd:ca:57:2a:4a:7a:
                    ae:ad:0b:36:52:8f:63:4c:ff:ad:72:7b:1c:94:a5:
                    ef:e0:4b:48:6f:1b:10:12:5a:9f:89:bb:13:11:20:
                    81:1f:64:55:ff:eb:ae:b6:e1:af:ac:6b:5b:65:90:
                    b5:d7:c6:f1:d2:d3:24:32:ba:83:d4:4c:67:5c:4f:
                    81:e8:a7:8c:fb:9b:55:fb:79:89:ad:45:45:f2:e2:
                    71:fe:a3:c7:1d:4d:6f:53:38:85:a0:36:cb:31:42:
                    19:0e:66:fc:30:8b:3c:28:7a:35:bf:96:ca:5c:4f:
                    09:24:14:6c:0e:4d:b8:f7:86:08:31:65:d3:17:f3:
                    71:63:15:85:54:6d:c0:80:15:77:e0:25:62:23:7d:
                    01:7e:2d:17:7e:3a:fe:83:24:46:24:93:60:af:12:
                    22:51:39:90:01:1d:33:93:cc:09:60:53:de:67:a4:
                    90:4d:f2:cc:ea:76:cf:b6:cc:d8:df:60:4c:85:df:
                    5f:41:f3:f4:40:68:1e:0f:72:0b:22:cd:ad:e1:c4:
                    cd:38:7b:f2:27:da:16:e5:61:4c:2d:1b:64:23:e7:
                    8a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:83:57:68:55:C8:FE:CC:05:9C:A0:3F:15:0D:EC:21:89:26:80:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/b22c7947-61f7-34ea-95cf-9caf14e975ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.152.0/23
                  216.238.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:22:c5:07:20:17:25:3e:26:ba:be:d3:35:25:a2:2e:17:00:
         06:e2:5b:a4:88:ef:fb:b6:b0:37:05:de:eb:50:4b:d8:86:7b:
         ba:56:01:82:74:cf:d2:38:9b:f7:0d:ed:a9:64:78:08:fc:4d:
         25:75:45:05:f0:8e:b6:eb:af:3e:90:01:f8:01:46:c3:7e:53:
         30:4c:c6:27:e4:54:47:5a:02:e5:6f:b2:0e:65:6f:41:3b:9c:
         00:bb:11:0a:b1:85:17:89:58:14:a6:e2:f5:b4:ec:1c:c1:80:
         fc:8a:d6:f6:cd:da:a4:d7:1e:6f:a9:f4:31:3f:b7:23:0d:9f:
         f7:c9:20:4c:55:16:03:97:fc:21:a0:4d:a5:8e:71:b0:39:2b:
         8c:15:a7:a8:8e:ca:c2:69:4e:a6:7d:2c:48:e8:6e:27:84:85:
         8a:11:1c:30:22:36:ad:08:c6:1c:65:b4:1a:ce:e9:df:b9:4b:
         86:03:36:38:30:93:c3:0d:1f:60:51:ab:37:9d:0e:39:56:2f:
         37:d0:c1:40:64:2a:45:aa:73:91:25:0b:61:3b:48:ee:b6:58:
         c4:a0:4e:44:30:21:2c:23:ca:2a:31:43:9e:cc:bb:60:18:ca:
         cd:fd:86:b9:26:4a:53:b9:11:c6:80:3e:34:f4:d2:ae:ad:d9:
         89:f8:22:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:28:26 2026 by rpki-client