Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4731b471-c045-455f-9d0a-57941b9a76e1/c6b1e31c-04ea-33db-a225-920d4d9a12ba.roa
File:                     c6b1e31c-04ea-33db-a225-920d4d9a12ba.roa (raw, json)
Hash identifier:          npsBRtxUOvIp3kvgXsz8SKRkF0TQza1xMHvFh8JtiCA=
Subject key identifier:   5C:80:77:94:CF:78:E7:1C:CD:20:3F:EE:B7:82:EA:00:80:31:61:2D
Certificate issuer:       /CN=4731b471-c045-455f-9d0a-57941b9a76e1
Certificate serial:       010D0C9F4328584D83CB0650752FC519172793B0
Authority key identifier: 7C:8F:7A:14:70:20:38:96:ED:C5:7A:C9:3E:1E:64:BE:BA:7A:0C:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4731b471-c045-455f-9d0a-57941b9a76e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4731b471-c045-455f-9d0a-57941b9a76e1/c6b1e31c-04ea-33db-a225-920d4d9a12ba.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     400202
IP address blocks:        23.128.232.0/24 maxlen: 24
                          165.140.48.0/22 maxlen: 24
                          2606:8dc0::/32 maxlen: 42
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4731b471-c045-455f-9d0a-57941b9a76e1/4731b471-c045-455f-9d0a-57941b9a76e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4731b471-c045-455f-9d0a-57941b9a76e1/4731b471-c045-455f-9d0a-57941b9a76e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4731b471-c045-455f-9d0a-57941b9a76e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:cb:06:50:75:2f:c5:19:17:27:93:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4731b471-c045-455f-9d0a-57941b9a76e1
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=ab6257aa-5660-4f04-ac38-a60830908ba2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:a3:64:80:af:91:d6:b9:4e:a2:84:be:45:
                    6e:31:65:7a:35:03:f0:c2:e8:eb:ba:e8:58:ea:f5:
                    0b:c7:25:1c:59:86:71:c4:19:98:29:63:bf:60:48:
                    ca:b4:5d:9a:85:80:ac:d4:30:a4:9a:9e:b0:4b:b7:
                    33:8f:c0:35:4d:90:e3:dd:34:bc:89:e6:ca:7f:ac:
                    61:77:8e:3a:c5:43:65:0b:61:95:45:d1:36:3e:b7:
                    ab:f9:2c:1e:47:29:53:24:fb:bb:22:0f:0e:34:83:
                    0a:00:6e:fa:73:13:46:55:5b:cb:40:cf:ed:c2:0d:
                    fc:b1:c4:20:15:d6:e4:47:17:38:e0:d1:ac:03:36:
                    ec:24:c7:fd:01:77:d8:63:b5:83:ea:00:07:ca:14:
                    a2:5b:0b:ba:a8:86:75:22:8d:b3:cf:15:2e:e0:d9:
                    e8:61:56:ce:a2:42:be:bb:e5:13:8a:da:98:ce:26:
                    a3:da:be:47:99:bd:1c:a5:08:e8:4a:5c:5f:1a:29:
                    69:dd:4d:81:f6:7a:92:2d:09:f4:0a:82:88:22:a5:
                    64:16:2c:c6:02:7d:59:f7:e1:14:ee:57:89:fc:cc:
                    af:e2:ba:8d:a5:10:be:2f:73:aa:17:c9:b3:6c:24:
                    79:fe:3c:d3:21:17:9e:23:66:55:4e:fc:15:54:f6:
                    bc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:80:77:94:CF:78:E7:1C:CD:20:3F:EE:B7:82:EA:00:80:31:61:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4731b471-c045-455f-9d0a-57941b9a76e1/c6b1e31c-04ea-33db-a225-920d4d9a12ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4731b471-c045-455f-9d0a-57941b9a76e1/4731b471-c045-455f-9d0a-57941b9a76e1.crl

            X509v3 Authority Key Identifier:
                keyid:7C:8F:7A:14:70:20:38:96:ED:C5:7A:C9:3E:1E:64:BE:BA:7A:0C:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4731b471-c045-455f-9d0a-57941b9a76e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.232.0/24
                  165.140.48.0/22
                IPv6:
                  2606:8dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:b9:da:f7:40:20:af:1f:12:2e:d1:db:69:04:48:d0:a8:0f:
         dc:f0:09:5e:3e:16:18:85:d4:c9:cb:6e:2c:52:67:2d:55:3d:
         d3:13:7f:86:ab:c3:37:73:4b:0f:d8:21:08:1a:9e:85:62:41:
         f6:79:45:ef:bb:fb:48:8c:48:d0:ba:c8:62:6d:46:e8:00:34:
         12:c5:72:2f:ce:9f:f4:c6:3d:c0:14:4c:49:3d:62:ff:18:70:
         13:78:96:67:13:86:9c:0b:1d:2a:80:b9:ae:06:c0:d8:79:16:
         1a:2d:b6:97:4f:ab:f6:65:f1:0f:ee:f7:cc:41:ca:8e:c0:07:
         de:4d:a1:90:cf:a2:03:35:a2:d6:b3:58:4d:18:14:f3:3a:58:
         e5:5a:ab:36:fb:13:7d:8d:12:e1:e1:c9:ca:3e:59:8e:65:b7:
         64:0b:71:36:a2:e3:0a:0a:c7:be:7e:53:55:84:a0:ec:3e:13:
         18:5d:b7:07:70:3f:fa:a5:a4:6b:eb:15:27:66:dc:df:5e:97:
         63:7f:57:3f:36:22:ae:b1:5c:e8:d2:ba:57:68:a5:6c:cb:81:
         f3:d1:46:f9:5e:12:da:e1:60:0e:99:59:1c:2b:de:25:a1:fc:
         85:11:2a:43:12:1c:5b:af:57:c8:ae:c1:2d:c8:ad:35:4f:5c:
         a9:61:65:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:21 2026 by rpki-client