Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/be2994d9-6b65-3d17-9fe3-eb95028cbe8a.roa
File:                     be2994d9-6b65-3d17-9fe3-eb95028cbe8a.roa (raw, json)
Hash identifier:          NzF5XJ47RQUdnVbgRgV7WWR6Bx3RADyJq2onwDTXOJc=
Subject key identifier:   B6:EC:94:77:5C:1F:F1:10:90:50:CE:56:BF:E6:49:98:4F:55:0A:8B
Certificate issuer:       /CN=4a55c0a6-eaa8-4039-be15-220f288acd5a
Certificate serial:       010D0C9F4328584E15E438090D471BE1BE4FD300
Authority key identifier: 46:2A:E0:63:81:62:E2:AA:74:7C:20:E2:C9:6A:14:60:99:22:35:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/be2994d9-6b65-3d17-9fe3-eb95028cbe8a.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     45691
IP address blocks:        23.137.68.0/24 maxlen: 24
                          140.235.164.0/24 maxlen: 24
                          140.235.165.0/24 maxlen: 24
                          140.235.166.0/24 maxlen: 24
                          140.235.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:38:09:0d:47:1b:e1:be:4f:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a55c0a6-eaa8-4039-be15-220f288acd5a
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=0c837216-4d3e-4926-9533-9196351d74a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c5:68:8b:35:25:a7:1b:28:63:1f:a2:ae:6e:
                    be:26:bb:7e:cf:76:d4:e9:f5:67:19:94:c5:ad:2e:
                    5e:4b:c5:3b:f6:e5:c8:ed:00:03:24:b4:89:d1:95:
                    eb:6f:2e:2c:06:52:f3:76:e7:7d:29:8d:4c:2f:9a:
                    e4:9a:98:ef:53:70:2f:b3:03:5c:76:e2:60:56:6f:
                    d3:31:24:ea:b2:f0:61:35:2f:4a:db:ff:0b:22:79:
                    34:7e:1d:1b:dd:c9:2c:f2:a3:23:8e:3a:1d:46:67:
                    51:48:9a:02:92:7b:8d:2e:4e:12:e5:89:80:91:a7:
                    80:19:95:c6:b5:07:a2:da:7f:87:bd:05:07:73:1a:
                    ce:65:39:53:28:2f:df:01:87:8d:75:08:2e:be:42:
                    f5:5a:b5:8b:fc:d2:4a:a4:25:7d:b5:6f:48:5a:55:
                    8e:85:c8:cc:b7:cd:9d:9b:35:16:16:02:60:16:10:
                    51:68:4f:23:f5:34:bb:43:f6:fe:fc:2d:6e:18:ce:
                    91:8d:12:2e:e0:97:58:e6:92:8f:c7:8c:ac:36:d0:
                    27:69:f9:54:2e:b4:5e:d3:a3:68:ab:0e:c9:28:11:
                    bf:bd:27:74:44:8a:8c:85:81:a9:8e:4a:21:da:dc:
                    ea:ae:0e:b3:e1:a3:a5:86:34:e9:bf:b9:11:23:e0:
                    73:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:EC:94:77:5C:1F:F1:10:90:50:CE:56:BF:E6:49:98:4F:55:0A:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/be2994d9-6b65-3d17-9fe3-eb95028cbe8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a/4a55c0a6-eaa8-4039-be15-220f288acd5a.crl

            X509v3 Authority Key Identifier:
                keyid:46:2A:E0:63:81:62:E2:AA:74:7C:20:E2:C9:6A:14:60:99:22:35:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4a55c0a6-eaa8-4039-be15-220f288acd5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.68.0/24
                  140.235.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:fc:63:58:61:bb:36:92:b4:50:c3:77:0f:0f:cb:0d:36:f7:
         1b:a7:0f:90:7c:b5:52:4b:f8:d2:ae:58:15:48:95:fb:a0:f8:
         6d:0e:f5:35:04:19:e6:21:3a:ec:3a:94:47:58:9a:aa:c6:cd:
         6f:89:a2:5f:05:45:a3:b5:3b:c7:40:5b:43:f8:7c:48:03:96:
         c8:86:c2:ee:97:83:cd:4b:61:c3:57:29:52:12:bd:c7:34:6c:
         fa:6c:78:68:71:f9:b7:b5:ab:b9:59:cb:d7:46:5f:41:b7:84:
         52:94:06:12:1d:1f:13:53:7b:59:98:dd:db:62:d8:e1:c3:bf:
         4a:5c:b3:96:9a:da:18:fb:06:a8:4a:1a:07:c0:07:78:58:bb:
         3d:1a:d5:a0:4d:0b:37:2f:c3:17:17:b4:19:50:ab:63:9e:f9:
         da:3d:09:ef:49:c2:b6:97:24:2b:d9:22:1b:1d:9b:bc:c9:2f:
         ef:c3:3b:ce:ce:bb:e2:3a:7c:55:8a:27:7d:35:17:ba:4d:b2:
         4f:ef:a7:bf:42:91:91:8e:fb:e7:7f:6c:43:b6:a7:9f:6a:c7:
         2f:c9:4f:18:20:5c:1b:40:95:0b:67:ea:3f:fd:ef:90:84:43:
         7b:68:5b:2d:54:de:0d:b8:f1:fd:e0:b7:fe:21:14:28:60:18:
         b4:ea:a9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:19:04 2026 by rpki-client