Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/a51347c5-ef6b-363d-845a-2e49de178bbd.roa
File:                     a51347c5-ef6b-363d-845a-2e49de178bbd.roa (raw, json)
Hash identifier:          jGz0WkV3cz5d3pfHlND4SbSwMGf8hsPHvdQgHjEEctc=
Subject key identifier:   3B:F1:E3:DF:4E:3C:BF:18:2A:20:26:91:9E:84:E8:36:26:2A:F4:EB
Certificate issuer:       /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b
Certificate serial:       010D0C9F4328584D730A75A12570B680EFA01900
Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/a51347c5-ef6b-363d-845a-2e49de178bbd.roa
Signing time:             Thu 09 Apr 2026 13:00:30 +0000
ROA not before:           Thu 09 Apr 2026 13:00:30 +0000
ROA not after:            Wed 08 Jul 2026 13:00:30 +0000
asID:                     400992
IP address blocks:        23.172.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:73:0a:75:a1:25:70:b6:80:ef:a0:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b
        Validity
            Not Before: Apr  9 13:00:30 2026 GMT
            Not After : Jul  8 13:00:30 2026 GMT
        Subject: CN=74b494c0-bdc4-447d-aaf8-a5383dbf4105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:b2:0b:86:da:8e:cb:67:29:6b:26:8c:8d:
                    2e:2d:cb:31:d4:44:af:78:c4:13:72:68:95:8f:74:
                    ac:66:63:4e:51:c6:4f:7d:b6:01:07:ed:1d:64:23:
                    75:b4:a2:17:a5:a7:71:b9:6f:35:b1:6b:36:9d:1e:
                    d0:17:5a:a2:d2:c2:67:85:73:05:c8:65:7f:a0:46:
                    7f:2b:19:0b:ab:47:fe:6f:30:20:83:a5:35:d3:4d:
                    26:d7:44:b1:06:55:ef:d4:61:a7:de:7a:97:ca:d2:
                    b8:02:ff:72:4f:cb:bb:e3:f0:de:ba:5b:38:d0:4e:
                    7c:63:6d:8d:45:e0:4f:58:f1:bc:18:5a:5c:cf:42:
                    44:8e:b8:3c:ef:2b:8e:59:c6:0d:3c:af:76:21:5a:
                    35:ea:e7:89:40:59:cd:d2:13:d1:7f:ae:fd:30:36:
                    aa:99:f3:bb:4c:f9:d5:83:c7:41:cd:50:47:19:16:
                    1a:ca:ed:76:ed:6d:a3:6c:eb:4d:ed:1f:b0:ff:73:
                    50:d6:fd:87:81:91:68:53:60:0e:56:b2:34:30:a3:
                    49:d1:5f:22:74:b2:31:a0:72:e8:2f:4a:50:a9:03:
                    b9:42:64:8d:29:89:7e:4f:a9:a1:74:b0:b2:e2:5f:
                    4e:72:34:1f:a9:7f:2a:5e:ef:dd:2b:a3:20:0f:c5:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F1:E3:DF:4E:3C:BF:18:2A:20:26:91:9E:84:E8:36:26:2A:F4:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/a51347c5-ef6b-363d-845a-2e49de178bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl

            X509v3 Authority Key Identifier:
                keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:45:fc:9d:ed:72:66:84:06:88:b9:96:44:9e:36:45:9c:e1:
         39:e8:17:01:95:28:ce:6a:ee:4d:3c:55:5b:64:cf:08:c7:46:
         7d:bf:d8:d2:07:ab:51:40:84:53:e0:fd:67:c9:e6:42:23:b1:
         0f:c7:9f:ce:fb:bc:d2:4f:fe:fe:93:73:89:78:2a:3f:cc:eb:
         d2:5c:1d:f6:9d:4e:2e:f9:ec:af:77:0a:03:e5:ab:bb:a2:3b:
         15:e8:8c:0e:a5:b2:d7:92:aa:00:6f:31:3c:0c:08:2e:e6:9e:
         75:47:4d:e3:c1:3e:19:17:bd:14:93:41:25:ed:4c:64:14:f1:
         19:55:c1:07:44:2b:85:7b:9f:85:40:63:9c:b0:76:47:44:b4:
         4f:c7:79:70:66:8e:79:d0:55:cb:a4:8d:d4:20:95:d7:94:da:
         e8:e8:97:e7:40:8d:84:86:f3:e4:f7:42:d8:3e:e6:9c:d8:69:
         6f:8c:bf:58:c0:c1:e4:60:ce:b1:3a:59:f7:6e:b4:14:be:d6:
         9b:59:ac:ab:71:24:55:5e:f0:aa:65:d6:ee:93:50:b7:68:f1:
         f6:24:7d:f3:a8:f4:82:68:bf:00:5a:25:b7:38:2b:d7:dd:12:
         4a:fa:31:23:49:36:7d:78:47:62:ec:9b:a1:dd:fc:a5:b8:d6:
         aa:c5:1d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:24:22 2026 by rpki-client