Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc/1aab8552-2b1a-353e-87fd-bc241a7bc634.roa
File:                     1aab8552-2b1a-353e-87fd-bc241a7bc634.roa (raw, json)
Hash identifier:          PNfZ9U/BlH0DnMI2vjdV5vhQSXffDNrRjvVd5S4sWF4=
Subject key identifier:   08:44:8C:CF:F0:3B:C8:46:B8:D2:A8:6C:4B:C5:E1:80:66:4E:7F:74
Certificate issuer:       /CN=6e996479-1bf5-4231-a5f2-3e7f1bcf2efc
Certificate serial:       010D0C9F4328584D65152906CBF0A7912E82C240
Authority key identifier: BE:06:01:8A:21:53:2F:11:47:4B:81:CF:06:00:11:F8:78:F6:46:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc/1aab8552-2b1a-353e-87fd-bc241a7bc634.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     395314
IP address blocks:        23.187.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:29:06:cb:f0:a7:91:2e:82:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e996479-1bf5-4231-a5f2-3e7f1bcf2efc
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=6a9461c7-a0f1-4758-a05d-9c055a5aec1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9b:c9:1e:0a:ff:65:93:df:e6:b8:1b:95:09:
                    2a:fd:49:32:23:9f:d0:e8:ab:d8:62:60:e9:0a:f5:
                    90:ff:25:13:bf:63:c3:13:aa:2f:a2:95:10:63:54:
                    3b:19:13:4f:eb:7e:ab:33:9d:f5:44:ca:59:7a:5b:
                    77:a4:58:05:50:8f:73:29:f5:83:6a:02:69:29:71:
                    2f:27:b2:6a:4c:71:ce:2f:3a:a2:f7:f1:1b:4f:05:
                    3e:14:77:4a:7f:84:37:b9:f8:4b:01:c8:85:48:33:
                    15:a7:db:65:fa:b8:ad:45:5d:ca:ea:aa:ba:58:10:
                    19:d6:69:9f:55:99:31:bc:ab:91:e3:0c:d6:f5:63:
                    dc:8d:31:a9:52:63:ba:e9:27:33:14:3c:eb:5c:7e:
                    7d:54:30:a1:13:5c:f9:b3:a5:25:42:31:61:64:28:
                    a3:b9:d6:0f:81:ee:fe:5f:34:1e:44:86:d4:c8:12:
                    68:fd:d5:f5:5d:e6:de:64:76:f0:30:d3:48:6c:dd:
                    b7:c2:22:e8:26:6c:8f:45:80:69:53:18:d4:f5:7a:
                    97:25:f2:34:4e:51:fd:54:6f:dc:7c:11:13:7a:0b:
                    b3:11:97:e2:1d:19:c4:e6:72:b6:0b:9e:aa:06:bd:
                    5b:ff:d8:97:24:c9:f2:f8:f5:5c:0a:17:85:1b:91:
                    02:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:44:8C:CF:F0:3B:C8:46:B8:D2:A8:6C:4B:C5:E1:80:66:4E:7F:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc/1aab8552-2b1a-353e-87fd-bc241a7bc634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc.crl

            X509v3 Authority Key Identifier:
                keyid:BE:06:01:8A:21:53:2F:11:47:4B:81:CF:06:00:11:F8:78:F6:46:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6e996479-1bf5-4231-a5f2-3e7f1bcf2efc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.187.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:29:1e:d7:ef:9f:bd:0a:c5:cc:08:d8:e9:76:b0:5e:dd:89:
         d1:db:d1:29:63:e7:b0:cb:ff:ad:f2:b1:b2:c3:1d:d7:83:da:
         d4:76:8e:88:f2:d9:8c:af:37:fb:23:c6:eb:cb:25:fa:cd:e7:
         fa:1e:74:f4:8d:c1:07:f4:70:fe:12:1a:de:12:99:de:f8:37:
         09:1a:6f:0f:6d:26:c1:d2:a1:ac:50:64:a7:05:92:66:3b:63:
         8a:2e:5f:be:f7:d6:5e:b8:f0:57:ca:fe:b1:47:bf:79:c4:c1:
         ee:09:62:b6:52:3e:22:0e:41:4e:f2:fe:93:a9:2b:ec:c4:01:
         ce:38:e7:23:6a:a9:2f:d6:3c:c5:14:08:50:4b:81:20:45:e0:
         94:82:e9:72:c9:ce:53:3a:00:91:50:86:75:a2:f0:c2:aa:2e:
         2c:23:52:25:c7:8b:bb:ed:cc:d4:3d:31:ca:13:77:70:09:0d:
         de:f1:73:f7:46:b7:bd:0c:4f:ee:6b:1e:16:e4:9b:08:b0:85:
         c0:d4:4d:77:1e:47:43:c5:7a:b3:42:63:75:3e:e3:75:aa:70:
         14:f6:2c:62:55:2d:d8:b8:82:08:e4:4b:2c:52:e0:4d:7b:dc:
         a7:67:1d:14:03:06:d9:8f:c9:10:8e:f1:cd:b0:e4:20:32:0f:
         37:62:49:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:15:56 2026 by rpki-client