Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/050f5b90-2bc6-3aa7-b968-699b132d1876.roa
File:                     050f5b90-2bc6-3aa7-b968-699b132d1876.roa (raw, json)
Hash identifier:          irQFktyye2eI/EEPFIS4uNhoVnqpKMu+YSjNGqC+bpY=
Subject key identifier:   53:D1:57:E6:1E:F1:B1:C2:7E:86:2E:00:A0:92:C5:06:BF:0D:55:3A
Certificate issuer:       /CN=aec61144-8dba-4096-a6cb-11d1d289ff0f
Certificate serial:       010D0C9F4328584D04E24015B5371DC56DB44C40
Authority key identifier: 31:7E:65:9E:0D:63:6F:17:BE:16:9A:7E:7B:CD:90:FA:75:0C:43:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/050f5b90-2bc6-3aa7-b968-699b132d1876.roa
Signing time:             Sun 01 Mar 2026 02:00:31 +0000
ROA not before:           Sun 01 Mar 2026 02:00:31 +0000
ROA not after:            Sat 30 May 2026 01:00:31 +0000
asID:                     396967
IP address blocks:        23.171.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/aec61144-8dba-4096-a6cb-11d1d289ff0f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/aec61144-8dba-4096-a6cb-11d1d289ff0f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:04:e2:40:15:b5:37:1d:c5:6d:b4:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aec61144-8dba-4096-a6cb-11d1d289ff0f
        Validity
            Not Before: Mar  1 02:00:31 2026 GMT
            Not After : May 30 01:00:31 2026 GMT
        Subject: CN=769fa574-65a9-44be-8d0c-cd210519b7c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e3:38:16:00:8c:79:b0:5b:1d:bf:57:86:de:
                    9d:94:d8:42:2c:72:89:86:d5:e0:40:66:fb:83:a5:
                    10:e3:39:97:2e:09:44:7e:01:32:01:23:fd:0b:30:
                    9b:30:7b:0b:20:63:3c:f4:61:8b:49:cf:cc:1f:2c:
                    d6:e3:af:fe:a8:45:01:27:02:07:f9:bd:87:3f:f5:
                    86:3f:4e:b7:4d:00:2a:21:bd:4e:70:6f:3a:78:47:
                    39:99:ee:1b:bd:c5:3a:b2:4b:a4:89:d3:4e:10:26:
                    a5:89:0c:a9:33:69:1b:35:1a:de:2a:b7:cc:e0:54:
                    3a:d6:ff:2a:2a:bb:b3:b0:12:e5:2c:8e:8c:47:c4:
                    cc:9e:cb:68:3e:d7:0d:df:10:1c:be:26:44:d7:55:
                    45:67:af:38:67:b0:a5:57:7a:63:32:66:09:fd:4a:
                    11:89:28:89:6e:be:cf:2a:d3:fd:aa:a4:de:24:2a:
                    4f:f1:96:71:a8:1e:e8:72:3e:34:87:19:a7:30:76:
                    e7:15:3f:b2:74:ce:82:20:14:26:12:60:b8:84:ab:
                    bb:7d:b6:7f:aa:7d:54:6b:ec:47:47:56:cd:08:3f:
                    61:34:71:a1:55:59:ef:49:97:34:ab:9a:ee:5a:a9:
                    62:c7:02:8a:cc:34:36:09:1a:39:f5:70:be:d9:eb:
                    cd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D1:57:E6:1E:F1:B1:C2:7E:86:2E:00:A0:92:C5:06:BF:0D:55:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/050f5b90-2bc6-3aa7-b968-699b132d1876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f/aec61144-8dba-4096-a6cb-11d1d289ff0f.crl

            X509v3 Authority Key Identifier:
                keyid:31:7E:65:9E:0D:63:6F:17:BE:16:9A:7E:7B:CD:90:FA:75:0C:43:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aec61144-8dba-4096-a6cb-11d1d289ff0f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:bd:05:f7:c3:af:9c:bf:c3:59:c3:30:52:79:92:de:a6:83:
         aa:4a:bb:d7:a4:48:51:0d:65:3e:dc:56:7d:76:0a:3f:a9:86:
         d9:e7:50:5d:8b:63:c0:ff:41:ae:47:40:71:db:b4:8d:bb:44:
         3c:e9:e8:5d:f2:cd:57:04:d5:88:be:30:84:a4:8b:fd:81:a5:
         24:6b:5a:2f:ca:76:a6:7a:f1:75:b8:9a:a8:06:43:d1:11:d9:
         8d:cd:ef:3b:d6:5d:54:d5:33:fc:3f:22:78:cb:36:fb:1f:58:
         53:c3:1f:74:82:f9:ce:3d:3d:54:c0:9f:f4:fe:ef:24:60:45:
         13:fa:97:81:00:e3:66:04:31:e5:a4:08:83:75:af:21:79:1f:
         e3:b6:10:1c:09:72:6a:4f:a5:d0:4b:f5:64:d7:36:6b:ff:47:
         bc:7d:7f:91:20:d8:d2:50:fb:14:c6:19:ce:51:c3:75:f4:fb:
         e8:b4:6f:f9:f3:2e:a1:d1:6a:f1:e0:a6:c5:df:d4:7e:20:6a:
         1b:70:18:39:dc:04:c7:0e:10:40:e4:77:a7:d6:28:99:60:97:
         6f:b9:ce:e5:59:5e:9e:57:61:d9:8b:95:cd:66:70:58:eb:c2:
         ac:ed:dc:03:4c:c0:0a:d7:8f:d9:b7:72:60:c6:34:f6:70:e4:
         fa:be:83:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:51:39 2026 by rpki-client