Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/67e9a890-c640-3faf-80ae-71476177faba.roa
File:                     67e9a890-c640-3faf-80ae-71476177faba.roa (raw, json)
Hash identifier:          9p35O0Q6ZbMolkFO9caHU10WqEtwi9GSkX6uxKaO2fk=
Subject key identifier:   16:09:D6:A9:F2:89:84:CB:40:85:8C:70:13:B0:CC:6B:F5:AA:ED:BF
Certificate issuer:       /CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225
Certificate serial:       010D0C9F4328584E0005EA1E5035CE70A0F2C7B0
Authority key identifier: 12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/67e9a890-c640-3faf-80ae-71476177faba.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     401466
IP address blocks:        23.129.36.0/24 maxlen: 24
                          130.12.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:ea:1e:50:35:ce:70:a0:f2:c7:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d57fb7e0-00a6-4537-98dd-87a5acbd1225
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=7541771b-1ec7-4045-a1b4-58212ab5434d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:4e:a5:d4:81:ef:22:43:d9:dc:db:89:cf:b2:
                    62:92:16:be:d9:aa:42:cc:e5:cf:a1:5b:f8:73:bc:
                    d5:83:2e:c1:89:46:1d:10:a2:80:d7:be:3a:b5:9c:
                    39:33:4b:59:c4:d9:01:be:e7:a4:2c:d4:fa:4c:00:
                    53:9b:9d:4b:42:bd:e4:63:d9:63:42:d2:60:a3:a7:
                    36:37:b0:4f:8e:43:58:51:9e:e0:e0:02:e3:cb:67:
                    e1:f7:29:56:de:3d:d5:90:7a:1e:37:e1:3d:ee:ed:
                    5f:72:e2:e4:3f:c6:89:8f:f9:82:7a:92:49:ff:0c:
                    d4:7f:07:66:6c:be:74:78:ae:1a:18:7e:eb:62:e7:
                    50:25:fb:d1:a3:9a:c3:3f:20:8e:0c:0f:a7:b6:29:
                    49:1e:93:20:c7:e3:1c:12:d4:a9:74:75:cf:c7:44:
                    0e:01:e5:c1:13:19:ab:cb:f1:f6:87:b9:f5:30:87:
                    23:d0:ef:ea:d8:c8:60:51:9d:62:31:90:9b:9c:2d:
                    ea:be:4e:9e:ba:c7:e5:8e:12:49:53:83:ec:52:b6:
                    8b:8e:87:74:91:74:f2:a5:39:10:dc:4f:54:91:e3:
                    ef:e1:d4:54:12:42:1e:cf:13:ea:5d:3b:04:9a:88:
                    34:d6:b5:4a:cd:cc:fb:f2:86:80:f8:da:ea:10:0b:
                    bb:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:09:D6:A9:F2:89:84:CB:40:85:8C:70:13:B0:CC:6B:F5:AA:ED:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/67e9a890-c640-3faf-80ae-71476177faba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225/d57fb7e0-00a6-4537-98dd-87a5acbd1225.crl

            X509v3 Authority Key Identifier:
                keyid:12:9E:1E:B9:07:96:A5:BD:17:65:C9:E4:28:11:73:8F:4D:B2:91:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d57fb7e0-00a6-4537-98dd-87a5acbd1225.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.36.0/24
                  130.12.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:89:7a:b8:df:3b:ca:47:c6:e5:3c:d7:73:24:87:ff:06:3b:
         93:ac:5d:36:89:1d:9b:69:cc:1d:8f:28:60:14:35:89:83:5a:
         26:b7:8e:0e:16:81:05:74:26:07:85:06:06:97:56:44:d0:8b:
         24:3e:67:6d:c7:e0:fb:c0:bf:5c:94:68:c4:63:6e:80:ac:68:
         eb:98:d8:cb:ed:23:dc:91:f8:90:fb:0e:e2:3e:23:c7:19:3e:
         7f:e8:3f:ff:5f:a0:22:e9:11:01:4f:a8:cb:10:84:d3:c3:f7:
         27:a8:17:45:00:5b:6e:82:51:c8:ba:39:f3:98:7e:bf:07:b9:
         41:5e:8e:f3:78:2e:ff:f0:04:8c:1e:4e:58:e4:17:75:af:7b:
         82:62:a0:ff:40:97:60:0b:88:c8:86:cc:fe:04:3f:ed:6d:86:
         3b:30:d1:7d:79:c9:43:69:f7:92:1d:bc:b1:df:7a:f5:df:34:
         a8:13:8f:dc:97:13:f0:e7:ba:48:c2:ec:ed:97:d7:b5:8d:76:
         95:f1:df:b4:2c:4b:fb:e9:f4:48:8a:32:52:e1:c7:77:20:a6:
         92:2f:a8:70:27:91:53:9b:f4:63:1c:fd:e7:8c:49:cc:de:23:
         24:c5:f6:71:fa:e1:6d:93:ef:67:1e:4a:41:c9:4a:a1:ac:21:
         e4:63:f0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:43:50 2026 by rpki-client