Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/9a1a984e-2277-37d0-b23d-6ad1bbb1200f.roa
File:                     9a1a984e-2277-37d0-b23d-6ad1bbb1200f.roa (raw, json)
Hash identifier:          jCB+7WdSMg/3SeQdDxPbPqKOpq5itJNGxieaIL7x6os=
Subject key identifier:   38:43:7C:B9:8D:F1:B9:41:6A:0C:EF:92:AD:68:28:A6:33:ED:C6:68
Certificate issuer:       /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial:       010D0C9F4328584E0D84296E95038803A913FC80
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/9a1a984e-2277-37d0-b23d-6ad1bbb1200f.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     401170
IP address blocks:        23.181.136.0/25 maxlen: 25
                          23.181.136.0/26 maxlen: 26
                          23.181.136.0/27 maxlen: 27
                          23.181.136.0/28 maxlen: 28
                          23.181.136.0/29 maxlen: 29
                          23.181.136.0/30 maxlen: 30
                          23.181.136.0/31 maxlen: 31
                          23.181.136.0/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:29:6e:95:03:88:03:a9:13:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=0c5f2e7d-489e-4c50-8cf7-dbfcac8690a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5f:f4:68:11:5c:e6:03:30:eb:ba:6f:48:eb:
                    52:fa:b5:bb:a4:4b:8e:19:80:eb:cb:44:51:76:ca:
                    c5:83:8a:42:e1:cd:ea:2d:02:8a:9a:fb:21:57:5a:
                    d7:06:40:e1:f8:b2:46:2c:58:1a:27:b3:08:3f:7a:
                    f7:8e:2e:58:3a:c9:bd:78:75:9a:07:c6:7d:07:51:
                    74:fb:f3:aa:8f:43:4d:ef:31:b8:1d:26:91:f6:37:
                    d5:c4:b6:70:fe:de:f3:fd:ac:80:1f:61:1f:e8:9c:
                    76:33:e6:48:fe:9b:5b:32:a7:f2:8f:5d:c6:28:1b:
                    00:cf:5f:ca:09:49:fc:b6:8d:ee:0c:51:aa:1b:0e:
                    26:6b:f5:a9:a0:86:2a:ff:bf:f9:71:8f:a1:44:62:
                    fe:25:52:e7:d9:d3:05:33:77:a6:46:be:e5:3d:9b:
                    ec:b0:00:0a:4e:cf:e4:06:3b:64:4a:c7:07:6d:51:
                    58:bf:57:15:ca:a8:0e:28:74:74:18:08:e7:34:a2:
                    86:ef:fd:26:42:17:4c:e4:a0:c8:48:3b:83:7a:b9:
                    91:17:2e:e2:c4:2f:5f:cf:95:7a:85:93:5c:23:79:
                    1d:36:1e:93:36:73:25:04:6c:80:92:0a:83:13:68:
                    78:fc:c5:ca:f5:c1:14:26:88:7d:3f:cc:d3:a6:d2:
                    33:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:43:7C:B9:8D:F1:B9:41:6A:0C:EF:92:AD:68:28:A6:33:ED:C6:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/9a1a984e-2277-37d0-b23d-6ad1bbb1200f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl

            X509v3 Authority Key Identifier:
                keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.136.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e6:96:0f:08:76:dc:06:18:ad:aa:67:01:e1:fe:9a:be:23:
         84:46:fa:8f:a8:c6:d8:f8:92:74:46:51:99:fa:ae:ef:1a:e5:
         d9:8b:4c:0b:df:0d:1c:c7:31:86:f2:66:30:93:9c:22:a9:24:
         5b:81:33:b4:15:b0:81:62:16:cd:60:c2:1b:34:fe:5e:4e:3a:
         b5:cd:8b:c0:09:05:f3:06:da:22:e5:80:90:23:43:b7:cf:4e:
         df:d9:e9:68:20:bf:47:80:2c:65:5f:79:4a:9e:98:bc:12:a5:
         15:89:c4:e5:01:1a:50:be:6d:ea:e9:40:03:38:f5:f5:b5:7d:
         45:f2:6d:b2:e6:56:dd:34:e5:b7:88:45:f9:f8:49:3f:ff:8a:
         f8:5e:ae:a8:d0:d6:fd:3c:1b:92:85:5a:dd:85:b1:15:71:4d:
         88:14:85:8c:a4:5f:aa:4d:18:9b:03:b1:d7:7a:a8:b1:45:cd:
         10:5d:5e:66:2c:08:9c:77:25:41:dc:df:0b:ce:0a:71:cd:dd:
         ab:a0:61:8e:6b:26:af:60:e2:ab:cb:af:37:05:75:73:d0:4a:
         59:e2:26:15:1c:f4:29:90:11:68:96:25:28:9d:d7:14:81:9b:
         08:a7:30:83:8d:8a:7b:7e:7a:dc:16:d9:05:09:5c:05:0f:ea:
         c2:e4:57:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:50:35 2026 by rpki-client