Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/a3e82c79-a4a5-33b9-afbf-9ab8f572c219.roa
File:                     a3e82c79-a4a5-33b9-afbf-9ab8f572c219.roa (raw, json)
Hash identifier:          DnFRQ58vkb+49XcMDsb/Qe6olWygLZw9lQDEIS5UBSg=
Subject key identifier:   73:00:6F:13:E1:59:81:39:E0:C3:8F:38:CA:6D:98:A5:89:0D:71:DB
Certificate issuer:       /CN=ac699a48-185c-4550-bdcf-e3cf55ab56f2
Certificate serial:       010D0C9F4328584DE150844AC52A1A9F9756E680
Authority key identifier: D3:A1:36:49:AD:4E:5B:81:8E:DA:0A:92:E1:DE:48:AE:02:AF:91:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/a3e82c79-a4a5-33b9-afbf-9ab8f572c219.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     399803
IP address blocks:        23.188.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/ac699a48-185c-4550-bdcf-e3cf55ab56f2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/ac699a48-185c-4550-bdcf-e3cf55ab56f2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:84:4a:c5:2a:1a:9f:97:56:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac699a48-185c-4550-bdcf-e3cf55ab56f2
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=03d67fbe-94e6-4997-a2dc-e389002326f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:21:94:25:9f:96:77:f8:0b:a9:05:a0:5c:
                    0a:14:70:35:9c:64:df:9d:b4:ab:a9:92:37:de:d0:
                    a1:03:88:77:99:e5:97:43:3b:71:5e:8c:23:0b:cf:
                    f4:60:b3:79:b4:6a:92:98:df:eb:65:87:a0:c9:3e:
                    0f:ee:76:f5:df:cf:95:fc:30:46:47:56:9e:e8:9f:
                    30:a0:2c:d7:d3:4a:30:5e:31:51:43:44:a6:1f:50:
                    2b:50:69:76:10:cd:5a:f4:19:5f:a2:1f:ff:aa:d5:
                    0c:5a:ec:14:90:ba:24:f6:3f:a6:ee:00:f4:86:e0:
                    a4:8e:d0:ef:45:8a:5e:93:c9:d5:06:a0:ae:bb:e3:
                    f5:3c:4c:9a:65:d8:82:51:02:ac:e2:b8:bb:6e:98:
                    ab:63:1c:e1:5d:0f:17:d8:37:b6:2e:4f:bc:1b:e7:
                    60:81:05:e3:e4:49:c8:f4:ce:2d:6f:71:03:93:60:
                    dd:43:85:5d:43:92:57:42:44:af:4e:9c:20:89:be:
                    2b:d1:81:81:6c:62:61:db:71:04:0f:5c:38:63:eb:
                    68:f5:4d:40:3a:34:53:3a:33:41:5f:f8:31:bd:97:
                    64:63:f3:66:64:fb:95:10:08:ee:f6:1f:4b:d9:95:
                    9e:4d:f7:18:18:06:bb:28:ba:f8:a6:4f:47:5d:db:
                    fc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:00:6F:13:E1:59:81:39:E0:C3:8F:38:CA:6D:98:A5:89:0D:71:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/a3e82c79-a4a5-33b9-afbf-9ab8f572c219.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2/ac699a48-185c-4550-bdcf-e3cf55ab56f2.crl

            X509v3 Authority Key Identifier:
                keyid:D3:A1:36:49:AD:4E:5B:81:8E:DA:0A:92:E1:DE:48:AE:02:AF:91:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ac699a48-185c-4550-bdcf-e3cf55ab56f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:6a:2a:44:fc:9e:2e:1a:f2:64:2d:56:87:1b:e6:ed:58:e9:
         39:39:e6:fe:2d:84:9c:08:17:97:2e:af:7e:5e:e9:b9:37:41:
         6b:63:fd:cb:97:45:c7:f6:fc:8b:a6:65:9a:16:1c:3f:6b:2e:
         54:35:10:89:85:e4:eb:9f:36:17:26:00:be:a4:16:02:26:35:
         60:b4:55:85:24:4f:99:26:bb:ef:e9:60:8d:22:44:90:9c:52:
         7a:f4:9b:fb:6e:52:d9:3b:0f:4f:79:42:6e:1f:84:f4:92:9e:
         f1:0d:fb:55:6c:5b:4a:75:3b:a9:4d:22:2a:de:a9:5d:a0:28:
         1f:df:40:9e:fb:e6:aa:cb:08:82:34:fa:eb:78:69:91:02:75:
         e2:c5:66:7d:b7:07:10:54:60:2f:30:fc:ad:a3:2e:34:be:61:
         b0:07:e1:96:b9:74:9d:1d:0a:7f:50:d0:49:83:04:00:2c:e1:
         ec:d9:4d:b7:1d:da:bb:1e:09:0b:15:01:12:4a:db:61:a6:a2:
         80:e9:9c:c3:81:82:02:9b:5b:f3:1a:f5:08:07:68:55:29:be:
         97:84:cb:7c:f9:f9:06:5b:6c:b0:54:e8:bc:11:ea:1a:18:1c:
         99:47:8b:b6:6a:63:8e:9f:16:3c:8f:bf:b6:fc:c9:e5:8b:19:
         e5:8d:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:17:36 2026 by rpki-client