Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/3e4e387a-9d01-3271-aa0d-e084fe37754b.roa
File:                     3e4e387a-9d01-3271-aa0d-e084fe37754b.roa (raw, json)
Hash identifier:          34oNfQx6q1vYWR9gL6gAcqvaGUgVtq6eBF1ptCN33gk=
Subject key identifier:   70:C6:AB:16:FA:D9:78:29:6C:34:DE:59:94:E0:26:AC:CF:32:2A:BE
Certificate issuer:       /CN=b511cf32-0933-4308-8981-9c296fc06987
Certificate serial:       010D0C9F4328584EA799C8AE792692AAF6C66880
Authority key identifier: B7:63:09:26:C1:4A:FB:97:17:CC:67:FB:FB:6B:C0:FE:A5:E1:52:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/3e4e387a-9d01-3271-aa0d-e084fe37754b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     46696
IP address blocks:        23.137.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:c8:ae:79:26:92:aa:f6:c6:68:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b511cf32-0933-4308-8981-9c296fc06987
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4e4725cb-f6c1-403e-9f75-908bb7e45967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b0:bf:15:5f:66:06:50:77:80:3e:ae:0f:94:
                    a8:9e:ae:02:1c:bd:04:48:6b:36:3c:87:6c:85:19:
                    29:98:03:f2:32:c7:15:a6:fb:d1:7a:30:e3:6b:78:
                    94:9a:3f:d9:32:b7:49:35:4b:cf:6b:9d:bc:eb:b3:
                    ea:eb:17:28:bd:63:11:80:e0:28:64:01:97:05:9e:
                    45:92:59:5f:92:46:77:28:ce:c1:b9:cc:a3:98:5c:
                    e6:de:0a:d1:47:f4:1e:30:21:26:fe:4d:5b:7d:b3:
                    bc:c2:66:cb:6a:e4:42:38:cb:a8:f8:33:cd:b9:7c:
                    dd:65:88:36:21:00:8d:79:2f:6e:b0:3f:bd:43:2f:
                    d0:83:45:26:13:84:77:51:a2:5a:49:8d:23:33:e8:
                    05:db:51:cb:75:47:e5:67:5d:53:91:1a:81:7e:96:
                    69:70:5c:cd:88:1e:c5:23:7f:29:b1:19:59:4d:5c:
                    44:52:80:3e:22:97:d8:da:c0:f6:1e:ea:03:e1:92:
                    31:9e:54:db:20:b7:6b:76:d7:6c:53:4e:a5:fd:a4:
                    1d:f4:c5:79:bb:fa:19:31:b3:21:d1:28:e6:db:1f:
                    26:95:bb:23:be:39:92:46:7f:74:85:8f:fa:d0:c3:
                    ea:99:72:59:a8:43:ee:13:3c:96:ce:71:e0:c5:0e:
                    2e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C6:AB:16:FA:D9:78:29:6C:34:DE:59:94:E0:26:AC:CF:32:2A:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/3e4e387a-9d01-3271-aa0d-e084fe37754b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987/b511cf32-0933-4308-8981-9c296fc06987.crl

            X509v3 Authority Key Identifier:
                keyid:B7:63:09:26:C1:4A:FB:97:17:CC:67:FB:FB:6B:C0:FE:A5:E1:52:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b511cf32-0933-4308-8981-9c296fc06987.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:06:11:30:35:e8:2a:0e:94:3a:96:ec:5b:66:15:88:51:b5:
         29:e9:bd:71:32:4e:ad:b1:eb:cd:b0:c1:4e:d2:16:d3:a8:c0:
         de:d3:fa:1b:b0:bb:e6:bb:c4:c2:30:39:61:2c:0b:84:6f:03:
         cb:81:89:66:0f:08:ed:4e:43:91:bf:81:75:d6:01:f3:b3:c2:
         5d:8f:5a:05:49:8c:98:83:54:5a:77:25:dc:ae:29:67:0b:99:
         9a:5f:88:e3:83:ba:fe:ce:af:ec:a8:bd:f8:65:18:f0:7f:ff:
         45:52:d9:e2:82:c0:7e:7a:f8:cb:70:43:55:77:f0:1b:a5:ab:
         f4:c7:f7:a4:82:97:17:11:22:82:cb:28:35:be:88:9f:1d:02:
         3a:d4:7b:52:a5:ce:fe:fb:7a:20:0c:35:7d:63:d6:4c:5b:1d:
         d1:5b:c1:c4:b4:45:42:23:56:6c:07:e8:95:58:53:3c:2f:5c:
         f4:75:a4:1b:72:4b:79:34:87:b0:54:01:9f:6a:61:2b:1c:d2:
         59:b7:cb:37:85:fc:24:e6:b1:cb:2f:8e:b4:2f:76:f0:f9:da:
         0b:e3:39:9e:16:19:cd:04:e2:49:d3:d4:4b:6f:9b:09:ce:3a:
         26:eb:02:65:cf:b9:ac:83:90:49:fb:a0:c4:fc:1b:e9:04:96:
         83:8d:44:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:33:34 2026 by rpki-client