Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa
File:                     26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa (raw, json)
Hash identifier:          op9D/xjoLz4R/TuMpgT/GBe1fvORgSAuAQD09KXOLUA=
Subject key identifier:   3F:2D:EA:B8:7A:8F:B7:98:FB:F3:A8:3C:23:F4:81:64:D0:30:2E:46
Certificate issuer:       /CN=de70a194-124d-4ea2-9bff-570049254664
Certificate serial:       010D0C9F4328584A00DACCCC46878BC6F4EDBF00
Authority key identifier: 68:64:CC:E9:C9:59:C6:8A:17:EE:0A:85:A4:AE:B9:42:3E:02:28:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     399338
IP address blocks:        23.174.48.0/24 maxlen: 24
                          2602:fcbf::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:cc:cc:46:87:8b:c6:f4:ed:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de70a194-124d-4ea2-9bff-570049254664
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=b28c410e-5230-4789-b24b-f8c88443ae2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:13:ca:96:f5:08:64:15:1d:25:37:0e:40:
                    a7:fb:16:38:59:e3:ce:29:94:45:ca:7a:a3:a6:43:
                    31:e6:06:c1:2b:6b:ae:3a:70:7e:01:9a:b3:d3:c4:
                    21:40:f9:1e:ae:72:ea:33:fb:58:36:71:06:6a:eb:
                    49:fd:f4:23:5f:93:73:2b:75:98:82:3e:5f:3c:49:
                    fd:b9:19:a3:94:ef:52:60:68:e3:46:1e:85:7a:ed:
                    ee:b8:be:0d:da:ee:e0:21:d8:dc:33:cd:45:5a:cf:
                    df:af:bd:26:8e:fb:97:70:7a:24:be:63:c2:58:7b:
                    8e:2a:ff:dc:7d:bd:19:86:0d:b5:14:5f:d4:f4:dd:
                    8b:5b:79:2e:9b:d7:d5:57:81:76:9a:4d:a3:da:f1:
                    23:ee:58:5b:f4:71:db:94:eb:00:77:cd:be:9e:10:
                    50:6c:12:20:b6:37:2d:73:ec:d6:56:67:18:6c:0c:
                    d0:a0:a4:e0:1d:18:10:af:f9:d8:d0:19:ec:6e:34:
                    be:f2:25:95:ab:c6:a5:b3:98:a5:e1:b4:1a:4f:84:
                    9e:bb:3e:d6:ab:cb:2f:c6:69:0c:ff:c0:71:a8:31:
                    70:2b:d5:af:f9:59:ba:bc:6e:56:29:b7:fd:57:0a:
                    6d:c6:4d:f4:78:94:80:7f:b0:79:ab:a4:16:79:42:
                    34:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2D:EA:B8:7A:8F:B7:98:FB:F3:A8:3C:23:F4:81:64:D0:30:2E:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/26b91b4e-9f15-3084-adcf-71cc4bb60a54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664/de70a194-124d-4ea2-9bff-570049254664.crl

            X509v3 Authority Key Identifier:
                keyid:68:64:CC:E9:C9:59:C6:8A:17:EE:0A:85:A4:AE:B9:42:3E:02:28:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/de70a194-124d-4ea2-9bff-570049254664.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.48.0/24
                IPv6:
                  2602:fcbf::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:19:c1:e1:fa:d9:f0:fd:c4:ad:48:63:62:77:37:a9:26:81:
         53:b8:03:17:03:e7:39:ea:de:63:19:cb:a7:39:48:e5:ea:d1:
         88:a1:17:c1:f5:49:6a:97:49:af:9e:ca:14:e5:26:40:d3:d1:
         f0:41:b5:82:fd:49:55:75:62:f0:28:b9:2e:32:e6:14:b3:95:
         d2:40:70:b6:c0:f5:d0:00:20:48:c2:07:91:37:0f:3b:4d:99:
         af:84:70:58:dc:52:06:86:a4:c5:c8:cd:01:df:7a:be:0c:3a:
         d1:1b:8c:e2:53:f1:16:38:b3:b2:d0:c7:25:c7:2f:73:d3:f8:
         40:fc:15:f0:f0:e3:b2:f7:de:ea:77:98:05:d7:3a:94:e2:d2:
         9a:48:41:e6:dc:05:b1:39:ab:61:3e:47:89:ea:b4:d4:cd:0a:
         9d:d0:c9:a1:b3:c7:4b:84:22:79:d9:6f:4e:fa:df:16:e1:3e:
         cc:01:57:e0:9a:e7:61:b9:80:59:3c:a6:f5:2e:ab:59:ef:90:
         bf:19:ad:d6:6e:38:46:36:8f:84:06:08:bb:42:c9:fe:ec:e3:
         2d:d9:4f:f8:df:7b:f7:3a:ad:3d:0f:15:2a:aa:71:af:ad:01:
         e8:20:8a:94:85:49:91:71:b8:61:27:72:09:3a:ac:07:de:fe:
         5d:ec:b6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:02 2025 by rpki-client