Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/a815c6c4-4483-3cc7-ac67-b19b39011030.roa
File:                     a815c6c4-4483-3cc7-ac67-b19b39011030.roa (raw, json)
Hash identifier:          lyyyDYBtJFSweDan3aoQa1rXyNZD8X79xVVB8b+fnJ0=
Subject key identifier:   8B:A2:3D:5F:2D:86:BC:6A:89:AD:8C:5E:E4:BC:23:78:89:15:9D:85
Certificate issuer:       /CN=eb9c4fdf-96db-4874-8da5-2c10670d3aa3
Certificate serial:       010D0C9F4328584D75D54326FE586962F7B4BF40
Authority key identifier: E8:0D:66:3F:6D:1D:2E:31:68:59:6E:B4:68:F9:30:65:9C:F1:60:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/a815c6c4-4483-3cc7-ac67-b19b39011030.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     401202
IP address blocks:        23.182.88.0/24 maxlen: 24
                          2620:ca:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:43:26:fe:58:69:62:f7:b4:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb9c4fdf-96db-4874-8da5-2c10670d3aa3
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=f538eb82-5534-45c9-a018-588fc342595c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:46:81:18:e3:ad:01:c1:bc:97:cd:10:bf:61:
                    df:31:e9:76:b3:cf:3c:5e:4e:c8:c2:2c:ad:fe:82:
                    46:ca:e9:0c:74:d7:26:49:aa:b9:be:42:35:21:8a:
                    45:c8:c1:8f:62:7b:6e:57:a0:5b:23:f2:ca:cb:b3:
                    95:c6:e0:9a:02:35:62:02:26:de:5f:33:d5:90:84:
                    5e:f5:0d:d8:5a:bf:db:9a:df:ae:87:82:47:81:79:
                    b4:73:8a:4f:d3:e8:a8:75:79:41:f7:1a:45:a2:2b:
                    c2:d5:ac:02:b5:d8:b1:c5:cd:82:13:bd:b2:4a:17:
                    a7:b1:45:19:a2:28:4d:db:54:32:e2:33:e1:b6:59:
                    75:b9:2f:8d:6c:e8:99:c8:9b:5b:68:eb:a7:a7:23:
                    68:65:77:56:dd:6e:42:e4:68:f3:00:e7:50:66:aa:
                    6e:85:63:de:56:b9:fd:89:60:42:b4:19:88:4c:e2:
                    f1:1a:90:32:ed:f7:a9:0f:0a:15:09:b9:7b:47:04:
                    5c:51:98:1b:26:eb:65:fc:9f:6d:b4:84:a6:ee:c0:
                    e2:02:4a:5f:d6:d6:76:57:2e:ae:98:8d:88:42:cb:
                    9a:e8:c9:9d:67:41:ee:7e:af:89:d3:f1:2d:a6:bf:
                    52:e7:e3:11:da:00:04:65:b4:e3:f1:2d:8d:19:d0:
                    55:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A2:3D:5F:2D:86:BC:6A:89:AD:8C:5E:E4:BC:23:78:89:15:9D:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/a815c6c4-4483-3cc7-ac67-b19b39011030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.crl

            X509v3 Authority Key Identifier:
                keyid:E8:0D:66:3F:6D:1D:2E:31:68:59:6E:B4:68:F9:30:65:9C:F1:60:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/eb9c4fdf-96db-4874-8da5-2c10670d3aa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.88.0/24
                IPv6:
                  2620:ca:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:0b:ee:ab:24:cf:47:ec:39:d3:cd:10:73:7d:dd:8a:5f:2e:
         b6:57:f2:94:b5:58:3c:d0:4a:35:fc:1a:02:96:5e:8b:2f:0b:
         1e:d0:80:c1:bc:51:2c:58:66:ee:56:c9:06:42:9e:69:30:3b:
         8e:a8:87:9f:77:ac:d9:24:a4:31:1d:99:58:cc:0a:92:43:a1:
         a0:28:1c:d0:e6:2c:ee:8b:2d:09:b2:fe:b1:67:b8:c9:79:47:
         9b:e1:af:8a:20:58:0f:60:a2:34:59:ca:3b:2a:39:03:cd:15:
         1d:ef:a9:cb:8b:83:e6:60:1f:75:47:d9:3e:33:be:b5:15:14:
         c8:a4:14:c7:51:1c:2f:39:5e:ab:a5:88:59:7e:fa:d0:0a:48:
         04:ac:40:b1:4b:67:db:7d:44:3c:75:5d:86:ce:4d:43:24:eb:
         6f:57:41:0d:27:ab:59:50:51:f1:2d:fc:9c:be:59:6b:c0:ab:
         06:1a:ed:f5:3a:96:91:8f:69:6a:31:d2:2f:84:2a:72:b7:27:
         e8:a2:86:34:64:99:ff:93:62:7f:18:af:12:d7:a9:61:34:13:
         5b:33:69:02:c2:6f:d3:c9:73:4d:20:91:08:52:3c:c0:58:cb:
         a0:7d:3a:73:d7:59:59:d9:d3:a8:66:77:6e:2a:77:24:65:ef:
         4c:9c:69:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:21 2026 by rpki-client