Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/12642e6e-d131-30f3-8b99-43152a62e15e.roa
File:                     12642e6e-d131-30f3-8b99-43152a62e15e.roa (raw, json)
Hash identifier:          eeHfpOTSDtHJkVm/ccVQr/4kHUlnNK318/5199nI6E8=
Subject key identifier:   11:5B:F2:83:AF:90:E7:D1:35:91:DC:2B:4C:6A:D3:5B:E1:66:BD:2B
Certificate issuer:       /CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
Certificate serial:       010D0C9F4328584DE6E5D5763E9C4B6502493C80
Authority key identifier: 65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/12642e6e-d131-30f3-8b99-43152a62e15e.roa
Signing time:             Thu 21 May 2026 01:00:25 +0000
ROA not before:           Thu 21 May 2026 01:00:25 +0000
ROA not after:            Wed 19 Aug 2026 01:00:25 +0000
asID:                     20213
IP address blocks:        23.135.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e6:e5:d5:76:3e:9c:4b:65:02:49:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec8ef17e-d8d3-48e9-92e7-84e96fa64410
        Validity
            Not Before: May 21 01:00:25 2026 GMT
            Not After : Aug 19 01:00:25 2026 GMT
        Subject: CN=697e1c6e-e41c-430f-ba49-1fd9105236a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:5f:8f:5a:00:dc:dd:8d:64:9e:03:09:f0:
                    3c:48:f8:30:6d:c9:47:48:54:ae:f1:ab:f0:62:26:
                    bc:e8:52:27:e8:40:41:fc:78:4c:97:ae:bc:2a:dd:
                    e7:46:d0:24:a8:f2:74:f5:db:62:a7:6d:93:69:5c:
                    85:34:ac:08:88:27:84:56:b3:a4:84:3c:bd:85:2a:
                    ed:63:dd:f7:9f:e2:f0:74:cf:c4:b6:1b:db:8f:c8:
                    9b:22:65:71:d2:f9:72:b6:32:9f:c8:e3:2e:7f:c7:
                    77:9d:03:06:5e:51:41:02:a8:d7:38:f9:12:f9:ab:
                    35:be:21:47:c2:b0:ef:57:bb:e9:56:b1:71:c5:46:
                    76:1c:3b:ea:df:87:6a:ce:93:54:ed:a0:dd:b2:a4:
                    7c:da:aa:fd:55:7e:3c:16:f3:6e:6b:fa:2d:0b:28:
                    dc:df:10:3b:63:98:42:43:b4:f4:ad:50:9e:ba:1d:
                    1f:28:7f:dc:48:dc:11:98:66:d8:3c:2f:f2:d9:80:
                    e4:bb:c2:cc:35:7b:0c:5d:02:fb:53:f1:16:69:92:
                    84:e2:17:af:4a:e3:89:ac:cf:81:80:ce:7b:99:0e:
                    d0:ff:45:e9:43:4a:c2:84:1a:29:c0:a1:d4:80:69:
                    a8:9f:ac:ab:12:e3:84:bd:f9:4d:bb:d6:31:0b:72:
                    2d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5B:F2:83:AF:90:E7:D1:35:91:DC:2B:4C:6A:D3:5B:E1:66:BD:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/12642e6e-d131-30f3-8b99-43152a62e15e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.crl

            X509v3 Authority Key Identifier:
                keyid:65:0C:4A:76:B2:7A:A5:C8:07:02:8E:FF:32:02:C4:75:B4:34:F7:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ec8ef17e-d8d3-48e9-92e7-84e96fa64410.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:d2:d2:8c:87:8d:c2:4c:b6:62:d9:17:8e:49:7e:0a:f8:c5:
         f6:a0:1b:92:58:d1:af:da:09:e3:0e:be:14:f5:3f:f5:38:bc:
         1c:98:80:e0:bf:1c:ce:4b:b5:2e:b0:36:b1:7e:be:ae:c3:55:
         74:fc:ed:79:25:46:91:48:e8:2b:72:41:0b:94:db:ed:d1:3f:
         03:17:3c:4a:bd:3b:57:40:b8:28:0f:2e:f3:0e:38:af:37:88:
         aa:c7:1b:27:77:e8:c1:e5:39:b2:c8:eb:66:a8:d8:ac:54:c2:
         43:30:52:39:7c:4a:e9:bf:7e:9b:69:ce:f0:77:9b:73:f8:5f:
         87:99:cd:8c:50:aa:bf:3a:b8:b4:50:78:ce:f1:32:ff:7b:74:
         c9:37:70:f6:a5:9e:79:9a:c2:ed:76:a0:e4:31:6a:c9:01:f8:
         3b:c0:5a:c9:d9:5b:82:87:56:7b:32:a5:df:42:9d:22:7e:86:
         4b:98:6d:0c:ba:1a:10:db:a9:dd:59:fd:9c:3a:69:9b:f5:e6:
         b5:d6:c4:10:ab:b3:58:b0:84:f3:f3:89:96:bd:f3:79:f5:59:
         41:db:41:0b:12:b9:36:ea:47:4a:51:78:1b:9f:a2:c3:50:a6:
         41:d1:e7:be:36:df:b3:d4:3f:ef:ed:20:17:31:c6:de:9d:d2:
         69:2c:8a:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:46:57 2026 by rpki-client