Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5805723c-746c-3198-a633-1c5ff07a902b.roa
File:                     5805723c-746c-3198-a633-1c5ff07a902b.roa (raw, json)
Hash identifier:          lm8arrK/rrgITwkuMi85l+fnLu6KqHsapSrUu22hniY=
Subject key identifier:   6C:EB:65:0C:F3:1A:36:EE:B6:A8:FB:7E:E2:23:63:B9:D2:05:F4:6E
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584D571FA631D4A301FD4BD53B80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5805723c-746c-3198-a633-1c5ff07a902b.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     4766
IP address blocks:        23.248.160.0/24 maxlen: 24
                          23.248.161.0/24 maxlen: 24
                          107.155.28.0/24 maxlen: 24
                          128.1.36.0/24 maxlen: 24
                          128.1.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:a6:31:d4:a3:01:fd:4b:d5:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=63c1a2b4-4cae-4707-b7d8-5514150536b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b7:99:e1:31:f2:17:f6:c4:59:2a:65:5e:9a:
                    e7:10:dd:c5:0c:5a:db:7f:9a:c2:08:f3:90:08:ff:
                    64:7e:0c:7d:7c:53:cc:f7:18:98:4e:78:be:5a:f8:
                    ea:af:a0:5c:8d:4b:c4:e6:de:ff:8b:eb:c1:78:12:
                    0e:1e:e3:a3:b9:b0:61:a4:8d:12:4b:ae:94:bc:7e:
                    29:fd:f9:e8:06:4f:ef:1a:d0:09:7c:bb:82:63:87:
                    86:cd:b0:b2:1d:91:b6:b1:37:72:8c:d3:23:4a:df:
                    6d:bb:2c:30:19:c8:14:cd:84:a4:83:99:9c:8a:4b:
                    9c:01:c6:44:66:e7:9c:7f:33:c5:66:8f:ee:4f:3c:
                    f1:03:cb:cd:18:bf:e5:c6:40:45:74:5d:2e:ec:7f:
                    b2:6f:59:5d:f0:17:50:2b:c2:c8:8c:90:50:35:c0:
                    8b:e0:73:94:49:bb:be:c0:e0:32:15:7e:e6:25:a0:
                    2c:ff:2a:71:8b:5d:d2:79:51:10:92:a9:e0:4f:61:
                    b4:1d:24:5d:ca:84:9e:6a:4f:2b:3b:48:83:b7:bb:
                    bb:77:70:13:c1:1c:fb:4f:5c:5e:2c:b1:9a:15:9d:
                    9d:d3:16:62:c8:7f:44:4e:05:4c:ff:2d:07:5c:5e:
                    20:83:39:52:0e:14:4a:5f:00:c2:4a:02:54:c6:1f:
                    61:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EB:65:0C:F3:1A:36:EE:B6:A8:FB:7E:E2:23:63:B9:D2:05:F4:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/5805723c-746c-3198-a633-1c5ff07a902b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.248.160.0/23
                  107.155.28.0/24
                  128.1.36.0/24
                  128.1.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:80:70:bf:4a:7e:e6:ad:36:ce:4c:07:03:94:f3:97:c8:f1:
         94:6d:64:39:63:5e:2b:3c:80:81:a6:87:c8:ab:99:ec:9e:71:
         e6:59:83:0f:d4:90:10:32:b5:79:cd:8c:c1:8b:7a:2b:02:2c:
         7a:44:7a:70:ef:2c:4c:e9:54:48:8b:84:e6:fb:3a:45:0b:ea:
         19:d0:eb:07:71:21:88:74:04:45:9d:09:36:53:53:3d:71:23:
         ca:1f:ff:16:e8:4a:33:b9:1c:c3:c8:7c:f4:80:18:c5:71:95:
         cd:ea:76:30:c1:cc:26:f7:4a:5d:60:09:1a:fd:ee:e2:81:7e:
         a8:ab:18:51:92:77:0e:9f:9b:d0:5e:80:67:61:51:59:6e:2d:
         a0:a0:39:d3:51:c3:b5:b5:6a:61:5c:70:62:32:e8:55:06:4f:
         d7:18:80:42:08:6a:c3:31:08:df:27:9c:b8:21:f3:5d:72:07:
         72:33:05:98:0d:a8:77:66:9e:1a:30:cc:77:16:d1:9f:e7:11:
         1b:81:fa:07:03:c5:5a:27:50:90:71:4b:dd:25:e9:44:7b:1f:
         32:5f:84:d7:01:90:91:0a:bd:b8:e3:bf:e3:c1:9a:75:ca:d4:
         9d:9e:e9:91:f9:cf:e8:c6:1f:e4:ca:1c:c3:85:30:bf:3f:3a:
         c7:64:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:28 2026 by rpki-client