Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/2405e524-d1dc-3e6b-a44a-cc16c3bbfb20.roa
File:                     2405e524-d1dc-3e6b-a44a-cc16c3bbfb20.roa (raw, json)
Hash identifier:          IshjIkujM3rLcFBczAS1foQlpHazSr5P7INYULm85Co=
Subject key identifier:   84:0E:32:80:C5:92:B3:B6:24:3F:B1:1B:4F:E8:9B:93:16:87:2C:54
Certificate issuer:       /CN=23c8a875-2ccd-4122-812d-c7afe70035e6
Certificate serial:       010D0C9F4328584E17ADA716806485CC2A129A00
Authority key identifier: CB:9B:E6:BA:B1:5B:9D:D9:68:F2:58:51:A5:6A:0E:33:A4:70:3D:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/2405e524-d1dc-3e6b-a44a-cc16c3bbfb20.roa
Signing time:             Sun 07 Jun 2026 12:22:00 +0000
ROA not before:           Sun 07 Jun 2026 12:22:00 +0000
ROA not after:            Sat 05 Sep 2026 12:16:10 +0000
asID:                     31898
IP address blocks:        216.75.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/23c8a875-2ccd-4122-812d-c7afe70035e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/23c8a875-2ccd-4122-812d-c7afe70035e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:17:ad:a7:16:80:64:85:cc:2a:12:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23c8a875-2ccd-4122-812d-c7afe70035e6
        Validity
            Not Before: Jun  7 12:22:00 2026 GMT
            Not After : Sep  5 12:16:10 2026 GMT
        Subject: CN=8f8802b2-0d17-428d-8550-71d08a8f503a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:f0:56:89:31:04:a4:6f:5c:80:27:d1:06:
                    bb:6a:69:2b:7e:99:04:6d:32:9b:5d:d5:af:65:3e:
                    e2:01:bf:95:68:3b:81:46:af:b9:6b:f0:0b:77:5f:
                    b9:36:bd:d6:3b:40:93:14:ee:a8:ae:4e:67:0d:fb:
                    e8:29:c1:3b:6b:ea:1e:b7:65:cd:7e:39:ee:0e:15:
                    50:d1:b2:08:07:94:db:ad:04:7a:f5:a3:6b:41:90:
                    1f:d8:30:da:c3:68:05:94:9d:99:9f:6e:4d:9a:19:
                    84:50:ed:80:df:85:06:b1:62:0b:70:ad:2b:2b:d2:
                    e4:59:5a:75:82:49:e7:8d:2d:fa:50:02:a5:15:5a:
                    11:f7:76:78:d3:ef:79:d5:0d:27:85:ec:3b:0d:8e:
                    86:ed:09:9f:98:67:d9:7a:9c:57:03:c6:e0:8b:69:
                    92:e4:db:7c:05:f4:89:04:75:52:08:20:25:a5:be:
                    98:bf:d1:4a:80:b3:c6:66:b4:8d:66:22:ed:b1:0e:
                    a7:5d:f8:da:c9:05:b4:9d:a8:40:35:9e:50:c2:11:
                    07:b5:35:61:68:90:8e:8f:56:04:0a:b8:62:15:cb:
                    31:c5:e7:f3:e1:62:ff:0e:8f:3a:11:5d:2c:79:a0:
                    82:60:b4:26:e8:2a:18:c2:fb:1c:f9:7c:ee:48:18:
                    ba:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0E:32:80:C5:92:B3:B6:24:3F:B1:1B:4F:E8:9B:93:16:87:2C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/2405e524-d1dc-3e6b-a44a-cc16c3bbfb20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6/23c8a875-2ccd-4122-812d-c7afe70035e6.crl

            X509v3 Authority Key Identifier:
                keyid:CB:9B:E6:BA:B1:5B:9D:D9:68:F2:58:51:A5:6A:0E:33:A4:70:3D:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/23c8a875-2ccd-4122-812d-c7afe70035e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.75.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:b7:35:c4:50:b0:af:1b:50:58:eb:1d:9f:46:39:05:4c:33:
         0d:cf:02:38:f7:55:49:41:cc:59:a1:85:c2:67:f8:9a:48:06:
         81:6a:9d:2e:28:99:b5:cb:dd:8d:df:4b:43:08:bc:37:3c:ba:
         c4:37:bc:10:84:53:30:cf:42:57:55:a0:bd:67:c1:30:dc:50:
         a6:2e:b5:c0:8e:25:bd:d6:47:ff:c0:86:b0:7a:22:e6:2c:be:
         27:73:d6:fe:67:69:94:f2:76:ba:f0:16:16:dc:15:44:28:73:
         71:17:b2:96:e1:7b:06:45:ab:9e:41:6f:64:41:03:20:7b:53:
         19:22:3d:5c:60:24:f3:08:80:a3:73:56:bd:91:23:ed:de:89:
         83:d0:79:a3:d4:bc:92:54:02:f7:6a:14:8b:6f:92:20:f6:d8:
         51:b0:b0:71:b4:9f:ec:bc:f9:47:74:f3:a5:6e:1c:98:e5:79:
         f3:cf:0c:5f:45:61:74:d4:d0:de:31:f2:08:e5:96:5b:35:a9:
         c9:44:1d:41:73:d7:4c:40:a4:ef:97:d3:60:d3:da:9e:a6:fe:
         d3:f3:c3:ce:cb:8f:c7:67:f5:58:30:d9:e4:98:02:c5:3f:2e:
         b1:81:c0:d8:37:18:14:b8:f8:fc:84:5c:e2:86:d1:d1:82:37:
         d7:3f:34:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:55:37 2026 by rpki-client