Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa
File:                     97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa (raw, json)
Hash identifier:          oioPEWVQAwJtPOwNEuxBQD4LvPn6lspMaHOPu4TkKVI=
Subject key identifier:   CF:96:B7:19:DF:BB:05:71:46:C8:42:02:CE:F0:AB:0C:77:0A:43:EC
Certificate issuer:       /CN=452d8948-a48b-4a64-bb88-5c289408944c
Certificate serial:       010D0C9F4328584D7A0524B321B05DFCC38F5E80
Authority key identifier: 2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     33201
IP address blocks:        23.142.112.0/24 maxlen: 24
                          2602:800:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:24:b3:21:b0:5d:fc:c3:8f:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452d8948-a48b-4a64-bb88-5c289408944c
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=99a9bc45-5a61-4e91-9ca2-67a30832161d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3b:ed:e6:9d:3c:be:68:51:58:39:4b:2e:1e:
                    26:d2:8a:ee:b9:fd:bb:67:9e:59:59:64:b8:00:20:
                    50:6e:20:b8:a0:4d:a1:47:4c:16:42:68:8e:99:39:
                    fe:36:e0:e9:7e:49:77:64:e6:65:51:2c:6b:8d:0a:
                    b9:a5:d3:a9:63:93:fc:b7:58:f0:a8:ee:f4:3d:42:
                    5e:02:06:ff:0b:06:3f:e1:fb:7f:bf:69:df:c7:47:
                    2c:c2:a8:70:fb:d9:93:e0:14:de:d5:c0:6a:13:a2:
                    92:ec:66:66:c3:ba:23:a0:35:44:c8:01:64:31:fb:
                    dd:bd:bb:32:45:5f:ef:eb:12:cb:d1:3d:b2:14:1b:
                    f1:bb:cb:cd:e0:1c:6e:74:1d:f5:1e:98:d2:f7:fd:
                    bf:97:dc:b4:25:39:b3:ce:23:49:8b:6d:00:70:e7:
                    5f:ab:18:22:f4:b1:e3:b6:61:e4:f9:a7:55:2f:77:
                    6d:3b:52:e1:ac:bc:90:0f:80:4e:9f:eb:c8:9f:c0:
                    7f:6e:22:66:41:bc:63:84:ec:71:9b:ad:53:f1:eb:
                    3b:58:75:3a:73:b7:8f:f6:d5:7c:71:4b:7c:f1:25:
                    7b:54:1c:15:e8:25:8d:bb:a5:f2:93:b2:0b:9c:0e:
                    09:18:c7:04:88:5f:3f:3c:b1:09:0e:ff:84:44:ed:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:96:B7:19:DF:BB:05:71:46:C8:42:02:CE:F0:AB:0C:77:0A:43:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.112.0/24
                IPv6:
                  2602:800:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:44:0a:0b:9f:1e:6b:a9:0c:97:82:1d:52:3b:38:00:54:2c:
         71:98:1c:20:24:06:df:57:b8:de:a1:6c:a6:3c:ad:bb:7a:04:
         cb:c7:80:9c:12:0b:2d:46:a5:80:07:5a:7c:c8:ea:09:c6:7e:
         7f:96:00:91:8d:23:a5:c3:c5:80:ee:ed:c5:8a:49:c2:cb:16:
         98:8b:f4:dd:59:e4:4b:bd:8e:42:48:f0:f3:a0:a1:5f:76:6e:
         fd:1b:42:82:3d:29:3c:68:36:1b:cc:a5:29:76:c7:00:70:e6:
         64:6b:b8:65:a3:2a:37:26:d6:9f:ab:8a:f0:e2:16:78:25:4b:
         c1:50:3d:07:bf:d6:7e:ef:f0:11:89:0c:61:ae:1c:21:47:2b:
         80:0f:c4:68:16:6f:c3:0a:80:c6:cd:1a:85:45:5d:5c:93:96:
         41:fe:89:91:0e:2c:42:ac:9e:61:e0:cc:f8:7d:17:21:bc:d2:
         3c:f7:02:98:e5:0e:69:79:5a:bf:fa:95:46:0e:24:4d:91:d5:
         92:e1:ba:37:9e:cf:be:e7:47:0a:e8:2a:71:7d:fe:6b:c1:8d:
         c9:b2:2d:75:d0:8a:4c:5b:bf:29:29:13:c3:b1:13:21:05:fd:
         82:ad:05:29:47:27:80:18:fd:7f:a1:b9:02:a3:a5:f7:1e:62:
         6e:e4:0b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:38:40 2026 by rpki-client