Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/c23ad31b-6327-3101-a41a-139fff83dfcc.roa
File:                     c23ad31b-6327-3101-a41a-139fff83dfcc.roa (raw, json)
Hash identifier:          Oa04Kbp9WLJvmTX7NtcdPp5z1GeAWP1DF8IJgdGHAAg=
Subject key identifier:   32:C7:53:4A:5F:1A:80:B3:9B:31:DF:2C:25:5F:83:C1:49:F7:06:9C
Certificate issuer:       /CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
Certificate serial:       010D0C9F4328584E0A25B4EE2AC3EC7888B18500
Authority key identifier: 5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/c23ad31b-6327-3101-a41a-139fff83dfcc.roa
Signing time:             Tue 02 Jun 2026 16:02:34 +0000
ROA not before:           Tue 02 Jun 2026 16:02:34 +0000
ROA not after:            Mon 31 Aug 2026 16:02:34 +0000
asID:                     402221
IP address blocks:        192.120.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0a:25:b4:ee:2a:c3:ec:78:88:b1:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ae0873b-8541-4d6e-b91c-36dbbbe51043
        Validity
            Not Before: Jun  2 16:02:34 2026 GMT
            Not After : Aug 31 16:02:34 2026 GMT
        Subject: CN=e23a647a-0a10-40c6-938a-31ba280d4efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3e:e1:ac:48:86:b7:58:c3:9d:98:0b:eb:e9:
                    91:f0:ed:27:82:bc:84:e3:de:3a:c5:4e:95:a3:c6:
                    be:32:9f:65:31:ea:89:e3:1b:c7:ae:d9:03:24:66:
                    2c:a5:e5:42:18:c3:cd:72:01:c5:47:94:fc:02:27:
                    3b:91:31:54:d5:49:aa:1e:c7:54:bb:a7:7d:5c:e8:
                    60:f5:b2:b9:f0:0a:bb:7c:37:2e:b3:4d:58:49:e9:
                    75:75:e2:20:08:9a:9f:86:69:df:0e:cc:ce:e0:b5:
                    bb:75:d6:0e:dd:26:c9:b8:43:a6:ff:4e:54:cb:58:
                    f4:c5:16:e6:78:52:dc:6f:f3:62:6e:55:8c:ed:f3:
                    d1:84:60:fa:1e:80:c0:83:4c:ca:56:d9:f8:45:f9:
                    b9:77:72:7f:44:c9:fd:94:fc:b3:9c:d0:f3:3a:ce:
                    24:e1:42:0e:77:c4:6d:c3:d5:9e:53:25:41:bc:71:
                    a5:a2:5b:3b:6b:1f:dc:e8:a4:8b:77:ba:64:ce:9b:
                    6b:9c:08:a0:cd:30:b2:45:2c:7a:43:d4:3f:16:bb:
                    f1:b6:84:e8:43:65:fa:6b:82:20:c1:d2:37:02:14:
                    bb:18:33:c7:31:98:f3:7d:ae:ee:2c:37:c4:a2:c3:
                    3a:bc:60:82:24:6d:4c:ac:e6:e1:1f:87:f5:f6:6f:
                    3e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:C7:53:4A:5F:1A:80:B3:9B:31:DF:2C:25:5F:83:C1:49:F7:06:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/c23ad31b-6327-3101-a41a-139fff83dfcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043/9ae0873b-8541-4d6e-b91c-36dbbbe51043.crl

            X509v3 Authority Key Identifier:
                keyid:5B:0A:B2:5C:5E:2C:E1:C1:17:9D:B5:E0:13:08:7A:DA:BB:CD:8B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9ae0873b-8541-4d6e-b91c-36dbbbe51043.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.120.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:df:b7:1c:12:8f:f4:12:cb:7e:97:1b:5c:7e:50:fe:db:dc:
         6d:97:32:ef:72:a3:52:73:71:80:8f:06:61:80:56:ae:c4:08:
         5d:7b:9d:f1:60:03:eb:c4:98:d0:42:d4:43:f2:bd:e5:b5:9d:
         cf:df:e8:92:cd:eb:9c:eb:ca:34:cd:d0:31:14:08:f7:16:26:
         9b:2f:2e:18:9f:9d:e4:c3:74:92:3e:c8:ee:39:9a:60:f3:d1:
         60:4a:e8:64:19:a8:af:16:ab:8d:ba:31:4f:04:06:ac:11:76:
         f7:52:05:cc:62:e5:50:19:3f:44:20:a3:79:98:b7:29:a0:e2:
         27:31:38:f3:21:e8:87:ae:cd:ee:e2:65:01:2b:ec:4f:27:90:
         cf:dc:fb:1d:06:3f:c7:81:96:62:45:72:9f:8d:27:6a:97:2b:
         60:f8:e7:d5:a5:e0:c2:a1:74:a8:c7:12:72:b7:2a:81:eb:64:
         66:e7:f3:d1:28:8a:51:c8:4c:fe:e5:13:93:18:cb:64:c3:8c:
         b8:89:6c:f1:c6:3d:d8:40:67:9c:48:c1:7a:ff:71:44:47:2d:
         ad:f2:4f:06:c4:1e:44:85:56:1c:f5:6c:81:8e:81:ba:70:42:
         8a:49:3c:28:52:a3:54:b8:c7:62:f3:41:6a:04:e1:81:a9:ea:
         6d:93:85:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:07:01 2026 by rpki-client