Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d1c12072-6c1b-3b2a-b15f-9a20316659df.roa
File:                     d1c12072-6c1b-3b2a-b15f-9a20316659df.roa (raw, json)
Hash identifier:          fBy+iz+VWwLjmx/UXaDCthPYEfOoRLkDVKZd3ODqxvk=
Subject key identifier:   F9:A4:E0:3A:3A:61:87:F6:CF:B4:02:2B:C1:3D:18:92:E0:77:77:67
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584D746FBE31F6894DB78E6441C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d1c12072-6c1b-3b2a-b15f-9a20316659df.roa
Signing time:             Fri 10 Apr 2026 01:00:24 +0000
ROA not before:           Fri 10 Apr 2026 01:00:24 +0000
ROA not after:            Thu 09 Jul 2026 01:00:24 +0000
asID:                     20454
IP address blocks:        23.235.244.0/24 maxlen: 32
                          23.235.245.0/24 maxlen: 32
                          23.235.246.0/24 maxlen: 32
                          23.235.249.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:74:6f:be:31:f6:89:4d:b7:8e:64:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Apr 10 01:00:24 2026 GMT
            Not After : Jul  9 01:00:24 2026 GMT
        Subject: CN=90e6cf97-e0a5-41e9-9c24-b3e4916f802d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d9:55:84:40:aa:af:64:02:43:e7:a5:66:07:
                    ae:9f:c6:ae:99:b5:98:51:f8:a1:21:74:82:b7:10:
                    e6:96:14:06:f0:25:dd:06:cb:ae:ec:62:47:50:47:
                    2c:9a:e4:2a:0b:bc:84:dd:f6:a8:a3:8b:94:0a:5d:
                    01:41:55:b2:8d:15:1f:75:48:1b:f4:92:f0:d4:ca:
                    32:f9:33:b9:2c:3f:39:63:71:65:9c:a2:a6:4c:62:
                    83:61:a6:ae:15:18:a8:cb:a8:08:34:d5:78:2b:e4:
                    f3:8f:84:02:f2:4f:f4:c1:74:73:99:9a:51:02:f8:
                    0d:4c:60:a0:2a:43:d1:19:7a:2f:df:20:9a:65:d0:
                    9d:12:84:bb:db:2f:89:9b:c7:04:4a:88:e8:b4:7b:
                    3c:79:99:57:21:96:06:17:32:49:31:6b:32:48:ec:
                    c6:cf:2b:a6:4a:ae:56:74:c5:be:90:9c:34:ef:72:
                    40:79:68:73:c7:56:e7:d5:c5:9e:40:d3:a6:8b:e3:
                    c1:ee:b4:2d:fb:01:04:6e:34:2d:4d:38:83:b1:9d:
                    69:fc:ce:47:c5:4e:23:75:a4:e5:a7:e4:07:cd:fe:
                    7e:6d:f1:c9:73:c9:d2:27:9b:3c:cd:0c:4b:d5:d0:
                    5a:01:6a:ca:9f:67:1f:58:39:f2:4b:51:37:92:22:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A4:E0:3A:3A:61:87:F6:CF:B4:02:2B:C1:3D:18:92:E0:77:77:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/d1c12072-6c1b-3b2a-b15f-9a20316659df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.244.0-23.235.246.255
                  23.235.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:6c:ec:4c:a8:57:ab:c8:b6:b9:bd:0c:25:d9:3f:6c:d7:73:
         3e:5e:6a:ce:c2:be:c0:0c:69:60:f6:c5:b4:18:24:13:10:df:
         f6:af:3e:b2:6b:87:8e:50:4d:ec:0c:5f:db:9c:4f:98:dc:9e:
         ca:d0:d5:f5:ca:43:f0:c1:2a:4a:35:db:61:ea:b4:12:1c:58:
         93:0e:cc:2b:37:bd:3c:e6:e3:de:9d:19:47:ff:f1:46:92:b4:
         40:e1:62:73:1c:77:5f:8f:a1:13:64:45:ae:f4:96:00:a2:af:
         6f:20:e4:76:e6:66:39:77:4e:3f:a8:ec:16:1a:13:1a:8f:3b:
         3f:a0:9d:be:3a:33:ba:1c:0d:08:36:29:f7:09:e5:49:e5:be:
         f4:74:aa:d7:0f:1a:b1:6a:03:ed:50:b9:4f:33:0b:51:06:89:
         da:f9:fa:b1:2a:1a:63:32:8b:80:19:c5:34:36:5a:e8:47:ce:
         d4:f8:59:4d:2d:46:28:06:c9:93:a8:a9:ec:51:26:34:ec:d1:
         bb:53:1c:95:f3:74:ba:cd:fc:45:80:f6:f5:2e:09:1a:18:da:
         fa:69:19:8e:c6:02:a2:d3:f8:31:31:b1:40:d5:99:b9:45:0b:
         1d:53:bb:90:52:96:5a:75:75:a1:11:1b:81:c3:bc:6a:e6:f4:
         7d:39:f6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:00 2026 by rpki-client