Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61309c2c-1304-4196-8032-81ffd78aaa87/ebb20fa8-3adc-3a18-8273-792793bc9c8d.roa
File:                     ebb20fa8-3adc-3a18-8273-792793bc9c8d.roa (raw, json)
Hash identifier:          76ma94B3rAUDp9QV67Z41Mg59E0n5nyPyeefEOECDZ4=
Subject key identifier:   FF:2A:D0:06:60:43:34:AD:D9:0C:07:45:3C:8A:12:19:94:76:95:89
Certificate issuer:       /CN=61309c2c-1304-4196-8032-81ffd78aaa87
Certificate serial:       010D0C9F4328584D7CCFC8F96E53B95E2FE0CA00
Authority key identifier: 56:B8:B1:D6:5F:01:65:71:EC:07:CA:93:E6:3A:1F:BC:51:FA:14:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61309c2c-1304-4196-8032-81ffd78aaa87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61309c2c-1304-4196-8032-81ffd78aaa87/ebb20fa8-3adc-3a18-8273-792793bc9c8d.roa
Signing time:             Mon 13 Apr 2026 01:00:24 +0000
ROA not before:           Mon 13 Apr 2026 01:00:24 +0000
ROA not after:            Sun 12 Jul 2026 01:00:24 +0000
asID:                     8095
IP address blocks:        23.179.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61309c2c-1304-4196-8032-81ffd78aaa87/61309c2c-1304-4196-8032-81ffd78aaa87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61309c2c-1304-4196-8032-81ffd78aaa87/61309c2c-1304-4196-8032-81ffd78aaa87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61309c2c-1304-4196-8032-81ffd78aaa87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7c:cf:c8:f9:6e:53:b9:5e:2f:e0:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61309c2c-1304-4196-8032-81ffd78aaa87
        Validity
            Not Before: Apr 13 01:00:24 2026 GMT
            Not After : Jul 12 01:00:24 2026 GMT
        Subject: CN=ebbbd56f-17da-4330-922d-fbf7a4e8f482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b6:5e:2a:6a:a1:9a:fd:d9:ab:58:31:15:4c:
                    79:4a:d1:fb:65:b4:bb:3a:58:85:74:72:e0:8d:a4:
                    8f:8f:8f:f2:59:a6:f7:a4:52:c6:d1:07:cc:e9:66:
                    d7:a5:85:a5:8a:09:9a:88:58:69:51:81:f0:ac:59:
                    9e:b1:48:db:be:e4:a9:37:a9:03:7a:49:da:26:ba:
                    53:f3:26:2c:34:38:f8:b1:ba:20:40:95:94:3a:b7:
                    af:52:d6:8b:93:d0:ac:76:ea:3d:3e:63:b7:a9:0e:
                    c8:84:2c:ae:74:d0:44:7f:30:c1:86:70:16:85:99:
                    49:94:76:95:23:90:c2:b4:8c:d5:50:4f:7e:ad:63:
                    f6:05:f6:ea:ec:9e:55:0b:b7:c8:d2:b7:7f:c4:a6:
                    62:b6:2c:56:89:76:e7:bc:5c:ff:cf:8d:6e:c6:40:
                    b0:e5:33:d5:9b:9d:96:86:9f:ca:0b:3b:39:7a:d0:
                    a4:a2:b1:ef:31:e6:b9:97:89:01:b7:20:c5:22:73:
                    2a:4d:7e:ee:e1:4d:4c:d5:13:96:4f:ee:42:e5:0b:
                    87:34:48:c6:59:f0:13:1d:5d:6f:8e:6d:9d:34:52:
                    be:4e:9a:96:e4:fb:31:67:1b:64:89:91:9f:2b:12:
                    68:4f:70:98:55:0c:03:01:bd:6e:71:58:ec:0d:76:
                    c9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2A:D0:06:60:43:34:AD:D9:0C:07:45:3C:8A:12:19:94:76:95:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61309c2c-1304-4196-8032-81ffd78aaa87/ebb20fa8-3adc-3a18-8273-792793bc9c8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61309c2c-1304-4196-8032-81ffd78aaa87/61309c2c-1304-4196-8032-81ffd78aaa87.crl

            X509v3 Authority Key Identifier:
                keyid:56:B8:B1:D6:5F:01:65:71:EC:07:CA:93:E6:3A:1F:BC:51:FA:14:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/61309c2c-1304-4196-8032-81ffd78aaa87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:d4:38:79:aa:cf:29:3f:19:0d:66:6d:9b:1b:94:76:d2:d5:
         92:3f:37:06:66:9c:c9:f3:a5:6e:77:35:0a:1a:00:bf:da:c4:
         b1:e1:75:85:10:db:94:18:75:ab:be:98:66:73:85:8a:9c:b9:
         3d:ef:e9:63:16:8d:04:11:17:10:3e:93:fb:3a:3e:b6:e8:e3:
         9c:6b:ca:90:2f:16:de:db:37:56:72:58:f6:b0:aa:dc:42:05:
         33:7e:62:53:c7:97:d5:18:13:66:32:98:72:db:48:85:31:f1:
         db:4f:a0:bc:a5:fc:78:a8:8d:dd:33:4c:e2:19:d9:65:f5:be:
         a9:8d:bc:e6:07:5e:72:2d:de:a5:2f:b3:0a:5f:90:c3:d7:45:
         95:70:76:dc:52:a5:51:1c:0e:de:c6:96:0d:62:7a:83:12:fc:
         49:b0:12:ca:8d:fc:2c:e3:bb:5f:39:ca:7d:bc:8a:87:4a:84:
         f1:05:a5:72:60:0c:85:ae:c1:89:79:20:ba:b3:e8:04:e0:96:
         b3:d6:d1:bc:0b:ea:2a:c9:60:9a:8b:b3:6e:a5:bb:4a:f0:0d:
         b3:19:6c:1c:d8:14:5a:2e:7d:45:dc:ef:92:93:14:b7:b3:83:
         ef:93:14:27:78:37:ea:b9:0b:a0:6f:6d:ba:7c:a0:56:18:61:
         c9:c9:82:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:42:20 2026 by rpki-client