Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/81eac2b6-7d13-3148-8510-0317f40d91f1.roa
File:                     81eac2b6-7d13-3148-8510-0317f40d91f1.roa (raw, json)
Hash identifier:          /1LNkoios7p77Jh2KFqdrvzi6HkVG8GRK2DdJfRmEjk=
Subject key identifier:   33:10:CB:32:B4:64:48:F6:1B:A5:A6:80:CF:E0:E5:88:77:D1:6C:C3
Certificate issuer:       /CN=750923cb-8ed4-4954-b4bb-8250cc11c580
Certificate serial:       010D0C9F4328584D75D54297E001FAE74A49A140
Authority key identifier: 57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/81eac2b6-7d13-3148-8510-0317f40d91f1.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     33182
IP address blocks:        67.23.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:42:97:e0:01:fa:e7:4a:49:a1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=750923cb-8ed4-4954-b4bb-8250cc11c580
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=1a73b7bb-aace-496e-9478-93744a265b97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d0:94:b4:8d:8a:13:58:a1:36:4a:e6:23:1f:
                    64:06:e2:04:08:81:be:3e:83:54:1d:b0:f9:20:d0:
                    5f:bb:f0:84:a5:9a:39:b1:3a:33:dc:d5:0e:8f:65:
                    ef:39:d0:50:9c:3d:37:a2:7c:8e:06:6a:e0:1a:a2:
                    ed:33:55:08:91:7a:0b:ef:a6:ef:5d:d5:90:f4:28:
                    ac:65:f7:52:cd:4e:c5:f1:96:da:84:52:fe:ec:84:
                    d2:7d:40:c9:19:fc:cc:dd:48:8f:5f:a3:eb:2e:c7:
                    29:e8:a1:6c:f7:93:e9:93:53:94:ec:07:92:a2:21:
                    66:28:36:97:65:64:26:b5:8f:b6:8c:9a:f4:9a:89:
                    a4:57:49:8f:07:cb:d5:e5:77:c5:eb:f8:2a:c6:4b:
                    b1:34:74:fe:a3:9a:93:67:ee:2e:a7:eb:7c:e9:d6:
                    48:47:ad:ad:6a:f1:35:df:f7:14:c4:39:da:02:7f:
                    ed:1a:3b:66:55:62:74:a2:1d:7a:92:23:cf:f7:f8:
                    e4:fa:70:72:dc:60:b4:63:9f:c9:f4:09:97:ef:e1:
                    a4:41:81:ef:da:03:1f:ad:26:1e:1c:1f:b8:5a:00:
                    81:42:13:ef:5e:ef:e6:16:d6:84:1f:c2:9c:7e:fc:
                    89:22:09:36:ec:53:0a:2b:c9:a1:a2:51:bb:0d:0a:
                    b2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:10:CB:32:B4:64:48:F6:1B:A5:A6:80:CF:E0:E5:88:77:D1:6C:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/81eac2b6-7d13-3148-8510-0317f40d91f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580/750923cb-8ed4-4954-b4bb-8250cc11c580.crl

            X509v3 Authority Key Identifier:
                keyid:57:CF:84:96:EF:DD:54:0D:0A:E1:07:C6:47:92:9F:03:A3:12:30:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/750923cb-8ed4-4954-b4bb-8250cc11c580.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.23.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:37:3d:3e:a8:41:5f:14:45:0f:48:9a:25:c4:a0:9c:51:d3:
         16:ce:94:41:c9:c5:6d:ad:17:64:31:48:80:86:e3:90:8b:73:
         4f:ea:ef:e0:06:e4:4a:fb:13:d8:2c:71:aa:1a:17:98:d2:c7:
         7b:38:90:f1:63:21:9e:b6:8f:df:28:14:51:03:ec:47:18:ea:
         ed:f4:c2:77:12:83:4f:eb:1a:81:d1:e8:b3:97:85:69:d2:53:
         c3:e7:d4:f8:65:9c:6f:5d:ac:35:3f:93:d3:41:e2:2b:0c:15:
         14:aa:fd:5f:bc:b3:3b:a2:ba:9e:a8:81:b3:88:4f:4e:75:7c:
         1b:fe:cc:3f:bd:63:cb:d4:91:d0:ec:6d:7d:6f:98:b6:78:5c:
         5c:d3:45:40:0b:99:94:e9:94:ba:63:be:96:fe:a9:3b:1c:ab:
         8b:33:d7:a2:a3:48:34:a0:b3:ac:9c:f6:32:0c:2e:cc:9e:43:
         da:8d:c1:e2:75:52:ab:a0:a4:a6:58:1c:c4:17:1b:2c:c1:50:
         76:54:bb:be:ac:38:71:b7:33:f6:ff:bb:21:5e:11:65:09:4c:
         7b:3b:cb:7b:be:dc:48:0a:5c:d9:35:56:f0:07:66:e8:a5:2f:
         86:a9:81:9f:6b:49:02:55:48:83:a2:cb:09:2b:3d:f5:fb:be:
         6b:a9:b3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:42:45 2026 by rpki-client