Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa
File:                     db0d49c2-07c6-353f-b407-3be87c24ae90.roa (raw, json)
Hash identifier:          zHQ2R/oWVPSk0UKQEYH+mpx53nrvyLOhEag9mo3RnRA=
Subject key identifier:   0A:11:4F:E2:1D:5C:BB:09:E7:90:F8:A1:5B:06:DA:1A:94:A7:CE:01
Certificate issuer:       /CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2
Certificate serial:       010D0C9F4328584DD35B0678604966AD3979DBC0
Authority key identifier: 39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     400477
IP address blocks:        23.132.56.0/24 maxlen: 24
                          2602:fbc1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:06:78:60:49:66:ad:39:79:db:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=b408a17c-6562-496d-a874-69c135529bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b9:e7:06:a5:1a:d9:3f:6c:67:e2:19:1e:26:
                    03:0b:9f:16:e8:94:26:10:4a:4d:a6:94:1e:13:18:
                    3c:59:39:7f:73:6f:e3:41:2d:bc:8f:aa:d9:b3:b9:
                    1c:b3:d8:0d:7e:79:45:d2:89:41:7e:af:00:ea:b9:
                    e0:02:ec:17:16:98:1d:36:18:87:6f:1e:1d:77:27:
                    84:82:e5:26:1c:0e:50:55:61:79:73:77:bd:2e:9e:
                    c4:9b:8d:54:93:85:0a:7f:32:e8:e0:69:5a:29:4b:
                    5d:6e:7c:2b:74:5d:25:eb:ee:83:ce:46:66:96:2d:
                    84:5a:9f:07:33:0a:d2:09:45:6e:8e:aa:d7:0b:40:
                    c8:37:f5:1b:26:6a:a8:32:26:16:83:50:8f:26:59:
                    17:a6:f9:3e:b3:e9:4c:7c:a3:4c:be:47:52:62:0b:
                    27:54:59:00:0f:b0:60:34:fe:a9:29:c7:da:7a:33:
                    2b:27:f8:d6:fd:4f:39:28:3f:19:6b:3c:ae:00:15:
                    46:09:8c:87:57:bd:69:08:41:87:8d:5d:b3:06:a5:
                    cf:00:ee:d9:43:af:39:ca:d0:6b:ad:f0:13:37:c6:
                    b1:9e:49:b3:69:a6:5b:91:b1:ef:62:90:50:54:73:
                    3c:91:68:aa:3f:da:e0:9e:b2:bd:6a:38:d3:06:af:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:11:4F:E2:1D:5C:BB:09:E7:90:F8:A1:5B:06:DA:1A:94:A7:CE:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl

            X509v3 Authority Key Identifier:
                keyid:39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.56.0/24
                IPv6:
                  2602:fbc1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:86:2d:e3:25:d9:38:d4:c6:11:24:1f:bc:95:88:b4:de:ac:
         b3:e2:e9:26:98:21:95:0d:2c:d4:b0:42:59:a3:9e:69:bc:77:
         ec:88:c8:0d:68:4f:7b:bb:24:9e:7a:5a:9c:1f:fb:d4:c7:4e:
         0d:b7:9d:ac:f3:3f:4b:8d:70:4a:ef:79:9f:9b:59:24:38:c3:
         01:83:a1:90:cb:b6:1e:28:87:dc:13:4b:96:66:ac:ac:33:55:
         da:32:72:6f:d1:f1:0f:be:d7:de:a4:6c:db:ce:4d:5a:b0:58:
         7f:8b:cf:17:16:86:3c:0d:1b:39:19:74:98:e4:c6:9e:dd:74:
         bb:55:ef:c6:37:9c:e4:37:03:73:0d:59:0d:a1:b3:99:3d:72:
         74:b2:28:ed:f8:e4:dc:0e:16:5b:e8:3d:a3:29:94:16:09:8d:
         74:ea:c7:c1:fc:42:0e:65:b9:25:de:29:70:02:86:76:28:fd:
         15:19:bd:f2:f6:54:8e:a2:be:dc:6f:24:36:00:bc:71:58:c7:
         93:a2:87:47:fd:56:a7:75:b6:0d:06:e8:02:1d:96:e0:30:39:
         d5:44:bd:29:c4:80:3c:6c:5a:26:07:c0:6f:f6:10:71:c7:0c:
         f5:1b:23:ef:25:dd:cf:d5:ad:1c:59:e4:00:d9:5b:d3:f3:6f:
         15:f7:20:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:14:59 2026 by rpki-client