Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/a7b7d744-610d-3925-8b29-086102f88c05.roa
File:                     a7b7d744-610d-3925-8b29-086102f88c05.roa (raw, json)
Hash identifier:          gx+p4XyzGqIRrDoz4qTVwBvhXJ+eOAS80ItQGBJmZEI=
Subject key identifier:   9A:C6:1E:7C:AA:04:E0:B3:A8:1F:FD:5B:A9:32:4F:E6:C3:67:E0:9B
Certificate issuer:       /CN=2bf72053-6e89-4e8b-8a04-02150ff7c010
Certificate serial:       010D0C9F4328584DDE85BCADE58C7369BA190B00
Authority key identifier: C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/a7b7d744-610d-3925-8b29-086102f88c05.roa
Signing time:             Mon 18 May 2026 01:00:24 +0000
ROA not before:           Mon 18 May 2026 01:00:24 +0000
ROA not after:            Sun 16 Aug 2026 01:00:24 +0000
asID:                     398338
IP address blocks:        23.140.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:de:85:bc:ad:e5:8c:73:69:ba:19:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf72053-6e89-4e8b-8a04-02150ff7c010
        Validity
            Not Before: May 18 01:00:24 2026 GMT
            Not After : Aug 16 01:00:24 2026 GMT
        Subject: CN=7cd9cd12-7a7c-40f9-9833-c0a783989109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:54:b7:44:22:9f:00:b1:97:95:aa:c9:56:50:
                    d4:14:3c:3a:4a:7c:37:fd:ca:b0:be:61:49:8e:b9:
                    ea:b1:95:4a:d2:79:9f:9b:d5:1a:01:a8:52:56:06:
                    ea:9d:9e:75:7e:f9:88:43:76:79:b9:83:e2:a7:c5:
                    8b:ed:a2:30:97:41:4e:0a:74:6c:13:45:b2:87:db:
                    bd:7f:eb:72:72:b6:0d:cf:58:51:f6:c2:9a:c7:84:
                    df:76:35:d3:4b:bf:06:06:4a:74:21:36:b8:a2:8b:
                    4d:4e:90:30:31:87:03:26:05:fa:83:c3:97:f1:c2:
                    26:40:01:45:12:b3:de:fd:b5:3a:b9:f4:c4:3e:18:
                    4a:24:90:14:0c:9d:52:a5:44:5e:df:65:b6:e3:6e:
                    c1:81:a7:83:8d:66:93:fd:c2:d0:cf:43:cb:a2:9b:
                    54:9c:6e:c5:80:81:e4:24:be:03:a8:cb:9f:51:2d:
                    d6:d2:5c:9d:0d:b7:41:d8:7c:5a:49:8e:c6:08:55:
                    4d:2d:f1:a4:b1:f3:14:36:8f:eb:fb:a8:db:a9:a0:
                    ed:5e:b0:1c:ca:19:4c:fa:04:78:56:be:f0:d9:9c:
                    a0:4f:19:34:fd:2e:28:d4:84:d0:ee:45:b7:74:47:
                    08:77:e9:81:bd:aa:ad:f1:cc:39:7c:9c:29:f5:60:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:C6:1E:7C:AA:04:E0:B3:A8:1F:FD:5B:A9:32:4F:E6:C3:67:E0:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/a7b7d744-610d-3925-8b29-086102f88c05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010/2bf72053-6e89-4e8b-8a04-02150ff7c010.crl

            X509v3 Authority Key Identifier:
                keyid:C5:FE:2C:E5:37:46:4F:90:AB:98:57:CF:78:CF:16:CC:8B:80:CF:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bf72053-6e89-4e8b-8a04-02150ff7c010.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2e:41:05:1d:37:8f:18:95:7d:f1:4d:cc:b5:5a:02:11:71:
         3d:c2:0a:77:d0:b0:58:4f:fe:da:e2:bb:3b:df:4f:28:8f:b7:
         f8:41:52:89:fd:5a:b9:ab:10:79:1c:08:26:da:ae:52:8d:6e:
         60:0a:66:f0:b6:10:5d:64:3a:33:8c:ae:4e:bb:33:d1:b6:52:
         21:c1:e9:6c:55:33:87:64:59:b7:a6:89:51:8a:9e:6b:e8:0f:
         82:c0:eb:e0:a1:46:ed:ba:16:fa:d4:cb:dc:05:a2:7e:f0:3b:
         88:d8:ef:3c:e7:9e:70:af:d9:fb:ba:72:87:bd:6a:43:84:dd:
         bf:2f:ba:4b:a4:9b:37:3f:37:3f:c0:f7:ec:f3:85:b3:a9:36:
         0b:80:30:7b:a6:6f:cc:34:73:a0:10:ca:71:26:84:f4:76:18:
         10:7e:22:eb:f9:f1:3c:72:0a:f6:2d:d5:5a:c2:4c:64:49:7b:
         c2:95:3e:20:ce:8e:3a:1d:2d:76:53:cf:fd:b8:e0:43:f7:2e:
         0d:6d:52:be:90:68:63:ad:40:91:aa:0c:29:15:76:74:aa:d9:
         f7:66:a2:00:f3:f0:ee:90:dc:50:f6:3f:0e:20:17:5d:69:8a:
         ab:cf:ce:43:ff:18:83:8f:1e:11:14:8a:f6:98:7c:56:36:8f:
         91:53:9c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:21:42 2026 by rpki-client