Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/b4650b69-421b-363d-bf89-f300dddbf3b3.roa
File:                     b4650b69-421b-363d-bf89-f300dddbf3b3.roa (raw, json)
Hash identifier:          QTK9GlqywUbW8ou4vAh2pIUPHweDBKYt7zhI6r1o1a0=
Subject key identifier:   36:47:DF:BA:10:32:E6:BF:29:4E:79:5C:1D:5C:E1:F0:A0:CE:9C:41
Certificate issuer:       /CN=398d0b70-b801-4a07-bcdd-88f7f05efa5b
Certificate serial:       010D0C9F4328584D86955078083807FFA280B840
Authority key identifier: DB:B0:36:C6:19:B5:7A:6E:C2:09:BB:F3:23:1A:D9:B9:8A:AC:FE:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/b4650b69-421b-363d-bf89-f300dddbf3b3.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     63023
IP address blocks:        23.139.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/398d0b70-b801-4a07-bcdd-88f7f05efa5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/398d0b70-b801-4a07-bcdd-88f7f05efa5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:50:78:08:38:07:ff:a2:80:b8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=398d0b70-b801-4a07-bcdd-88f7f05efa5b
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=010f80e3-8eed-4e27-93ff-567d982c8c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e8:01:9e:b5:6a:fa:0c:06:2b:8c:b8:42:90:
                    ab:7a:01:79:54:0a:f4:12:41:19:28:29:a7:49:da:
                    28:c4:64:8b:3a:37:3b:a2:cf:df:13:d5:0a:23:e4:
                    f2:41:8d:6d:e2:24:35:31:64:ef:54:b1:45:7c:dd:
                    68:90:5d:ac:ed:e1:de:8f:0c:97:81:9f:7a:ea:d2:
                    c0:35:df:2c:55:0b:e9:2e:45:05:e5:87:58:65:30:
                    a1:94:83:b8:78:79:01:d6:f5:bc:58:7d:56:3f:9b:
                    6e:f6:c0:87:dc:39:97:1d:90:f5:19:59:35:c3:d0:
                    f1:a4:b3:9e:90:3a:1e:4b:e7:22:a6:4d:a3:d0:f0:
                    f1:e8:2b:db:3f:a7:c6:a5:b0:b2:a3:26:84:4f:a6:
                    48:7d:d3:53:62:8b:67:7c:8c:68:77:41:5a:9c:1e:
                    f1:13:52:33:dc:98:51:6e:17:44:d5:09:6f:0b:a7:
                    e0:7b:8e:11:8a:aa:1a:36:a9:ed:87:96:3d:d6:44:
                    13:9d:df:c9:cd:4b:c9:23:44:dc:1d:9b:15:c6:8d:
                    d7:62:b8:9c:dd:61:a4:fb:0b:86:9a:de:7e:24:82:
                    32:41:48:19:13:65:6a:88:da:ef:fa:71:a5:4a:04:
                    a0:d0:6a:a6:73:f0:6e:10:97:28:7b:e6:27:af:9e:
                    d2:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:47:DF:BA:10:32:E6:BF:29:4E:79:5C:1D:5C:E1:F0:A0:CE:9C:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/b4650b69-421b-363d-bf89-f300dddbf3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b/398d0b70-b801-4a07-bcdd-88f7f05efa5b.crl

            X509v3 Authority Key Identifier:
                keyid:DB:B0:36:C6:19:B5:7A:6E:C2:09:BB:F3:23:1A:D9:B9:8A:AC:FE:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398d0b70-b801-4a07-bcdd-88f7f05efa5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:26:b7:76:f6:e6:98:21:4e:14:1d:c9:8b:08:25:2d:fb:70:
         70:55:3b:b9:4b:95:a9:7c:9e:72:31:bf:60:db:df:0e:24:0d:
         a0:7b:25:57:98:4e:df:93:66:01:7d:15:08:14:90:36:2c:1f:
         04:c0:c7:aa:4e:d1:ff:1e:71:09:77:1a:76:36:15:31:3c:4c:
         90:f7:35:a3:36:50:8f:28:e0:7c:13:a3:f7:cf:89:c2:4a:06:
         d0:95:25:28:cd:16:fa:5f:39:c4:ab:ff:a0:43:bd:02:c5:a5:
         54:ab:cf:d7:5a:a0:2c:80:54:be:cd:fd:64:e2:57:34:71:c5:
         9e:30:3a:69:77:41:bb:7f:fd:0b:6e:69:24:3d:1a:14:96:cc:
         71:d1:b9:72:21:04:eb:5c:fc:ce:47:57:15:cf:e2:d4:48:40:
         4e:33:f0:f8:4e:f5:b6:d0:bb:37:5a:20:31:69:52:1e:72:dc:
         6c:c9:d7:2a:2d:a4:af:2a:32:ff:7e:85:49:83:1c:4d:a5:7a:
         29:09:37:8e:bb:2b:e1:69:22:2a:08:1e:f6:f0:46:9c:ea:c2:
         78:75:87:22:5e:fc:8e:84:86:ef:b8:8c:f8:2a:fc:c7:53:d6:
         a4:73:cb:ee:34:c1:76:df:2c:16:d1:72:59:f1:ec:3f:76:eb:
         2f:e1:b7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:20:08 2026 by rpki-client