Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/eb082195-7fc4-3717-9a4e-cf41f2a75416.roa
File:                     eb082195-7fc4-3717-9a4e-cf41f2a75416.roa (raw, json)
Hash identifier:          jrxHXQxzpwVI+H8sGjFCE1soMC2v+srKN0aJ4XCLx+g=
Subject key identifier:   A9:45:21:43:1F:66:03:C0:FA:55:BE:13:5F:9E:A8:57:D4:8A:59:A0
Certificate issuer:       /CN=ce1f0349-3090-47e8-8ea1-4edcc2e570d4
Certificate serial:       010D0C9F4328584D67DFAE5AD35FE7262CD2DA00
Authority key identifier: 69:E3:30:C8:95:23:47:F8:5E:91:39:8A:77:5A:38:6D:1E:FA:B2:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/eb082195-7fc4-3717-9a4e-cf41f2a75416.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     63023
IP address blocks:        23.138.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:ae:5a:d3:5f:e7:26:2c:d2:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce1f0349-3090-47e8-8ea1-4edcc2e570d4
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=269440f4-959d-423d-87a7-b4bf362c8229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d1:fb:14:24:ac:f5:2d:2f:ea:d4:31:d5:49:
                    1e:70:87:c9:d3:dc:0a:b1:13:2f:38:0d:07:ac:6f:
                    8c:62:d8:af:3c:21:80:37:50:a1:97:aa:16:fc:e6:
                    eb:36:58:ec:57:6e:b6:31:fd:7e:6e:ea:e9:5d:0c:
                    1f:3a:3f:af:d8:30:16:92:92:cd:d8:00:8f:af:60:
                    a4:7c:00:40:7d:44:b6:5b:b1:15:5f:00:9c:29:ad:
                    d1:ff:47:cc:bf:aa:ca:dd:18:6c:c5:c1:b4:44:81:
                    91:cb:6c:99:40:09:62:c3:18:83:aa:f7:10:66:0d:
                    9e:b0:37:2c:0d:71:b7:8d:17:fd:55:b3:91:ef:c8:
                    ca:0b:04:88:7b:fb:fc:df:7b:7c:8c:dc:59:a6:3e:
                    b1:cf:54:b9:1b:8a:cc:6f:92:85:d9:49:a4:ac:7d:
                    82:04:ac:35:f3:bf:34:cb:77:ca:38:72:a5:84:b0:
                    72:5b:22:22:19:5a:7a:98:59:8a:85:e6:92:1b:46:
                    29:a4:30:02:be:63:45:a0:fd:2c:98:40:4f:b9:d9:
                    3c:6f:48:5b:5f:d8:d7:44:a5:db:83:22:0e:46:7a:
                    f4:98:28:40:d8:6b:5c:e2:ee:8f:e0:e4:40:83:22:
                    91:6a:ad:e4:7f:1f:e2:ab:01:2b:da:04:b4:f9:13:
                    ec:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:45:21:43:1F:66:03:C0:FA:55:BE:13:5F:9E:A8:57:D4:8A:59:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/eb082195-7fc4-3717-9a4e-cf41f2a75416.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.crl

            X509v3 Authority Key Identifier:
                keyid:69:E3:30:C8:95:23:47:F8:5E:91:39:8A:77:5A:38:6D:1E:FA:B2:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ce1f0349-3090-47e8-8ea1-4edcc2e570d4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:31:f1:8b:75:30:96:86:0f:c1:76:ec:17:ef:b6:0f:45:23:
         12:a0:99:67:86:a4:64:48:95:a8:dd:e6:0d:8e:74:0f:69:fe:
         25:f3:40:ef:4c:0c:c7:f2:92:ce:36:79:26:3b:ed:7c:3d:77:
         ea:ac:4c:fb:07:c7:e4:e4:9f:78:00:da:eb:93:5f:32:48:1e:
         f7:99:66:be:bf:97:fe:c5:ea:a3:11:b1:9e:2f:f4:0e:9c:63:
         6e:64:b6:69:1e:0e:65:69:f3:23:48:82:93:e5:3b:2f:e8:e3:
         9c:8a:5e:29:79:b5:ac:02:f6:c1:e1:b7:90:91:36:9b:80:60:
         be:ce:fc:bf:22:0d:5b:90:22:82:6c:d0:36:a7:f0:28:c0:fc:
         51:e8:38:a3:ee:58:49:e6:40:e7:c4:8c:7e:29:be:e0:35:be:
         3c:b6:02:de:ea:a0:1b:fc:43:ea:ab:a1:1e:11:02:24:f7:77:
         85:0e:1a:e0:1f:f4:19:34:75:a0:20:d5:28:cb:7c:33:27:20:
         19:7c:92:18:26:2d:c3:4b:db:af:76:e4:34:22:26:e9:6e:f0:
         00:61:70:01:6e:2d:37:eb:04:7f:65:87:8f:f2:06:77:cc:e1:
         af:54:d5:f1:04:16:e7:6b:7a:1d:60:1d:b6:ff:9d:6b:50:35:
         23:01:0a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:22 2026 by rpki-client