Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/1c1f05e7-5441-371b-94af-1c37f52a9bbd.roa
File:                     1c1f05e7-5441-371b-94af-1c37f52a9bbd.roa (raw, json)
Hash identifier:          dKFqCxxPZJyD1zeQNNJVFV/k9mdcIB3QkYlzweEYt0c=
Subject key identifier:   B7:A8:75:75:C0:3D:FB:22:EF:94:FB:72:91:4F:FF:D1:4B:11:BA:D7
Certificate issuer:       /CN=e95630a3-5da1-408c-891c-268d2b4791c7
Certificate serial:       010D0C9F4328584E296F1CBD11808E804CA08280
Authority key identifier: 16:CF:DA:C7:A2:73:33:B8:CD:21:DD:63:1D:95:5D:22:74:49:73:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/1c1f05e7-5441-371b-94af-1c37f52a9bbd.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     401380
IP address blocks:        23.191.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:1c:bd:11:80:8e:80:4c:a0:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e95630a3-5da1-408c-891c-268d2b4791c7
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=67bda3bc-cb2f-47e5-a125-909c0b4ef0e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:ca:d7:97:e6:66:56:9d:f1:8f:c1:15:b0:
                    20:fe:91:f4:9a:ab:28:e1:3e:3e:c7:f0:89:81:2e:
                    2e:5c:71:81:2d:b3:86:7f:7c:58:0a:32:7f:de:7b:
                    c3:07:a2:fc:0b:fa:9f:76:8e:d3:e6:bc:8f:65:87:
                    31:26:8a:09:64:7d:b7:ad:6e:dd:1b:30:4f:77:08:
                    0d:cd:8a:3e:10:6b:36:a5:0c:f2:ea:44:7a:a6:34:
                    ac:ca:ce:27:32:01:1a:0a:7c:0b:0b:e5:14:bf:63:
                    e2:45:21:d5:ba:80:de:6b:9f:46:91:32:15:4d:42:
                    a1:7d:fc:b1:18:2f:9f:b8:c2:2a:9a:30:f3:04:de:
                    81:3c:35:ef:18:d5:a0:a7:93:e1:2d:4a:1a:8e:9e:
                    e0:69:f3:18:79:96:8e:30:d7:23:40:5a:5f:7b:25:
                    3b:93:ee:79:33:81:37:61:79:35:0d:ff:bf:3a:28:
                    04:4f:54:30:10:c2:df:ee:d6:87:fb:09:36:9d:ac:
                    b4:28:fa:16:1b:a1:ce:7d:e6:dc:6f:bf:e2:12:7e:
                    24:aa:e4:cd:d6:cd:df:27:eb:50:61:fd:07:ce:7d:
                    6d:f5:92:0b:a1:b6:d7:d5:1b:12:0a:c2:a8:82:4f:
                    f4:2f:43:43:e5:d8:18:70:a2:6d:eb:26:4c:d2:6c:
                    37:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A8:75:75:C0:3D:FB:22:EF:94:FB:72:91:4F:FF:D1:4B:11:BA:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/1c1f05e7-5441-371b-94af-1c37f52a9bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7/e95630a3-5da1-408c-891c-268d2b4791c7.crl

            X509v3 Authority Key Identifier:
                keyid:16:CF:DA:C7:A2:73:33:B8:CD:21:DD:63:1D:95:5D:22:74:49:73:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e95630a3-5da1-408c-891c-268d2b4791c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:5e:4b:57:50:db:00:1e:29:34:5e:85:85:a6:9a:dc:cd:fa:
         b0:3c:85:7f:70:d5:ef:a1:b0:63:92:06:34:df:e2:ef:c3:b0:
         0c:84:79:83:df:bd:9c:3c:35:ef:97:1c:d7:fb:22:6a:8a:8a:
         ed:94:78:68:0d:c2:be:19:da:8a:98:5a:19:71:bf:20:21:44:
         8f:a8:a8:d0:f6:84:b6:87:ef:79:ad:69:3e:b8:3f:0f:54:a7:
         2e:3f:c1:12:0f:6d:df:c7:4f:7e:6f:d3:5c:48:d6:d0:2b:a4:
         0c:27:f6:05:e1:62:c1:20:9c:2d:c2:96:aa:cb:58:58:d3:45:
         4b:8e:a0:fe:4a:8e:69:99:06:f5:b1:61:10:72:bb:bd:40:b5:
         4b:d7:57:58:c6:40:47:e0:a8:f8:c0:3d:53:7e:12:d6:5c:52:
         5a:ef:c9:28:6f:ff:92:01:f8:30:36:14:1c:b2:f3:ff:1b:a3:
         7d:b8:16:ef:48:a8:5c:ca:2b:f9:7d:e9:8e:c9:9e:2d:e5:8e:
         a6:69:de:a5:b0:06:c0:5e:06:ec:ab:ba:d9:4a:58:92:e1:9f:
         2a:13:40:f8:19:51:ec:23:17:90:b7:d5:be:4a:a6:5a:00:6e:
         c4:18:e6:6e:d5:f1:2f:2a:1f:f1:84:d5:4d:f2:3a:f0:f8:d0:
         91:d2:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:26:14 2026 by rpki-client