Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/721b03ba-33c5-3c7c-a1f2-b51479808611.roa
File:                     721b03ba-33c5-3c7c-a1f2-b51479808611.roa (raw, json)
Hash identifier:          6amN+ySL+TbWlf6G/WCTiWdoagDskPmvXWHZzm+OosA=
Subject key identifier:   F8:60:76:87:37:96:F0:8A:65:AB:ED:A4:FB:1D:65:BE:57:40:70:76
Certificate issuer:       /CN=3dce7e6f-4588-4d9b-bb90-80f074656851
Certificate serial:       010D0C9F4328584E09CB43D209A2A2A1CD9F5280
Authority key identifier: 25:30:E9:06:73:90:6B:71:57:31:7C:E3:F6:3E:89:EE:94:D0:7F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/721b03ba-33c5-3c7c-a1f2-b51479808611.roa
Signing time:             Tue 02 Jun 2026 13:00:10 +0000
ROA not before:           Tue 02 Jun 2026 13:00:10 +0000
ROA not after:            Mon 31 Aug 2026 13:00:10 +0000
asID:                     15012
IP address blocks:        23.133.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/3dce7e6f-4588-4d9b-bb90-80f074656851.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/3dce7e6f-4588-4d9b-bb90-80f074656851.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:09:cb:43:d2:09:a2:a2:a1:cd:9f:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dce7e6f-4588-4d9b-bb90-80f074656851
        Validity
            Not Before: Jun  2 13:00:10 2026 GMT
            Not After : Aug 31 13:00:10 2026 GMT
        Subject: CN=04b033fa-f6fc-4fe3-a572-4da3ff04957d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3b:11:a0:75:ef:d0:ce:a5:27:3e:48:1a:1d:
                    86:e2:66:ee:a2:e3:df:d9:cb:2d:53:13:8c:85:0b:
                    49:31:e0:7c:cc:67:59:cc:e3:12:7c:90:26:c6:a5:
                    50:23:5c:25:af:fa:40:16:52:b1:c2:46:f3:d1:5a:
                    c3:2e:36:15:c4:84:34:82:e2:a4:50:76:3c:76:3f:
                    7d:65:12:9e:ed:41:90:3b:52:42:82:c1:c7:08:07:
                    27:c8:1b:f8:b8:92:e0:51:a7:33:18:a1:f6:aa:a3:
                    b5:8a:8d:3b:ed:d0:0b:1c:b7:75:a6:f9:b8:56:00:
                    0c:ad:da:50:32:7a:22:63:0a:dd:c3:6d:2f:aa:7d:
                    5a:07:9e:a1:90:48:70:c4:68:f8:1e:65:62:17:75:
                    cd:5e:0e:6e:4d:26:c4:36:54:f0:b0:44:e3:e6:cd:
                    ec:36:33:92:19:3e:5f:3b:d3:70:54:68:56:39:d3:
                    5f:06:68:09:45:7b:88:17:be:00:03:79:bb:c9:22:
                    10:d2:f0:5b:2a:ac:e1:45:33:ba:b7:3d:72:5a:84:
                    4f:5b:10:e2:ce:ee:8d:68:c1:ab:ad:9c:65:25:eb:
                    32:51:5c:75:65:5c:e5:e4:dc:11:ec:2b:6b:ab:a1:
                    5c:16:0a:24:22:60:1d:30:6d:2d:c8:55:70:a1:b6:
                    29:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:60:76:87:37:96:F0:8A:65:AB:ED:A4:FB:1D:65:BE:57:40:70:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/721b03ba-33c5-3c7c-a1f2-b51479808611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/3dce7e6f-4588-4d9b-bb90-80f074656851.crl

            X509v3 Authority Key Identifier:
                keyid:25:30:E9:06:73:90:6B:71:57:31:7C:E3:F6:3E:89:EE:94:D0:7F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:4c:76:f7:53:65:da:5e:09:4a:63:9d:cc:e5:21:a0:81:85:
         a4:23:ba:02:4f:a0:79:9c:1e:df:12:3e:42:bb:c8:2b:37:22:
         d8:e2:6b:21:bc:41:30:e7:56:7d:03:50:2d:0d:f0:f4:72:35:
         60:26:d6:ad:57:68:12:bc:f6:72:0f:aa:da:5e:ad:89:4d:78:
         0d:e6:6a:3c:59:bd:14:a9:20:50:68:8e:18:d5:3e:51:ef:8d:
         c0:aa:19:b5:81:81:b1:db:d9:c4:c6:f9:5e:e0:c0:7e:ac:4a:
         e2:29:d7:ff:85:e6:05:ee:8b:05:5f:40:47:d8:48:df:c2:12:
         ae:e6:ca:99:72:f8:58:ff:c2:60:0a:1d:da:d6:37:e3:60:29:
         a0:42:01:5e:32:7a:66:5e:b3:5c:a7:20:3d:50:a9:26:2d:70:
         0d:3b:1a:26:ea:15:5a:5b:43:bb:0b:66:78:00:2e:00:46:12:
         50:0d:d5:66:b5:f1:e9:62:12:ef:a7:78:57:8b:a0:df:4c:26:
         27:83:38:35:d1:85:7e:af:04:99:e0:b5:70:20:0a:58:09:00:
         9b:ac:e7:42:eb:55:05:8e:3b:c5:a2:98:7a:a1:16:a8:22:f0:
         78:c8:9f:52:6f:1f:8e:c4:6f:1b:51:77:e8:ce:2c:10:a5:fa:
         5b:e6:c2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:57:47 2026 by rpki-client