Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51/93bbdc14-43be-3154-9a4c-b04b9d682905.roa
File:                     93bbdc14-43be-3154-9a4c-b04b9d682905.roa (raw, json)
Hash identifier:          SMK1YXa6XyKfUeiasM0fj86DfKK/iW0jHxhi32V28OM=
Subject key identifier:   60:2B:1B:82:85:FD:26:E0:41:49:46:6A:A9:02:A6:85:5C:CB:20:36
Certificate issuer:       /CN=6e3cf28f-de99-4855-96c7-0a24bba23b51
Certificate serial:       010D0C9F4328584D67DFC95F808A4B5FA0A33C40
Authority key identifier: D3:4A:0E:85:6F:5E:56:00:DF:F6:2F:E8:8B:D5:84:44:14:4A:0B:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51/93bbdc14-43be-3154-9a4c-b04b9d682905.roa
Signing time:             Sun 05 Apr 2026 13:00:31 +0000
ROA not before:           Sun 05 Apr 2026 13:00:31 +0000
ROA not after:            Sat 04 Jul 2026 13:00:31 +0000
asID:                     401404
IP address blocks:        23.191.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51/6e3cf28f-de99-4855-96c7-0a24bba23b51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51/6e3cf28f-de99-4855-96c7-0a24bba23b51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:67:df:c9:5f:80:8a:4b:5f:a0:a3:3c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e3cf28f-de99-4855-96c7-0a24bba23b51
        Validity
            Not Before: Apr  5 13:00:31 2026 GMT
            Not After : Jul  4 13:00:31 2026 GMT
        Subject: CN=3a148da1-ee16-4856-be47-eb63fde3d4b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:04:c7:81:8c:74:5e:2b:5a:8c:2e:b3:ef:54:
                    2e:a1:00:ca:53:95:00:97:3e:a0:6f:d2:59:28:fa:
                    89:f8:65:28:7a:b6:90:19:10:0b:f6:05:1b:00:fc:
                    56:df:0b:af:7c:68:39:1f:4a:20:dd:d0:1b:15:46:
                    e6:6f:0e:95:2e:67:84:3c:31:b7:56:7d:55:4a:37:
                    29:af:bb:32:03:5b:32:6b:5a:22:30:90:8d:de:98:
                    e5:e9:18:74:d0:51:78:2a:a5:4b:b9:55:6a:23:97:
                    f4:7d:30:e2:91:84:f6:15:54:d4:32:80:3c:fb:7c:
                    77:87:85:53:70:4b:47:8d:45:83:44:a7:af:38:a4:
                    42:23:08:d2:37:e9:59:46:59:8f:c3:be:1f:8c:ea:
                    c4:a6:d6:d6:29:e9:bd:2f:cc:25:9e:1c:40:00:74:
                    32:d9:c4:bf:0c:66:9f:d0:d0:ca:66:70:3a:32:d0:
                    33:e9:8e:33:5c:09:48:ad:49:47:f0:e0:71:b9:ac:
                    27:33:56:b8:d3:54:9e:6b:84:e3:c6:3e:06:d7:b9:
                    7f:11:5d:2b:b7:4d:43:60:ca:7a:54:cb:e3:40:92:
                    43:8d:18:7f:cb:4d:3d:59:30:26:9d:3d:d9:d0:75:
                    72:0d:f3:7f:d4:18:ac:6f:95:31:a2:9c:a8:22:76:
                    97:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:2B:1B:82:85:FD:26:E0:41:49:46:6A:A9:02:A6:85:5C:CB:20:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51/93bbdc14-43be-3154-9a4c-b04b9d682905.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51/6e3cf28f-de99-4855-96c7-0a24bba23b51.crl

            X509v3 Authority Key Identifier:
                keyid:D3:4A:0E:85:6F:5E:56:00:DF:F6:2F:E8:8B:D5:84:44:14:4A:0B:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/6e3cf28f-de99-4855-96c7-0a24bba23b51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.191.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:dd:a4:b8:b5:94:ee:fd:44:a3:cb:a1:1d:c8:89:54:35:0e:
         7f:a7:c6:9d:75:48:ac:3b:28:8b:70:e2:5b:30:35:21:9e:21:
         51:24:4c:ca:e5:cf:e1:e9:f9:8a:a7:6e:19:0e:cc:2b:a7:d4:
         d0:c8:5d:d2:7e:60:d4:df:44:09:e6:53:26:fb:92:64:a8:d3:
         3e:c2:73:ef:25:3e:ff:1d:b9:de:57:89:57:d6:76:7e:cb:1d:
         28:85:42:c6:30:e0:a2:ec:f9:8e:61:54:d4:3b:8d:be:25:0f:
         16:f1:6b:9d:66:35:38:31:b4:03:8f:64:47:77:75:6c:6b:d6:
         9b:2a:34:04:ef:e1:6e:15:e5:56:cd:cd:72:aa:36:9e:49:d7:
         66:91:2a:54:a3:3b:e1:77:b4:e5:07:35:86:06:fc:a6:ad:3f:
         92:e3:18:52:51:bf:c2:52:f2:59:10:b9:f3:41:72:a8:a2:88:
         bf:8e:89:c7:db:20:85:fe:44:01:8f:a0:c7:71:bd:6e:26:24:
         a6:9c:ec:ba:09:b4:af:31:6a:b5:b3:05:62:df:67:7e:4a:68:
         c8:09:4e:c4:5b:c2:14:cf:6b:ae:e0:f4:d6:e2:32:6a:39:aa:
         81:06:f0:93:e4:36:cc:03:ea:b6:7b:4e:6c:8a:dc:bb:e8:00:
         ef:12:a3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:48:31 2026 by rpki-client