Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34/4aee1210-b151-378c-ae0c-1307a8461813.roa
File:                     4aee1210-b151-378c-ae0c-1307a8461813.roa (raw, json)
Hash identifier:          2e/iQgu54GATtDzlylrlrABUtYJ0+yUMJgqkOfCeFbU=
Subject key identifier:   D3:87:0E:96:C2:A7:6D:93:87:15:F2:EC:25:6D:FB:DA:FA:AD:36:C1
Certificate issuer:       /CN=a81b6111-6888-4c67-a629-e33c0db56e34
Certificate serial:       010D0C9F4328584E1E44430482A279E5EC52C580
Authority key identifier: A5:CA:AE:8D:5B:6B:21:66:52:B0:09:10:B3:04:98:BD:4B:65:11:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34/4aee1210-b151-378c-ae0c-1307a8461813.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     26922
IP address blocks:        23.134.84.0/24 maxlen: 24
                          2602:f6f1::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34/a81b6111-6888-4c67-a629-e33c0db56e34.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34/a81b6111-6888-4c67-a629-e33c0db56e34.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:43:04:82:a2:79:e5:ec:52:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81b6111-6888-4c67-a629-e33c0db56e34
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=19f3f145-66a3-4e5e-a68c-b00c90cf5ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:cd:0a:81:da:6c:bf:f7:69:4f:c7:33:5f:
                    76:c9:8d:7e:c8:da:1e:6f:8d:eb:90:2d:33:78:57:
                    f4:5a:53:e8:85:a7:40:46:d2:c8:e4:ab:f6:23:75:
                    8a:c3:d4:be:05:ac:3c:23:73:1a:0b:2f:02:e3:13:
                    c8:09:b5:5c:f3:42:62:89:d7:7f:f5:97:8d:cb:c2:
                    6e:26:bd:09:c4:5a:6f:13:b9:bb:42:42:34:54:d9:
                    e3:25:b4:0f:aa:43:74:99:03:eb:88:bc:bd:99:68:
                    e0:34:c2:54:67:a6:93:f6:46:e4:72:ff:76:45:82:
                    d8:d9:a8:22:61:25:ca:b5:43:24:ba:a7:51:20:6e:
                    af:1b:25:a1:c7:95:f2:42:40:64:0a:0c:04:85:54:
                    82:1c:9b:76:4b:da:12:89:e8:d4:9f:f0:78:11:3e:
                    d3:a4:67:7c:2e:8f:5a:a4:eb:ac:a4:9e:a3:80:b4:
                    ee:9b:6d:1d:1d:f2:5c:37:51:81:79:6e:19:e8:8c:
                    48:f0:c8:d2:8b:bb:84:da:da:e2:5b:53:b4:0a:f7:
                    2c:f8:cb:69:25:e2:b8:4b:9a:c9:46:74:be:eb:7b:
                    c3:c7:93:0f:b1:cb:e7:db:49:3f:44:22:30:6e:bd:
                    0e:27:1e:18:b7:91:24:da:49:79:ec:ac:0c:ca:0b:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:87:0E:96:C2:A7:6D:93:87:15:F2:EC:25:6D:FB:DA:FA:AD:36:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34/4aee1210-b151-378c-ae0c-1307a8461813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34/a81b6111-6888-4c67-a629-e33c0db56e34.crl

            X509v3 Authority Key Identifier:
                keyid:A5:CA:AE:8D:5B:6B:21:66:52:B0:09:10:B3:04:98:BD:4B:65:11:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.84.0/24
                IPv6:
                  2602:f6f1::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:91:03:ff:b7:99:99:e8:42:f4:92:15:fb:3c:1f:5d:3a:d7:
         71:e3:91:19:1d:f6:29:8b:5f:0d:83:3e:ba:0d:48:47:2c:40:
         48:df:0f:21:82:15:09:e1:88:b3:dc:4c:d0:d0:83:7f:a7:ed:
         a5:e6:f7:86:03:e2:41:52:01:c9:ce:60:0b:a4:a3:09:2b:9a:
         17:c9:f6:3d:8b:70:cf:f6:99:24:ff:a0:0c:6a:36:ec:5b:53:
         4c:13:35:33:35:0c:78:44:f8:01:ab:d1:7f:3d:89:82:da:89:
         cd:a8:95:0a:45:b3:35:23:30:a6:2b:0a:80:62:15:4f:34:93:
         dc:86:97:67:54:ba:6e:af:f8:80:aa:5a:93:d3:ef:38:1d:7b:
         19:5c:a9:6e:1b:e1:ee:50:8a:47:92:a5:22:2f:c1:cc:58:8f:
         f4:1a:a8:4a:8f:39:c5:f1:07:ee:01:97:69:81:96:97:f8:2f:
         56:d8:b3:5e:90:9a:41:67:1a:bf:4c:12:d6:b6:9d:61:79:98:
         a0:5b:90:2b:26:f4:06:12:63:cd:42:47:af:c3:8c:24:d3:60:
         f3:02:5b:a1:65:68:95:60:93:18:6b:2b:d9:78:76:d9:78:2b:
         6e:d9:f6:c1:ca:b4:58:33:a9:34:e7:02:9d:c1:cf:09:cd:14:
         42:f0:a2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:38:56 2026 by rpki-client