Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/326f43f8-c776-3bac-9c88-f6d427ac34b4.roa
File:                     326f43f8-c776-3bac-9c88-f6d427ac34b4.roa (raw, json)
Hash identifier:          Vjx1iL4fmj/Tb3CWBTZ3TH9pVa6U0nVj53XJszHjAkM=
Subject key identifier:   D2:44:BA:3E:8E:FF:94:7E:FE:05:50:10:59:A9:BD:12:CA:00:E4:13
Certificate issuer:       /CN=ffb931d1-3206-47c9-b23b-ac8485700ccd
Certificate serial:       010D0C9F4328584E104ED1CC39D10808EF8FC480
Authority key identifier: BB:BA:C2:27:E7:63:0A:77:45:54:06:07:25:8D:46:FE:83:C2:4B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/326f43f8-c776-3bac-9c88-f6d427ac34b4.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     18781
IP address blocks:        23.133.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/ffb931d1-3206-47c9-b23b-ac8485700ccd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/ffb931d1-3206-47c9-b23b-ac8485700ccd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:d1:cc:39:d1:08:08:ef:8f:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffb931d1-3206-47c9-b23b-ac8485700ccd
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=1b4a096e-8d0a-4b03-b9c9-0407fdfb4f88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c2:a7:7e:0e:38:04:37:14:94:ee:0a:93:38:
                    e5:ae:09:b7:7f:7a:6f:cb:61:de:da:37:6b:8b:3d:
                    d7:19:f1:e3:59:f4:11:24:66:85:8a:0f:75:d9:99:
                    56:74:93:5f:3b:2b:af:a7:86:56:c9:93:e7:15:77:
                    9f:06:af:5a:76:f2:c8:eb:fc:04:fc:e3:cc:e0:98:
                    f1:4e:65:a4:a8:70:fa:b9:b4:b3:3e:22:33:e8:49:
                    81:73:5a:8f:f6:61:63:41:f1:10:0f:32:07:c7:e9:
                    e1:6c:bb:6d:bb:02:26:89:9b:86:20:3a:4d:04:23:
                    4e:57:c2:52:ae:b1:e8:7b:11:34:f5:51:1c:75:10:
                    e7:f6:31:8b:48:3c:bc:ba:b7:75:3c:4c:70:41:fc:
                    d7:54:9f:bf:ab:30:04:33:d3:05:6a:a7:d8:2d:b3:
                    f2:20:f3:6c:cc:ce:f9:42:26:0c:6f:ca:e6:0b:96:
                    0f:92:0e:c1:55:72:f8:3c:a1:36:32:53:32:c9:2e:
                    5b:57:c0:73:17:61:7a:a2:d5:ff:af:e2:50:a4:88:
                    fe:ba:cb:36:a4:88:bd:78:3b:c4:c2:a5:29:dc:91:
                    ac:0a:1d:77:a5:98:40:27:de:76:61:35:f8:21:ee:
                    9f:02:02:c3:7e:77:e3:be:09:c4:02:1d:a4:af:d4:
                    65:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:44:BA:3E:8E:FF:94:7E:FE:05:50:10:59:A9:BD:12:CA:00:E4:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/326f43f8-c776-3bac-9c88-f6d427ac34b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/ffb931d1-3206-47c9-b23b-ac8485700ccd.crl

            X509v3 Authority Key Identifier:
                keyid:BB:BA:C2:27:E7:63:0A:77:45:54:06:07:25:8D:46:FE:83:C2:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:72:30:98:be:9c:9d:5a:91:37:fc:6a:dc:7e:f1:a5:36:24:
         55:9b:31:19:10:e1:cc:9d:c8:91:b4:09:37:d7:7d:73:8a:a1:
         12:bb:6f:c2:d6:fb:1f:df:6a:76:a9:fd:00:d3:b7:57:ae:b8:
         c0:b0:59:e9:ab:47:a7:fa:ad:ac:ee:ac:dc:0c:a3:45:2e:35:
         8f:9d:8b:fe:3e:c4:0e:8f:4d:72:06:6a:4a:ac:c2:35:23:76:
         e5:0a:45:9a:fa:0b:18:b8:74:5a:58:f2:10:66:9b:78:7c:40:
         a2:c6:22:ba:73:76:3c:1f:95:d4:92:9c:ae:6e:cb:bc:31:76:
         95:cc:da:55:49:f0:2a:83:16:12:ef:4c:94:13:0a:50:3f:cf:
         a9:27:62:9d:bc:18:19:0e:8f:c4:b1:9d:02:fa:68:b4:26:44:
         dd:b3:e0:b3:e5:e8:f0:87:7f:e0:7c:63:76:b3:f0:9d:35:d7:
         46:d6:05:73:f7:ac:2e:d1:94:62:ae:3d:c5:65:83:ce:7d:88:
         ab:15:56:e4:ca:b1:28:ff:d1:b6:c1:b3:60:cc:fd:89:e0:76:
         cb:63:65:8a:07:06:92:f9:68:db:77:b7:02:f0:b4:04:ee:66:
         55:e8:5b:78:db:09:ec:90:d0:76:9a:49:32:6d:5c:a3:85:15:
         a7:6e:5e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:19:57 2026 by rpki-client