Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/03ba8790-6437-3edb-9920-2755aa532085.roa
File:                     03ba8790-6437-3edb-9920-2755aa532085.roa (raw, json)
Hash identifier:          Xq7tZYppWAoBARpPQalCHW2fhug0JIh5NeWQ2QQp3o4=
Subject key identifier:   49:EA:F6:3F:CC:42:5E:02:48:98:87:19:5A:B7:48:11:1A:91:65:FA
Certificate issuer:       /CN=6cfa06d7-0867-402b-ab91-a8affe4fb964
Certificate serial:       010D0C9F4328584EA2DFB669E224557F1148F700
Authority key identifier: DD:20:70:BB:F2:5F:0C:43:B6:EA:69:47:C2:C6:8B:46:BA:56:17:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/03ba8790-6437-3edb-9920-2755aa532085.roa
Signing time:             Mon 27 Jul 2026 09:00:12 +0000
ROA not before:           Mon 27 Jul 2026 09:00:12 +0000
ROA not after:            Sun 25 Oct 2026 09:00:12 +0000
asID:                     63023
IP address blocks:        23.158.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/6cfa06d7-0867-402b-ab91-a8affe4fb964.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/6cfa06d7-0867-402b-ab91-a8affe4fb964.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a2:df:b6:69:e2:24:55:7f:11:48:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cfa06d7-0867-402b-ab91-a8affe4fb964
        Validity
            Not Before: Jul 27 09:00:12 2026 GMT
            Not After : Oct 25 09:00:12 2026 GMT
        Subject: CN=504563d5-99e6-4143-8ebc-2663f798afbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a6:10:1b:c5:b0:85:2d:41:a1:26:e8:c2:81:
                    93:4e:e3:86:1b:08:ca:5b:e4:9c:d5:64:96:a5:74:
                    6c:ab:e0:cc:9a:d7:96:58:c0:f4:e2:e7:f9:27:24:
                    a7:0c:d1:39:02:23:f1:73:5e:ad:f1:6d:1f:03:7f:
                    d5:84:5c:e6:61:58:3c:3f:89:48:5f:97:10:51:b3:
                    ca:b5:52:17:4e:df:f0:cd:cf:9b:99:91:d9:92:24:
                    09:f0:b6:23:90:00:41:55:8f:f3:db:01:6e:0c:fc:
                    95:05:5f:aa:be:70:d1:6b:96:b1:dd:dd:1c:39:b1:
                    c3:a8:60:d5:95:88:d8:ea:fe:ce:c1:91:58:25:1c:
                    e2:78:cb:75:36:f1:f4:86:d9:ad:95:cc:20:ad:0d:
                    ca:78:e8:f8:0b:1d:37:a6:6b:22:3b:4e:cd:e6:87:
                    d9:7d:04:95:f7:7b:d7:d8:d8:12:39:0c:22:74:14:
                    16:26:a3:5b:3c:7d:3b:bd:ec:09:94:76:04:16:b9:
                    8f:c2:e6:e5:27:9e:9b:bd:ca:40:8a:9f:96:6b:91:
                    a4:77:a1:6f:dc:ce:2c:ce:b5:4f:92:dc:82:40:37:
                    8b:c3:e7:fe:4a:56:7e:42:03:9f:23:27:d0:6c:fa:
                    da:e2:e2:27:bd:c5:0b:43:c5:2e:63:ba:36:4d:52:
                    15:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EA:F6:3F:CC:42:5E:02:48:98:87:19:5A:B7:48:11:1A:91:65:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/03ba8790-6437-3edb-9920-2755aa532085.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964/6cfa06d7-0867-402b-ab91-a8affe4fb964.crl

            X509v3 Authority Key Identifier:
                keyid:DD:20:70:BB:F2:5F:0C:43:B6:EA:69:47:C2:C6:8B:46:BA:56:17:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6cfa06d7-0867-402b-ab91-a8affe4fb964.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:65:0e:90:9d:e3:bf:79:b4:82:e5:4e:a1:b8:85:65:37:ba:
         30:2c:af:49:da:9d:b4:6d:b6:ee:25:08:4b:c3:d7:10:c9:1f:
         ba:5a:bf:50:4f:3e:3c:13:ef:f8:a8:ed:8e:9c:56:a0:b6:3c:
         5e:39:35:fc:7a:04:35:3a:cb:dc:19:df:24:b7:ff:73:35:59:
         f9:53:fc:55:82:89:7d:3d:df:a2:40:2c:f8:8c:e4:fb:12:ba:
         91:24:3c:9f:c7:c1:a5:17:b6:f8:e9:e4:0a:09:78:ba:1a:cc:
         a3:be:13:cd:7a:c8:bc:ba:78:3b:f9:ec:d1:f8:08:b4:10:4e:
         26:da:31:d5:55:23:f1:4b:8f:40:c3:30:23:de:84:6e:f9:d7:
         a5:89:d3:38:aa:06:a1:2e:15:39:7e:bc:00:b8:75:1c:72:d3:
         d0:88:65:71:56:0e:3d:5d:ab:f3:7c:04:33:54:a5:fe:3a:15:
         1b:06:17:05:d2:03:1f:12:db:fe:23:52:d9:6f:87:e8:b8:35:
         26:c3:44:c4:ad:13:00:d6:07:50:08:1c:c6:48:ee:b1:11:88:
         07:7a:d7:7a:be:ee:b2:23:48:e2:08:0d:c7:f8:bc:da:04:51:
         cf:a7:41:f8:85:78:91:d3:e5:8b:e5:7c:51:42:e5:fe:21:5d:
         50:64:cc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:39:46 2026 by rpki-client