Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7c982feb-fcc6-4109-b85a-1b8c23ebe526/13dbd7ad-6870-3cdd-a937-319dc74889ac.roa
File:                     13dbd7ad-6870-3cdd-a937-319dc74889ac.roa (raw, json)
Hash identifier:          9VlK0NRva3tJkIQVZVyVc+14gbdyQiuUHMWsV9qbPLw=
Subject key identifier:   A7:15:A4:EB:6F:CA:8A:49:7D:15:CB:E4:80:62:E6:8B:5D:F5:23:D2
Certificate issuer:       /CN=7c982feb-fcc6-4109-b85a-1b8c23ebe526
Certificate serial:       010D0C9F4328584E18AED96BECA560A6134A4600
Authority key identifier: 36:20:97:B9:47:8D:37:FA:DF:55:4C:9F:11:10:40:17:F5:25:F1:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7c982feb-fcc6-4109-b85a-1b8c23ebe526.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7c982feb-fcc6-4109-b85a-1b8c23ebe526/13dbd7ad-6870-3cdd-a937-319dc74889ac.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     197539
IP address blocks:        23.159.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7c982feb-fcc6-4109-b85a-1b8c23ebe526/7c982feb-fcc6-4109-b85a-1b8c23ebe526.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7c982feb-fcc6-4109-b85a-1b8c23ebe526/7c982feb-fcc6-4109-b85a-1b8c23ebe526.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7c982feb-fcc6-4109-b85a-1b8c23ebe526.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:d9:6b:ec:a5:60:a6:13:4a:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c982feb-fcc6-4109-b85a-1b8c23ebe526
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=58c5ee81-ab63-490d-846f-ca9481cd156a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:94:ec:21:3e:4b:40:74:80:48:e8:23:b2:53:
                    e4:d6:9b:51:1c:85:9b:63:b0:9a:00:ac:fe:a1:9e:
                    f3:a0:77:20:eb:ac:a3:e8:90:62:7c:c9:73:0f:f9:
                    2b:39:9c:a1:be:ae:eb:31:9d:78:e9:77:1b:c3:8d:
                    56:5a:ff:f9:8d:f5:de:e0:28:7c:a6:ee:52:be:8f:
                    a1:ec:5d:c8:b5:a5:5a:b3:0b:13:33:65:18:d2:40:
                    1f:4e:f9:e1:74:a7:bf:f5:b6:ed:8a:31:1e:f8:59:
                    82:2b:0e:c1:55:1a:0b:1b:07:73:29:5b:41:0a:45:
                    fa:95:d5:97:eb:35:c0:df:f6:3d:67:5d:66:d3:df:
                    0a:b4:8f:33:4d:16:5a:ee:92:12:b1:5a:e8:51:9b:
                    ac:39:c1:6e:3e:07:82:19:0a:65:1c:90:f2:ae:d2:
                    63:60:08:ea:c8:22:7b:41:aa:21:0e:15:ba:7f:1f:
                    e3:ad:07:31:22:2b:9e:39:c2:3b:04:85:7d:92:68:
                    c5:14:bd:9b:a6:a9:db:6b:4a:4f:23:b4:20:2e:bf:
                    a7:26:5d:46:b4:85:76:56:ac:fc:b5:6b:b7:29:5c:
                    a4:85:ab:4c:a0:01:9a:54:bb:5c:07:37:a2:b3:0a:
                    36:c0:12:f8:fa:2d:38:3d:7d:39:d4:2a:d8:57:4a:
                    98:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:15:A4:EB:6F:CA:8A:49:7D:15:CB:E4:80:62:E6:8B:5D:F5:23:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7c982feb-fcc6-4109-b85a-1b8c23ebe526/13dbd7ad-6870-3cdd-a937-319dc74889ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7c982feb-fcc6-4109-b85a-1b8c23ebe526/7c982feb-fcc6-4109-b85a-1b8c23ebe526.crl

            X509v3 Authority Key Identifier:
                keyid:36:20:97:B9:47:8D:37:FA:DF:55:4C:9F:11:10:40:17:F5:25:F1:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/7c982feb-fcc6-4109-b85a-1b8c23ebe526.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:07:5e:00:80:af:69:72:9c:14:1d:0c:0a:63:b7:ea:06:51:
         ed:6c:67:33:75:81:33:17:44:61:17:74:db:c6:00:79:35:11:
         76:51:ec:42:02:36:da:e5:44:db:ba:98:a2:5d:5e:1f:38:28:
         9d:be:86:de:c4:21:29:f9:2b:63:cf:5c:23:32:33:9f:16:57:
         fa:10:22:ef:b3:1a:ef:26:0b:e9:ed:8c:28:00:fe:79:23:c7:
         39:29:95:01:aa:43:0e:26:e3:60:fb:24:c0:ec:9d:0f:53:d6:
         fb:6a:5a:71:75:d5:1d:c1:38:17:72:5f:e6:5c:12:a1:5a:3f:
         31:41:bc:b9:55:0b:56:72:6c:de:58:46:b4:bb:42:e2:1d:28:
         22:34:22:21:11:9c:f4:ea:33:0d:c7:b9:06:80:10:b9:67:16:
         af:c9:e7:be:4a:51:4b:03:ce:83:9e:37:5e:d3:8f:63:fd:d2:
         3b:64:45:04:32:46:53:b3:fa:97:12:3f:48:e5:ef:7b:55:d7:
         da:e3:1e:fe:45:ae:55:22:6d:74:1b:2b:9d:37:95:65:df:d4:
         37:16:a8:a7:62:50:5b:00:01:9b:d2:85:39:04:e0:31:88:1b:
         d5:b4:a5:a4:43:e4:a1:81:ce:20:e8:1c:14:85:cd:36:08:d5:
         c6:93:57:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:53:40 2026 by rpki-client