Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa
File:                     23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa (raw, json)
Hash identifier:          qNb5fu6xIQq7HWiFscONWSD3Hm19GfxpI5l0zxuJSMc=
Subject key identifier:   0C:20:91:EA:E3:2D:C8:98:34:47:B5:22:BD:30:7B:9D:4F:FA:C8:48
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584EA7A0774D821AB22B28A55100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     15169
IP address blocks:        173.194.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:a0:77:4d:82:1a:b2:2b:28:a5:51:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ff6b592d-b041-4180-bd24-2197627201bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3a:f8:85:82:ef:57:98:bd:eb:57:d6:22:09:
                    bd:34:25:a8:0d:f5:2a:f3:c4:3d:d3:ce:4f:4c:69:
                    46:15:7e:ad:7e:7b:02:78:c1:22:15:ac:97:f2:03:
                    1d:25:bd:8b:83:dc:f1:19:db:4e:e9:46:c0:3f:dd:
                    d9:96:fe:f2:0a:30:45:97:c6:c3:e7:ab:12:ac:09:
                    a0:32:ff:6d:df:2e:79:e0:0e:41:f3:6c:12:7a:50:
                    af:39:b7:28:51:1b:27:61:c0:0a:80:93:ba:b4:3b:
                    09:52:30:d7:37:65:c9:57:3d:e2:33:73:b7:bf:80:
                    2b:28:d4:c3:f3:e4:c2:36:b3:08:1c:d7:90:5b:7d:
                    72:02:cd:f6:ae:e7:6e:40:78:70:67:29:e1:5f:de:
                    e8:a8:43:ec:1a:67:0d:52:9f:63:60:b8:ec:81:11:
                    a3:8a:8b:ea:85:b7:0f:ad:73:63:cf:27:46:e2:ef:
                    27:74:f3:d9:d8:68:5a:3d:6d:1a:1e:b4:a6:de:68:
                    80:a8:27:10:dc:6a:68:76:6e:b0:d6:b2:db:7e:27:
                    1f:2c:97:2f:a1:94:05:63:09:d7:b9:5d:1f:6c:0c:
                    cd:d1:c2:3c:e4:10:27:c9:67:b1:82:2b:d0:2b:ef:
                    38:43:53:98:d5:f2:35:fb:0a:58:d2:a1:03:3e:a2:
                    6b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:20:91:EA:E3:2D:C8:98:34:47:B5:22:BD:30:7B:9D:4F:FA:C8:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23d5fa6a-05b2-3e7e-8e13-a66d35046f59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:fd:da:87:5a:ff:59:ff:f6:4c:b4:39:0d:33:65:da:f0:c2:
         d4:c7:d9:cb:42:7d:fa:13:3a:41:6b:e7:83:85:15:19:9e:cc:
         6b:cf:2f:5c:b4:c4:5a:17:c9:a3:07:80:5f:79:ec:ed:33:50:
         fc:a5:17:af:8d:59:b3:a3:78:61:68:c1:05:97:b3:eb:8f:b8:
         6e:18:cc:fe:81:59:e1:2a:34:20:46:9a:85:a4:66:b7:a4:b5:
         41:87:3c:11:cf:c1:44:47:64:48:ac:70:f1:d9:0f:60:21:fd:
         ad:c3:61:3b:04:98:c1:6d:7b:bb:e9:d1:8b:0a:cf:76:0f:0b:
         fa:44:63:e6:63:ee:ce:6c:0b:21:56:71:4e:d2:69:bd:f7:3b:
         0a:bc:cd:d2:62:04:a2:0d:ac:d9:61:86:1d:4d:ac:c2:16:22:
         6f:55:92:f3:9c:40:d9:f3:ff:53:c1:7e:71:82:c7:58:2a:34:
         65:9e:a5:25:35:38:47:8e:52:01:0d:92:f8:96:51:ec:47:bb:
         5e:83:6b:ff:71:14:6c:c1:41:23:84:55:5b:5a:20:1d:30:23:
         3f:73:ba:83:c7:97:aa:a7:e0:f0:85:1b:85:b6:ce:b9:19:e0:
         dd:f8:12:07:e4:d0:28:8b:61:30:5d:60:31:c9:20:a1:56:9b:
         74:94:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:05:24 2026 by rpki-client