Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/6561a1e9-7d89-3514-bdf6-0778be01fe71.roa
File:                     6561a1e9-7d89-3514-bdf6-0778be01fe71.roa (raw, json)
Hash identifier:          dIcjpP7xhL8cEN1eNeFbmvu/Z/inmiteO9ghTXQFUno=
Subject key identifier:   CC:5D:7A:39:A8:96:D3:17:9C:C4:05:5B:40:A9:90:7A:7D:B8:F4:61
Certificate issuer:       /CN=d9c16922-7f72-4551-905c-fa3b40d9efd0
Certificate serial:       010D0C9F4328584D65151839C6DC2C581D5E0680
Authority key identifier: 96:BB:FD:D5:17:36:B1:D5:15:C2:5C:F3:43:C7:F2:3B:F0:94:A8:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/6561a1e9-7d89-3514-bdf6-0778be01fe71.roa
Signing time:             Sat 04 Apr 2026 13:00:29 +0000
ROA not before:           Sat 04 Apr 2026 13:00:29 +0000
ROA not after:            Fri 03 Jul 2026 13:00:29 +0000
asID:                     394887
IP address blocks:        23.182.192.0/24 maxlen: 24
                          172.110.172.0/22 maxlen: 24
                          2620:134:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/d9c16922-7f72-4551-905c-fa3b40d9efd0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/d9c16922-7f72-4551-905c-fa3b40d9efd0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:65:15:18:39:c6:dc:2c:58:1d:5e:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9c16922-7f72-4551-905c-fa3b40d9efd0
        Validity
            Not Before: Apr  4 13:00:29 2026 GMT
            Not After : Jul  3 13:00:29 2026 GMT
        Subject: CN=2501b6fd-c9b7-48b0-9a41-4ac73dffefdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:77:74:6a:32:39:8a:a7:1c:59:89:7c:4b:84:
                    68:36:9f:a9:3c:37:d4:1a:fc:a9:96:e7:3f:8a:ed:
                    a8:50:bd:9c:52:53:4b:c0:a9:37:ec:e2:33:1c:a4:
                    62:de:f9:e4:6d:93:70:b2:c5:c9:a2:1b:f8:a9:3c:
                    22:82:4a:7c:4a:ea:26:af:c3:e3:cb:af:e5:d0:26:
                    57:2e:ad:a5:b8:46:b7:c9:a1:7a:07:db:30:a0:be:
                    4d:d4:bb:84:d1:3e:01:ba:f0:1c:aa:2f:a3:26:62:
                    b8:f4:64:51:cc:fa:79:16:3c:6f:48:ac:ba:79:13:
                    3f:65:21:7e:f4:36:ce:dd:a5:e5:e0:bf:01:0c:ef:
                    01:48:2f:7a:9e:44:d4:ad:39:df:40:2a:c7:75:64:
                    4a:b2:cd:87:e2:66:31:52:e7:94:83:dc:9f:23:97:
                    69:38:9c:32:89:f8:75:51:6b:7b:74:bb:4e:07:a4:
                    b4:01:0b:93:3e:ce:e8:ef:8b:60:91:30:42:33:6e:
                    03:9d:55:29:2b:e9:07:d2:6f:82:68:ed:d6:7c:4c:
                    13:b8:15:9f:b3:fb:fa:47:9f:92:ff:05:2e:5c:58:
                    c1:69:fd:8f:6e:01:b6:07:86:83:b3:b9:52:02:64:
                    cf:aa:06:9e:b5:76:70:02:fa:80:08:6d:ee:de:1e:
                    7d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:5D:7A:39:A8:96:D3:17:9C:C4:05:5B:40:A9:90:7A:7D:B8:F4:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/6561a1e9-7d89-3514-bdf6-0778be01fe71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0/d9c16922-7f72-4551-905c-fa3b40d9efd0.crl

            X509v3 Authority Key Identifier:
                keyid:96:BB:FD:D5:17:36:B1:D5:15:C2:5C:F3:43:C7:F2:3B:F0:94:A8:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d9c16922-7f72-4551-905c-fa3b40d9efd0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.182.192.0/24
                  172.110.172.0/22
                IPv6:
                  2620:134:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:1d:9d:d0:dd:58:0d:4b:03:d5:23:03:fb:41:f5:97:0d:c3:
         e7:d5:fc:a2:c4:a4:2e:f8:8c:6d:66:6d:c6:57:f8:fa:c3:18:
         0d:98:0a:a0:01:c6:9e:b3:e6:0f:f8:b3:ea:95:a0:03:74:2e:
         44:78:76:91:de:52:83:f6:f5:88:78:38:02:8b:bd:be:6f:f7:
         5d:d8:f9:05:29:80:31:9b:41:88:2a:a3:56:f7:58:6b:7e:e8:
         da:1c:3b:79:7b:e3:c7:a8:e0:22:b9:b7:d1:10:1c:27:09:de:
         4e:e6:c0:7b:77:b9:8e:6b:34:c3:07:41:46:65:e5:85:7c:04:
         94:0b:ab:8f:76:d5:d6:18:ea:61:c9:8b:f4:e1:01:dd:27:5e:
         e0:ea:f7:a5:ac:a2:28:83:f8:86:27:c2:61:39:e8:93:eb:09:
         9f:fd:09:1d:23:fa:73:e6:b8:6a:d0:9a:b4:bd:49:6f:66:8f:
         62:48:ff:27:7a:3a:8e:a2:e0:58:2d:42:e2:8c:11:d7:2e:d5:
         4a:82:42:f3:e7:61:ff:43:57:48:19:c3:68:f7:c7:bf:a9:d0:
         14:53:36:64:35:c5:e8:97:fc:4f:d2:0c:d5:ad:db:bf:40:d3:
         ed:64:65:7f:66:54:7f:51:c1:1c:9a:8a:f3:be:41:74:43:eb:
         0a:43:b4:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Apr 19 13:02:23 2026 by rpki-client