Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/2f9313df-a623-30d3-a9c4-87a46c7b7e7b.roa
File:                     2f9313df-a623-30d3-a9c4-87a46c7b7e7b.roa (raw, json)
Hash identifier:          s0ye9gsN9v0YUuXYnrpt0a+WdWglJAUaBFPDQXHwP84=
Subject key identifier:   80:C5:4C:D4:18:AF:C7:B9:8B:FA:0E:7C:B6:34:01:25:96:FD:AE:0D
Certificate issuer:       /CN=5ad6fa24-7c60-4275-b208-9a73092370c7
Certificate serial:       010D0C9F4328584DF2108098910246D301490D00
Authority key identifier: 4D:25:9F:5E:77:79:3E:8E:7F:FD:72:BD:1E:E3:F5:F2:13:93:3F:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/2f9313df-a623-30d3-a9c4-87a46c7b7e7b.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     401962
IP address blocks:        23.145.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/5ad6fa24-7c60-4275-b208-9a73092370c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/5ad6fa24-7c60-4275-b208-9a73092370c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:80:98:91:02:46:d3:01:49:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad6fa24-7c60-4275-b208-9a73092370c7
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=05dc3dbb-d7d3-4197-942a-f3de03c891f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:e2:6c:54:a4:62:a7:0d:56:69:be:39:40:
                    b7:d0:83:2e:4d:a4:f8:7a:49:b0:15:c2:e2:3c:bd:
                    57:f0:63:d0:04:0f:82:7f:50:aa:a2:da:2e:b6:f4:
                    1a:00:00:e6:38:79:88:94:e3:55:36:3a:4b:a2:3e:
                    a9:42:dc:5b:12:b0:73:44:88:65:38:5d:69:15:8d:
                    ac:07:03:ee:b9:63:74:a8:12:43:0f:8e:85:08:48:
                    78:b0:33:27:6a:01:67:de:c3:19:e4:d5:7f:da:e0:
                    1b:03:12:19:5d:15:ee:68:9e:f1:f0:24:01:4e:21:
                    8d:63:33:9b:dc:04:d1:43:93:cf:03:c9:9b:5e:62:
                    8e:f1:c9:42:7f:77:41:f5:01:6f:25:86:a6:47:fe:
                    22:e6:e2:36:a5:5f:51:a1:94:fc:d5:95:02:70:74:
                    68:58:2f:cb:52:ca:de:a6:31:ed:24:93:ee:0f:b6:
                    27:41:50:e8:36:0a:9a:d9:a6:37:f8:02:a8:cc:b3:
                    fa:6f:c6:12:d7:25:eb:34:3c:27:95:41:b9:dd:78:
                    00:8d:ff:67:0d:20:7f:40:76:ec:10:50:34:4f:cf:
                    ed:de:f0:e4:06:5f:29:3d:22:47:cd:d7:bd:19:43:
                    d6:fd:ee:d7:f6:08:87:ab:33:b8:71:ac:68:d1:58:
                    17:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C5:4C:D4:18:AF:C7:B9:8B:FA:0E:7C:B6:34:01:25:96:FD:AE:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/2f9313df-a623-30d3-a9c4-87a46c7b7e7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7/5ad6fa24-7c60-4275-b208-9a73092370c7.crl

            X509v3 Authority Key Identifier:
                keyid:4D:25:9F:5E:77:79:3E:8E:7F:FD:72:BD:1E:E3:F5:F2:13:93:3F:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5ad6fa24-7c60-4275-b208-9a73092370c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:2b:4a:56:37:2c:41:6d:23:f3:13:b1:ef:7c:cd:02:b8:a0:
         37:41:7d:29:92:c2:0f:c6:33:25:2f:fd:63:b5:c5:26:2f:01:
         0d:c8:9b:21:ef:a1:33:4a:df:2c:3e:36:d3:fd:b7:92:c6:3b:
         8b:33:e6:76:96:16:c9:23:7f:b6:ad:a5:4f:cc:91:4e:e4:1b:
         12:95:c5:8d:e3:56:e8:7a:9e:62:a3:9d:a4:f7:03:f0:83:28:
         50:9c:6a:fe:ce:fb:20:b7:f6:57:07:e9:cb:56:9d:a8:61:1f:
         95:85:b2:64:44:cc:04:1d:b4:a0:ba:ce:12:10:21:47:56:b3:
         81:de:90:c6:b6:80:62:4f:7b:71:3d:b8:2f:d3:b6:77:a0:de:
         08:83:c7:51:9b:4a:41:df:24:bc:0b:ca:b4:61:4e:51:7a:54:
         82:2b:12:ad:da:c0:79:18:20:f2:e5:21:11:a2:b9:0d:48:a1:
         f3:8e:fb:f0:7d:e5:ff:03:5a:e3:18:69:c8:89:87:a6:b6:33:
         9c:40:9f:91:5e:1a:f0:95:f0:14:9a:3b:d9:d2:b9:d6:bf:0d:
         39:50:a5:42:dd:ce:4f:71:5c:a5:f9:5a:ff:54:48:d7:1d:e9:
         33:fb:d7:4b:13:f6:b3:4d:0a:0d:59:07:43:0c:1c:ab:42:08:
         85:34:66:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:11:04 2026 by rpki-client