Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/e8fd7445-d866-3417-b7f9-c164b90ef934.roa
File:                     e8fd7445-d866-3417-b7f9-c164b90ef934.roa (raw, json)
Hash identifier:          9aCFvLON61qbpvjMlKecdTg/9S0bundIE4EMmt2ObY8=
Subject key identifier:   16:58:B3:6E:6E:34:99:4B:1A:F7:9B:94:C7:87:07:0D:C6:7E:4B:D0
Certificate issuer:       /CN=9d18a72d-9615-46c9-abe8-3d815ac0b112
Certificate serial:       010D0C9F4328584E22744B11AEE22F4D45700880
Authority key identifier: 77:E1:F6:19:48:6D:F8:3D:E9:41:04:51:00:9F:09:72:5A:5A:2E:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/e8fd7445-d866-3417-b7f9-c164b90ef934.roa
Signing time:             Thu 11 Jun 2026 09:00:12 +0000
ROA not before:           Thu 11 Jun 2026 09:00:12 +0000
ROA not after:            Wed 09 Sep 2026 09:00:12 +0000
asID:                     402061
IP address blocks:        23.146.220.0/24 maxlen: 24
                          2620:de:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/9d18a72d-9615-46c9-abe8-3d815ac0b112.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/9d18a72d-9615-46c9-abe8-3d815ac0b112.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:22:74:4b:11:ae:e2:2f:4d:45:70:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d18a72d-9615-46c9-abe8-3d815ac0b112
        Validity
            Not Before: Jun 11 09:00:12 2026 GMT
            Not After : Sep  9 09:00:12 2026 GMT
        Subject: CN=fd2fcf14-b788-4100-8598-cc9cb93359aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:aa:fe:29:6b:77:ce:3b:9d:b6:1a:07:78:b3:
                    92:17:e6:87:7d:cd:08:ef:80:2f:79:e8:f9:cd:1d:
                    8b:eb:0f:9c:90:ea:0d:e9:4f:13:c6:08:4b:8a:ca:
                    69:cd:da:8d:3c:bf:b1:37:62:59:85:29:f1:71:a1:
                    11:4f:e1:40:8f:8c:c6:b8:0a:81:93:05:f7:0d:06:
                    b3:86:29:66:27:53:c0:56:75:dd:1f:96:b2:a2:64:
                    38:ef:53:1f:71:8c:39:f3:bf:4d:d9:47:bc:81:59:
                    5e:fe:7f:0f:1f:a7:1f:2a:4c:f3:b3:9a:e0:a7:f9:
                    03:cf:4b:37:5a:13:b7:cd:79:5c:40:cf:e3:5d:85:
                    74:7a:27:f4:0d:3c:be:53:b1:76:b7:d2:f8:c6:6b:
                    cd:c6:a1:46:9d:df:69:66:74:bb:0f:9d:13:0d:20:
                    e9:39:01:db:7f:0e:5a:df:5b:a8:60:73:a0:f3:9c:
                    27:46:a8:74:0e:3c:2d:d7:22:89:e0:48:83:1d:64:
                    a4:62:27:b1:3c:a2:1d:4e:9a:04:5d:76:26:40:73:
                    1b:be:2e:0c:78:51:38:14:54:7d:03:8a:3d:9e:84:
                    2c:28:ec:80:d8:0a:93:2d:2c:dd:1e:38:1a:71:a5:
                    67:78:09:b5:bf:2f:49:fd:63:4c:ad:9a:8a:d8:16:
                    63:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:58:B3:6E:6E:34:99:4B:1A:F7:9B:94:C7:87:07:0D:C6:7E:4B:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/e8fd7445-d866-3417-b7f9-c164b90ef934.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112/9d18a72d-9615-46c9-abe8-3d815ac0b112.crl

            X509v3 Authority Key Identifier:
                keyid:77:E1:F6:19:48:6D:F8:3D:E9:41:04:51:00:9F:09:72:5A:5A:2E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9d18a72d-9615-46c9-abe8-3d815ac0b112.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.220.0/24
                IPv6:
                  2620:de:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:01:0c:78:44:6f:96:95:3a:89:f5:40:b8:bd:77:4e:bc:95:
         d9:e0:c1:31:d7:3d:f9:2a:22:d6:1d:8e:66:c1:87:6c:57:43:
         80:c3:11:41:e7:6a:51:2d:f7:73:97:4d:8d:7e:5e:8e:8d:f5:
         ba:4d:d4:64:cb:3c:34:5a:55:98:2b:8c:71:bc:27:5f:59:ff:
         b9:5d:76:9d:46:5e:ab:41:63:8d:2d:86:78:db:8a:fb:83:2e:
         cd:e6:eb:dd:ef:82:2b:69:09:ef:63:57:aa:48:ce:ef:43:e3:
         51:ae:7a:8b:7a:28:82:db:ca:50:56:62:c0:bb:d5:bb:2e:c6:
         49:04:ef:6d:67:44:0d:a6:9c:06:76:01:ce:77:a3:aa:57:8f:
         d6:b1:94:28:e9:79:68:3f:7d:6a:94:7c:ee:ce:8e:c3:d4:77:
         45:b7:16:ff:24:5e:dc:45:c9:0f:2c:8e:48:b1:d4:13:67:e3:
         a4:61:8a:e9:ce:fc:14:51:a8:49:50:68:69:19:2f:42:fe:e1:
         80:66:52:df:91:be:28:65:ba:e2:13:5c:7a:f3:35:15:e9:0d:
         84:10:92:43:3d:2a:9c:89:71:3f:cc:e0:48:27:e3:12:92:df:
         96:2b:74:09:f2:43:31:9c:b0:00:3c:0b:fd:f6:ed:67:84:50:
         b3:29:42:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:41:02 2026 by rpki-client