Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/636d67a7-5af2-301a-920c-7545dcd47635.roa
File:                     636d67a7-5af2-301a-920c-7545dcd47635.roa (raw, json)
Hash identifier:          1IM5U5lmhM5odDpaDB/qGj6w9gDmRWihCqHfgxbN+sI=
Subject key identifier:   2B:FC:5E:E4:3D:53:1D:8F:E2:65:BD:64:70:BA:5F:1F:85:B8:28:41
Certificate issuer:       /CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c
Certificate serial:       010D0C9F4328584E18AEFF6B607359306C55F500
Authority key identifier: 67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/636d67a7-5af2-301a-920c-7545dcd47635.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     401277
IP address blocks:        23.143.68.0/24 maxlen: 24
                          2602:f5c8::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:ff:6b:60:73:59:30:6c:55:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=3a24b339-58f8-4571-b1d9-d7d5ee60b979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:b5:5e:13:dd:11:d3:0c:4d:a5:00:88:e9:
                    5e:cb:10:ba:d1:46:9d:b6:09:c2:a0:12:36:3a:92:
                    17:b1:96:53:e5:51:6b:db:81:1e:b2:1a:91:13:bf:
                    c3:99:a5:09:af:61:5c:23:4b:c9:90:e1:c6:97:38:
                    cb:79:f6:40:8f:8d:de:93:42:3d:fe:0e:6e:f4:4d:
                    47:53:ac:f9:81:a9:e0:59:db:f3:93:ff:c3:14:53:
                    cf:2d:c8:d0:ff:5a:6e:f3:6a:7f:dc:f9:9f:f4:76:
                    22:86:cd:ef:bc:9b:e9:a1:f4:70:f9:f1:58:c8:b1:
                    c9:f4:df:40:f6:94:b2:7e:51:57:3a:d5:3f:74:48:
                    47:d7:c4:c8:02:25:f6:30:2b:97:47:85:4d:1e:2d:
                    74:c4:24:56:ff:d9:83:fb:4e:67:8b:a3:54:20:8b:
                    b7:a4:4e:8b:33:0e:14:4f:c4:02:79:75:10:37:ed:
                    5d:dc:50:51:4d:57:23:47:b4:96:ac:75:2f:cc:11:
                    2e:99:1d:42:59:6b:ac:d4:f0:52:02:b7:fa:82:ac:
                    db:c4:0e:28:6c:93:1d:97:24:40:be:bc:63:54:09:
                    bf:a8:1e:4b:17:e8:67:5b:61:b3:2b:53:f1:c1:81:
                    f6:77:f4:57:f2:66:0f:05:07:5e:d2:fc:6c:aa:32:
                    ff:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FC:5E:E4:3D:53:1D:8F:E2:65:BD:64:70:BA:5F:1F:85:B8:28:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/636d67a7-5af2-301a-920c-7545dcd47635.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl

            X509v3 Authority Key Identifier:
                keyid:67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.68.0/24
                IPv6:
                  2602:f5c8::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:7a:47:fd:4d:64:79:8e:70:ce:14:a5:26:1c:e1:19:71:17:
         48:08:ca:42:91:c8:27:15:b2:82:91:5f:c5:6f:ba:49:5b:90:
         2d:38:4c:59:ff:7c:8e:4a:52:38:71:cd:b3:c3:fd:c1:99:77:
         72:e4:d3:75:23:f3:86:f5:c2:17:f9:4b:50:7c:4e:c8:86:25:
         81:3a:ab:2e:c2:25:c2:e5:3e:43:36:e5:64:9d:64:4e:0c:9f:
         4b:ff:1d:26:f7:f7:5e:0e:c8:11:ee:8f:25:ac:0f:f5:de:59:
         84:09:60:61:8d:d0:2e:41:94:c7:f1:8b:f0:04:d7:40:3f:47:
         54:fb:7f:f6:6c:bf:f6:f7:9c:3a:ea:f2:3f:7e:78:09:d3:84:
         f9:70:58:f1:6b:a3:fd:00:e1:d2:85:ac:47:22:15:b9:bc:14:
         32:28:d8:af:3b:b9:ad:05:6b:8f:75:65:23:88:7a:7c:10:3d:
         5e:9b:2a:7e:18:8b:65:73:ba:33:5e:cf:79:a0:72:50:8d:da:
         e7:1e:24:84:93:9c:24:2d:4b:09:80:1d:93:96:1e:5a:74:16:
         95:43:69:ef:5f:35:eb:29:15:30:75:18:02:c7:bf:f3:33:4c:
         fd:97:55:d4:b4:88:4a:1b:2a:c9:ff:e5:91:e2:5e:0d:e0:42:
         38:3e:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:34:28 2026 by rpki-client