Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/41706dfa-8951-332c-9f7d-6dcade1679b5.roa
File:                     41706dfa-8951-332c-9f7d-6dcade1679b5.roa (raw, json)
Hash identifier:          Mk5XBay1wfSUSvD5l+VRL9bCJeQnFj90zq+4zzBEH0Q=
Subject key identifier:   82:8B:7C:8C:E7:84:56:83:FC:BE:23:D2:42:E3:C4:E6:65:B9:9A:BD
Certificate issuer:       /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial:       010D0C9F4328584E296EFBB4D186947BC1508540
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/41706dfa-8951-332c-9f7d-6dcade1679b5.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     14555
IP address blocks:        198.23.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6e:fb:b4:d1:86:94:7b:c1:50:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=7449efbd-0e5c-4354-a878-e7324354ca45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:65:ac:8e:7a:1a:8a:ca:8e:c6:dc:f6:31:d9:
                    58:0b:37:e9:8f:78:7a:ae:37:e6:c9:48:a7:6b:21:
                    ed:14:b6:df:f0:ab:4e:0c:34:1d:3a:32:f1:7f:81:
                    db:67:e9:30:25:60:2f:28:c5:f1:e5:52:e0:df:38:
                    5f:af:39:9d:83:71:1a:6d:31:0a:c9:5d:37:86:8f:
                    11:14:ab:33:5b:b3:a2:74:bc:87:fa:32:7f:b3:76:
                    0e:df:15:73:8b:0a:63:af:32:62:96:a9:90:99:de:
                    8b:02:4a:cb:47:57:fe:2b:34:31:51:6d:b4:b7:11:
                    d1:8a:1a:cb:cb:2e:6c:b1:db:93:19:7b:27:ce:ee:
                    35:36:af:a4:97:b1:50:fd:62:12:23:38:79:c8:dc:
                    99:b8:29:5e:37:fe:ba:83:c9:84:1c:b7:cb:b5:d8:
                    0f:42:77:b9:c3:d7:1a:78:d4:d9:42:20:e9:72:aa:
                    79:e9:7b:be:80:ba:a2:39:b5:85:23:62:eb:11:87:
                    f3:ea:12:83:f3:09:37:01:1e:a4:fa:18:46:53:a4:
                    d3:0f:2f:0b:e6:59:19:2c:e5:50:da:75:cc:2c:05:
                    fa:44:75:39:4e:75:7d:24:34:5f:00:f5:6d:77:0d:
                    b9:6e:4a:56:66:9d:e7:da:65:ee:1a:dd:83:22:8a:
                    0b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8B:7C:8C:E7:84:56:83:FC:BE:23:D2:42:E3:C4:E6:65:B9:9A:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/41706dfa-8951-332c-9f7d-6dcade1679b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl

            X509v3 Authority Key Identifier:
                keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.23.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:73:51:9d:a8:9a:75:a3:50:f0:55:b2:55:46:26:4b:84:0a:
         ad:ec:1d:96:e2:9e:c4:d3:6b:25:5a:0d:a5:ed:d7:91:42:7b:
         a0:d7:c2:d2:db:ad:71:29:67:7d:65:95:06:49:a0:73:88:9f:
         9e:10:c8:f5:f5:c5:ce:bb:55:c5:fb:69:b8:c6:23:53:3a:6f:
         80:38:f7:a3:82:6d:26:ec:7c:cb:aa:d2:83:53:97:10:8f:ba:
         83:d3:6f:dc:e2:30:13:2f:a5:d7:f0:07:20:00:29:04:85:db:
         8a:25:ed:4e:50:e0:2a:9f:14:68:11:0d:0b:c5:14:a7:ba:1d:
         52:4c:6c:2a:3b:f5:4d:a7:5e:e4:c5:af:b1:f8:23:4c:17:6e:
         d6:c6:69:71:33:58:68:92:b2:0b:85:9a:5f:c9:39:d5:0b:86:
         9f:23:9c:59:00:15:5c:c5:bf:94:fa:d7:b2:0f:65:cb:16:2b:
         61:3c:a1:cf:da:f6:fb:8c:f9:85:73:df:65:b9:a3:40:b1:13:
         41:62:ff:e9:db:7e:bf:54:12:df:f8:87:c5:28:69:74:08:40:
         fd:61:9e:01:ad:c4:66:45:83:dd:dd:af:dd:a3:a9:e7:f1:9f:
         8b:2f:d0:f1:72:a6:c6:77:1e:73:1f:17:df:7f:84:dc:36:2f:
         84:db:78:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:00:28 2026 by rpki-client