Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/34c260ec-a79c-314d-b0b5-91a125d5fea8.roa
File:                     34c260ec-a79c-314d-b0b5-91a125d5fea8.roa (raw, json)
Hash identifier:          hPuI2HWQWL9EcVJFRcj2Ios23NvR7qvn+031ET/67qY=
Subject key identifier:   7F:12:60:DC:EC:81:7A:94:3C:24:6A:21:17:44:A2:80:28:0B:C8:73
Certificate issuer:       /CN=0cf052a9-7395-4330-8d8e-b0ebcd23fcd3
Certificate serial:       010D0C9F4328584D703FF85F94D84A131FA46400
Authority key identifier: 73:16:7C:D0:F0:F6:6B:07:1A:E0:D8:42:F7:85:2F:2E:02:67:E2:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/34c260ec-a79c-314d-b0b5-91a125d5fea8.roa
Signing time:             Wed 08 Apr 2026 13:00:33 +0000
ROA not before:           Wed 08 Apr 2026 13:00:33 +0000
ROA not after:            Tue 07 Jul 2026 13:00:33 +0000
asID:                     23096
IP address blocks:        23.235.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:3f:f8:5f:94:d8:4a:13:1f:a4:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cf052a9-7395-4330-8d8e-b0ebcd23fcd3
        Validity
            Not Before: Apr  8 13:00:33 2026 GMT
            Not After : Jul  7 13:00:33 2026 GMT
        Subject: CN=4e823aa1-b87b-4469-8e43-b8fd7f6ab8f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:9b:7a:9a:7c:54:ef:b4:59:97:0e:c6:38:
                    3e:65:83:19:57:4b:00:d0:b0:d2:ef:08:d3:f6:39:
                    4a:09:a9:18:39:f9:76:be:bd:5e:d7:21:37:e0:c9:
                    14:b5:27:1a:e6:8f:45:d9:5f:dd:d5:c7:96:52:12:
                    34:82:18:b6:09:9b:3b:9b:d7:89:6b:89:a5:28:dd:
                    a2:ee:43:81:19:21:09:5f:14:58:9c:26:4c:f2:63:
                    33:c0:db:79:87:4c:76:94:d8:e0:39:a8:9e:1f:25:
                    3d:ea:e8:1d:a9:41:53:a9:83:58:96:c5:f9:5e:dd:
                    13:83:8c:21:ec:c9:7a:35:87:b2:42:63:e0:c9:ba:
                    b3:06:81:a7:50:97:a6:34:50:31:13:7f:0b:12:b6:
                    a3:13:ef:3f:9b:d6:c3:ff:05:a9:82:bd:cd:cc:a0:
                    6c:90:6e:90:f5:39:7f:b1:bf:b1:99:b6:c9:b1:1c:
                    a4:ae:93:d3:4d:62:d8:3b:d8:8a:c9:b0:03:78:c1:
                    74:1d:fe:47:94:e3:2a:ac:29:c3:de:82:fc:43:d2:
                    32:f9:db:3a:f6:bf:56:37:e3:af:79:91:60:d8:06:
                    49:ed:fe:36:56:ad:f9:95:c7:49:dd:7d:e9:3b:a6:
                    29:ac:88:e3:e2:64:a9:8f:08:e0:b1:c6:af:69:61:
                    7c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:12:60:DC:EC:81:7A:94:3C:24:6A:21:17:44:A2:80:28:0B:C8:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/34c260ec-a79c-314d-b0b5-91a125d5fea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.crl

            X509v3 Authority Key Identifier:
                keyid:73:16:7C:D0:F0:F6:6B:07:1A:E0:D8:42:F7:85:2F:2E:02:67:E2:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0cf052a9-7395-4330-8d8e-b0ebcd23fcd3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:3e:76:e9:c2:8b:09:ce:09:fe:bc:77:65:c4:6e:17:92:39:
         ef:0c:76:a9:17:48:3e:01:64:82:61:89:f4:06:63:d0:6e:19:
         8b:23:d8:51:4d:58:e6:76:36:d3:d7:b9:91:31:49:44:0a:38:
         b2:89:17:79:fb:0a:58:d5:d4:82:f2:49:7f:00:34:f4:20:df:
         b3:a0:88:0c:5e:b9:01:6a:16:68:fb:61:77:44:f7:ec:e4:3f:
         e9:b6:ea:bf:19:2c:4f:84:1b:3a:b1:62:20:17:b6:89:3e:61:
         bd:4d:1e:0a:40:98:e9:7d:e3:80:cc:1f:3b:0a:8f:01:e2:a2:
         1c:f9:ba:2c:55:84:66:73:ae:00:53:d0:44:17:d3:2f:4c:1a:
         03:19:32:84:db:90:42:5e:22:5b:f9:00:91:57:e4:a2:13:30:
         34:cb:41:45:9d:8b:9d:55:c2:68:a1:44:33:72:41:38:55:fc:
         d4:eb:e3:fc:a5:7d:0f:3e:2e:68:98:91:0f:bf:95:82:56:03:
         75:11:90:92:24:f6:b8:97:0a:55:8a:9e:87:3e:4d:ee:02:42:
         10:e0:2f:fb:a0:65:72:f2:3c:c4:1a:65:4a:23:1b:89:2b:35:
         ce:a6:f1:ea:5c:ed:1c:c2:00:9c:85:cc:7e:c9:52:ab:cc:0d:
         47:3b:76:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 13:40:47 2026 by rpki-client