Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/930022df-4888-35d9-a721-aaffe888b06a.roa
File:                     930022df-4888-35d9-a721-aaffe888b06a.roa (raw, json)
Hash identifier:          6iabbXsQ094TOzm8QKPaPKafTLtDbMHsBu2dE2iSrbM=
Subject key identifier:   18:CB:2D:BB:CF:5D:BB:EA:DF:F4:89:81:71:5C:3E:7D:CE:A7:4B:81
Certificate issuer:       /CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
Certificate serial:       010D0C9F4328584D5E1A6E871374FBD7496CF080
Authority key identifier: 0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/930022df-4888-35d9-a721-aaffe888b06a.roa
Signing time:             Thu 02 Apr 2026 01:00:23 +0000
ROA not before:           Thu 02 Apr 2026 01:00:23 +0000
ROA not after:            Wed 01 Jul 2026 01:00:23 +0000
asID:                     54681
IP address blocks:        23.133.248.0/24 maxlen: 26
                          23.133.249.0/24 maxlen: 26
                          23.133.250.0/24 maxlen: 26
                          23.133.251.0/24 maxlen: 26
                          23.133.252.0/24 maxlen: 26
                          23.133.253.0/24 maxlen: 26
                          23.133.254.0/24 maxlen: 26
                          23.133.255.0/24 maxlen: 26
                          170.205.56.0/22 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5e:1a:6e:87:13:74:fb:d7:49:6c:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c2c9a6-8984-4c25-9136-6a8ca7d3f750
        Validity
            Not Before: Apr  2 01:00:23 2026 GMT
            Not After : Jul  1 01:00:23 2026 GMT
        Subject: CN=2c57bc30-3dfa-4ee9-a5f4-3810fe9b5c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:16:9a:2b:73:86:86:1f:c0:38:c1:8f:ab:
                    31:56:26:3e:3e:b9:fe:9f:17:39:d9:98:a4:25:76:
                    cb:29:92:ef:9d:39:66:b6:43:90:98:99:d1:73:6d:
                    60:a3:ce:7c:0e:ca:17:c2:b5:57:83:a5:f7:e6:b4:
                    6d:3f:bc:e3:bf:d7:55:6c:af:4d:74:89:00:5f:ef:
                    84:bd:fa:22:c4:5b:7b:06:a0:65:cd:c5:7c:ba:b9:
                    75:19:b9:a8:15:07:5f:91:f6:23:c8:dd:fe:fd:2f:
                    41:56:ed:ef:10:bf:91:d8:9f:48:1b:45:54:81:b5:
                    e4:f0:3d:49:69:ec:a1:da:d3:dc:c7:84:fb:4f:57:
                    c8:5f:dd:ed:90:f4:c8:af:ce:e6:a1:8c:91:8f:c3:
                    30:f2:0a:43:d6:24:5a:55:01:2a:7b:f0:e0:14:72:
                    9c:bb:31:5b:f5:e2:f8:d7:05:ba:c9:01:e2:8d:47:
                    e9:4b:0e:4f:fb:3c:ed:fd:88:72:e4:2c:97:21:06:
                    8f:56:5e:6f:b4:b5:b7:47:67:f6:11:42:0c:60:3d:
                    f8:0b:9e:3b:9d:0f:cc:e8:10:ca:eb:df:a4:81:39:
                    02:c9:cf:de:c4:18:ae:d2:ce:af:e7:4e:99:39:e6:
                    a4:1b:20:c0:66:a8:4b:39:02:8c:49:c4:82:6b:80:
                    ab:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:CB:2D:BB:CF:5D:BB:EA:DF:F4:89:81:71:5C:3E:7D:CE:A7:4B:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/930022df-4888-35d9-a721-aaffe888b06a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.crl

            X509v3 Authority Key Identifier:
                keyid:0B:6B:B9:60:6E:DA:2A:C8:92:0E:77:27:8C:5A:D2:EF:68:62:24:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7c2c9a6-8984-4c25-9136-6a8ca7d3f750.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.248.0/21
                  170.205.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:02:53:f9:e2:f0:8d:77:35:3a:3b:83:a3:cb:5d:f3:8e:da:
         a0:80:94:69:91:c4:c3:e5:f2:ac:2e:6d:bb:cb:7e:5f:76:ce:
         2f:83:8e:36:b1:d0:89:54:11:d8:57:75:26:28:54:69:2f:e0:
         90:85:9e:35:0e:39:b9:e3:c3:e1:18:13:35:7c:5c:8b:73:ec:
         bc:f7:f5:06:c6:21:a9:8e:c6:4f:5b:f8:aa:64:40:2d:d6:fd:
         1f:37:df:45:fb:83:ba:ca:d0:95:b4:53:77:c7:a5:73:2f:a5:
         71:d3:80:c5:8c:e6:36:24:18:91:ff:f8:26:eb:9b:06:16:40:
         45:e9:ab:ad:ab:dd:3b:43:38:c5:85:a3:10:8f:32:5d:1d:3c:
         5d:2c:56:72:41:ff:48:de:60:22:0e:43:1a:d9:27:94:77:08:
         d3:61:e9:a9:6b:f4:74:ee:57:6e:eb:72:fe:4e:c4:0f:de:e9:
         de:b5:56:71:87:79:aa:30:b9:07:84:2b:11:5c:93:52:8c:8c:
         cb:ad:0d:d5:44:d1:74:94:68:0b:7a:43:70:96:ab:2e:16:4f:
         e1:e5:5d:e5:d1:54:3a:b7:13:5a:76:2b:4f:17:5e:4f:9a:f1:
         0a:92:b4:74:23:08:c7:8b:f5:79:c9:f3:bc:ae:e1:8d:01:e9:
         52:29:d3:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 02:33:42 2026 by rpki-client