Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6556b9a1-c61b-3284-9883-12a3031ef2d5.roa
File:                     6556b9a1-c61b-3284-9883-12a3031ef2d5.roa (raw, json)
Hash identifier:          JS8VNO7VOZVFY4BzoAAa0FqEHuJe3nldEt+NKND8Nkk=
Subject key identifier:   D8:52:11:63:1F:F5:F5:03:05:F0:CB:E7:D1:52:6D:F2:ED:E0:55:32
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584DAE28AB0BF614E96FB0463E00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6556b9a1-c61b-3284-9883-12a3031ef2d5.roa
Signing time:             Thu 30 Apr 2026 17:14:10 +0000
ROA not before:           Thu 30 Apr 2026 17:14:10 +0000
ROA not after:            Wed 29 Jul 2026 17:14:10 +0000
asID:                     0
IP address blocks:        8.26.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ae:28:ab:0b:f6:14:e9:6f:b0:46:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Apr 30 17:14:10 2026 GMT
            Not After : Jul 29 17:14:10 2026 GMT
        Subject: CN=1893811c-4490-4d81-a880-81f5370a0eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b4:48:29:52:c9:ad:19:8b:4e:c6:07:b0:46:
                    90:a3:80:23:be:87:d8:3e:4c:00:e4:60:8c:31:b0:
                    22:ea:24:8d:e9:82:a0:b9:43:b5:92:e2:31:cf:dd:
                    a9:d9:56:d0:a7:d4:4f:bd:d3:a4:94:ff:e9:29:64:
                    20:8c:24:13:2c:50:7d:df:dc:d5:04:b2:92:22:c7:
                    37:3a:44:3d:99:2d:1d:02:62:72:91:33:cf:13:17:
                    86:e3:35:38:89:2c:d7:78:57:0d:a2:28:1d:2f:a7:
                    ac:d8:13:7b:b8:9a:15:60:81:35:de:9d:a8:8b:c9:
                    ff:36:81:0b:7a:5e:b7:e3:8b:11:71:07:a9:b3:7e:
                    f4:96:9b:fc:61:2c:fe:d3:b5:fd:d9:f3:39:b1:f0:
                    c3:96:75:ec:6b:d3:50:2e:59:d6:c0:c7:66:20:86:
                    ca:b8:9d:e3:dc:b3:a8:ff:95:6b:c9:05:63:3f:b9:
                    1e:b2:44:dc:92:1e:f2:4c:50:86:b6:c6:80:9d:7e:
                    63:f3:f2:0e:ea:ea:dd:f7:55:9a:ac:b4:95:73:a0:
                    3f:d5:b8:be:30:22:92:65:96:19:a2:7f:d7:5a:4b:
                    43:80:05:d6:4d:f3:ad:df:87:4f:c4:03:3f:30:d1:
                    87:30:c5:33:1e:24:ce:68:c9:38:39:a1:38:55:68:
                    24:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:52:11:63:1F:F5:F5:03:05:F0:CB:E7:D1:52:6D:F2:ED:E0:55:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6556b9a1-c61b-3284-9883-12a3031ef2d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.26.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:36:b1:1a:49:26:28:8b:f3:1c:fa:ab:e0:2a:56:70:89:7e:
         ae:74:78:9e:18:4b:93:85:f3:00:f5:ab:9d:fc:ea:c7:7d:ee:
         cb:5c:74:18:1a:eb:de:db:90:2d:67:a8:05:cd:28:17:76:76:
         fc:e6:1b:05:74:b8:29:4f:90:4a:7b:fb:70:23:e0:03:5f:ba:
         06:72:48:82:c9:e0:b7:7a:9e:58:9b:8c:35:ae:da:68:43:42:
         6b:ea:0c:39:ec:67:f0:66:b3:7e:74:f5:f2:9f:32:1d:9b:21:
         f4:24:9e:fd:5b:8f:1d:ef:c5:94:37:90:73:bf:19:31:d7:da:
         c7:8c:7d:9f:19:53:25:20:6f:86:0e:48:99:f8:67:46:04:c4:
         d9:bd:cd:f2:d3:91:3c:09:21:3a:5c:00:da:53:9e:e9:70:76:
         7f:ca:1a:ed:57:aa:13:65:85:1b:34:9e:24:38:cd:76:f3:b2:
         f8:22:fb:94:99:a6:0f:87:c7:c7:da:4a:62:b9:bf:56:9b:6d:
         4c:4f:14:9e:e1:17:2c:28:b3:fa:e3:1e:ae:29:03:f6:09:1e:
         89:fe:8b:e4:67:ef:ae:50:10:64:30:bf:3a:f1:fa:e7:e9:27:
         88:13:a2:4c:e8:50:2c:cc:63:c8:68:e4:34:a3:e6:49:57:1a:
         cc:80:2c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 00:38:29 2026 by rpki-client