Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c44fd8d-440c-3ef5-b925-66ff3a1e86c9.roa
File:                     5c44fd8d-440c-3ef5-b925-66ff3a1e86c9.roa (raw, json)
Hash identifier:          hIcne05d5un1/O23cY0y1e2MN5NLfn49uU47Yh+ycIc=
Subject key identifier:   4E:AB:4B:3C:A6:5D:D6:C6:95:C6:59:B1:BE:2A:29:BA:5A:34:FA:12
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584E1288B993C7CC8A35EFF91750
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c44fd8d-440c-3ef5-b925-66ff3a1e86c9.roa
Signing time:             Fri 05 Jun 2026 16:08:33 +0000
ROA not before:           Fri 05 Jun 2026 16:08:33 +0000
ROA not after:            Thu 03 Sep 2026 16:08:33 +0000
asID:                     270543
IP address blocks:        200.15.14.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:12:88:b9:93:c7:cc:8a:35:ef:f9:17:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Jun  5 16:08:33 2026 GMT
            Not After : Sep  3 16:08:33 2026 GMT
        Subject: CN=76d25ddf-5dd4-44ed-81d0-904b07d9ebfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:12:3d:fc:a3:9d:5c:ae:6a:e0:db:55:7d:46:
                    a0:26:78:f7:47:c1:33:af:fd:21:9c:08:24:16:b7:
                    80:72:a2:00:ee:af:b5:6c:e4:7b:de:19:95:6c:17:
                    59:b5:8d:47:3d:8b:a5:96:e6:b2:45:16:c7:a0:1f:
                    57:d1:60:78:b2:6a:55:22:9a:1c:b6:9b:9b:92:23:
                    20:71:f7:29:a5:95:11:51:c0:2b:aa:f8:94:f6:3b:
                    05:a4:a6:e1:d8:46:63:fe:b1:23:46:ce:83:dc:bf:
                    34:1b:b2:b3:76:df:9b:b5:47:dd:08:a8:51:67:a3:
                    d3:3a:4b:d4:fd:09:9a:cb:9a:40:4f:73:2a:e8:11:
                    13:83:08:6c:b7:21:55:47:b0:fd:9d:0b:e5:08:79:
                    6f:0d:57:2c:8a:84:9e:dd:a1:fd:7b:7a:e9:39:79:
                    5f:5d:e5:61:92:31:9a:48:4e:82:fd:99:d4:72:a3:
                    2a:27:2b:67:3d:7a:17:c1:63:4a:0f:b7:40:fb:7e:
                    d3:ed:1d:a9:cc:87:97:e9:57:b7:30:7a:55:a8:33:
                    8c:cb:2e:31:63:31:31:11:70:72:c7:0b:f3:b6:57:
                    ed:1a:7e:8d:ca:ee:17:91:73:b7:28:07:9a:d2:b4:
                    27:f5:ec:10:c2:fa:02:c7:c6:99:94:3d:0e:eb:70:
                    2b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AB:4B:3C:A6:5D:D6:C6:95:C6:59:B1:BE:2A:29:BA:5A:34:FA:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/5c44fd8d-440c-3ef5-b925-66ff3a1e86c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.15.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:9f:e5:94:78:c9:e0:b6:c8:63:56:fc:0b:ea:f3:e3:4b:39:
         68:53:e9:9e:cb:45:48:e8:0e:37:df:2c:3d:57:75:25:aa:c8:
         44:c6:c9:26:2f:0c:8b:bc:67:63:4d:24:9b:88:16:76:7b:11:
         ef:84:f5:02:c4:3e:04:2e:77:2a:ff:ce:c8:57:8d:89:e1:40:
         9b:43:9d:4c:f0:29:11:86:94:e4:51:97:fb:b1:45:35:4b:19:
         ec:f9:d9:74:f0:89:65:ee:e7:ce:c0:7a:92:54:72:5c:3e:aa:
         df:65:6a:05:2c:40:29:eb:f9:bc:f8:52:93:4c:f4:ba:c9:92:
         14:19:99:77:75:9f:94:51:5f:7a:35:bf:18:a1:fe:87:5d:26:
         67:37:e2:e2:a5:f0:f6:a1:d2:c7:dc:5c:95:e2:28:d9:51:d6:
         8a:5c:45:7f:b7:11:0e:ee:f8:1a:02:04:ce:0d:ed:cc:f3:97:
         1c:95:21:d9:32:0b:41:55:2c:b7:20:07:0a:21:00:97:ad:ca:
         26:66:de:22:28:8f:36:a1:c5:df:59:0d:48:40:4d:7b:d0:74:
         11:e4:f9:49:cd:76:28:f6:19:c8:39:07:1b:a8:31:63:6c:2d:
         8a:b2:5b:72:a7:60:83:7e:e7:2a:f8:06:9f:10:1b:50:ce:23:
         07:49:e6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 22:07:34 2026 by rpki-client