Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/037f8058-2d43-4452-85e3-a5ecb59bd2b2/087a07cd-15d3-38b2-8960-167486e72808.roa
File:                     087a07cd-15d3-38b2-8960-167486e72808.roa (raw, json)
Hash identifier:          VLFmoGnw6ineQe/u+zrRBpleybNIcQKH4AcQ7uOfpn4=
Subject key identifier:   7C:78:72:7A:EB:7E:A0:78:7C:C3:E1:62:73:A9:CE:FE:18:06:A7:49
Certificate issuer:       /CN=037f8058-2d43-4452-85e3-a5ecb59bd2b2
Certificate serial:       010D0C9F4328584DE5C53D46483C87EC3B112340
Authority key identifier: 95:DB:AD:59:08:1D:0F:AE:62:33:40:AB:A9:3F:59:64:22:F7:74:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/037f8058-2d43-4452-85e3-a5ecb59bd2b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/037f8058-2d43-4452-85e3-a5ecb59bd2b2/087a07cd-15d3-38b2-8960-167486e72808.roa
Signing time:             Wed 20 May 2026 15:19:06 +0000
ROA not before:           Wed 20 May 2026 15:19:06 +0000
ROA not after:            Tue 18 Aug 2026 15:19:06 +0000
asID:                     21859
IP address blocks:        23.154.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/037f8058-2d43-4452-85e3-a5ecb59bd2b2/037f8058-2d43-4452-85e3-a5ecb59bd2b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/037f8058-2d43-4452-85e3-a5ecb59bd2b2/037f8058-2d43-4452-85e3-a5ecb59bd2b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/037f8058-2d43-4452-85e3-a5ecb59bd2b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e5:c5:3d:46:48:3c:87:ec:3b:11:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037f8058-2d43-4452-85e3-a5ecb59bd2b2
        Validity
            Not Before: May 20 15:19:06 2026 GMT
            Not After : Aug 18 15:19:06 2026 GMT
        Subject: CN=f17d1625-6b10-48db-9ff2-35de24e43ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:49:05:c2:4d:73:fc:f6:38:54:7c:f1:7c:e7:
                    dd:a9:6c:05:6b:b7:78:76:0f:45:f0:e4:dc:72:0b:
                    06:b6:c3:c5:82:cb:cb:2e:88:ac:64:22:ad:8b:fc:
                    39:67:66:38:45:df:5b:d5:f8:3c:91:a2:e9:be:f6:
                    40:08:dd:c0:ba:70:76:16:7a:35:58:71:5e:3c:4b:
                    89:23:a1:9d:0d:61:c8:50:f3:be:ee:42:f0:04:ad:
                    1b:40:18:b3:44:e1:ef:83:8b:20:11:52:f2:af:4f:
                    a4:cc:ee:24:d9:79:28:14:e0:ee:d5:bf:45:19:44:
                    9a:5b:a9:34:3b:b6:d7:53:94:5b:11:4e:38:f4:3d:
                    de:7e:6d:be:66:d5:3a:63:db:9a:75:18:03:b6:75:
                    57:dc:3e:47:a1:ac:d1:7f:85:89:f9:f2:2e:b9:e6:
                    6d:7c:6e:4d:cf:e8:f5:49:6e:04:57:d1:7c:57:6d:
                    14:0f:7c:05:68:50:06:c0:76:d4:26:db:4f:1b:fd:
                    c2:d8:a7:d0:ae:91:1e:8c:d5:da:63:00:11:cb:c9:
                    75:65:77:24:d4:45:5c:bf:bd:d3:76:97:e5:fd:6d:
                    8b:e1:86:72:4a:3c:e4:30:ef:98:de:40:83:c1:2a:
                    12:d6:4d:cf:ca:78:17:da:91:b9:dc:24:eb:c1:b3:
                    7b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:78:72:7A:EB:7E:A0:78:7C:C3:E1:62:73:A9:CE:FE:18:06:A7:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/037f8058-2d43-4452-85e3-a5ecb59bd2b2/087a07cd-15d3-38b2-8960-167486e72808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/037f8058-2d43-4452-85e3-a5ecb59bd2b2/037f8058-2d43-4452-85e3-a5ecb59bd2b2.crl

            X509v3 Authority Key Identifier:
                keyid:95:DB:AD:59:08:1D:0F:AE:62:33:40:AB:A9:3F:59:64:22:F7:74:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/037f8058-2d43-4452-85e3-a5ecb59bd2b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:30:49:8b:9a:50:1c:02:19:a9:c6:16:c8:33:2e:81:c8:62:
         10:70:b6:60:ff:9a:4f:ab:97:6e:07:d3:9c:78:11:7b:fe:6b:
         50:27:4b:5a:59:60:18:ef:57:c3:14:4a:dc:b5:1f:dc:90:fd:
         62:61:59:4f:34:e2:d2:7d:99:f9:ca:22:f8:94:c2:7e:7f:b1:
         53:cf:0d:b9:d2:40:21:08:fc:da:f0:aa:fc:1d:69:4e:91:10:
         4d:15:8e:91:89:73:90:41:24:20:ed:43:92:1b:51:0a:7c:8a:
         69:49:19:66:2a:a2:54:e9:f9:4b:3a:70:86:01:84:3a:7a:52:
         f6:fe:42:b1:41:19:0b:bb:46:eb:9b:da:7a:88:d3:34:8d:69:
         44:e7:53:5d:8e:b2:f4:b1:90:99:cf:29:1d:5f:a5:15:87:46:
         db:64:01:8b:34:d9:59:8c:77:d3:94:17:c6:b6:77:b1:84:6b:
         43:18:e7:ef:29:4c:8c:ab:1d:7e:1f:ea:bd:bf:1c:dc:92:12:
         e3:41:d7:c8:2d:ab:6c:22:8c:e7:b7:e3:2e:2c:a3:cc:b9:47:
         7a:a2:82:7f:d2:99:8d:05:65:0a:de:ea:ee:2d:84:36:47:d6:
         8c:9f:43:ef:b7:bb:7d:c8:b8:2f:13:8d:1a:90:3a:68:0b:8f:
         18:4b:25:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:09:21 2026 by rpki-client