Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/6c85b21c-78ec-3c1f-8a29-cf58c94d2c4e.roa
File:                     6c85b21c-78ec-3c1f-8a29-cf58c94d2c4e.roa (raw, json)
Hash identifier:          dgcQ0YBr/WFecOBEo4tZ7cO3XgsT2pLvxZZTdbXCoKY=
Subject key identifier:   6F:0C:13:E6:5A:BC:FE:51:51:DF:FE:50:6D:77:C4:2B:CA:C0:91:5A
Certificate issuer:       /CN=0acd930f-69db-4fad-a737-b4b3b2f142c6
Certificate serial:       010D0C9F4328584E779A334EFA1F16FCA71B1600
Authority key identifier: 12:7C:E9:07:67:6B:81:E2:77:9F:9C:62:37:5D:B7:19:5F:E3:64:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/6c85b21c-78ec-3c1f-8a29-cf58c94d2c4e.roa
Signing time:             Sat 11 Jul 2026 21:00:11 +0000
ROA not before:           Sat 11 Jul 2026 21:00:11 +0000
ROA not after:            Fri 09 Oct 2026 21:00:11 +0000
asID:                     396836
IP address blocks:        23.147.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/0acd930f-69db-4fad-a737-b4b3b2f142c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/0acd930f-69db-4fad-a737-b4b3b2f142c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:77:9a:33:4e:fa:1f:16:fc:a7:1b:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0acd930f-69db-4fad-a737-b4b3b2f142c6
        Validity
            Not Before: Jul 11 21:00:11 2026 GMT
            Not After : Oct  9 21:00:11 2026 GMT
        Subject: CN=0dd28577-2cde-4f96-89ea-36169f30873b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:bd:1e:22:b7:76:5e:79:ab:2e:0e:45:f6:
                    3f:88:7b:1f:73:e4:0b:b4:ec:29:4b:13:62:0d:d6:
                    80:8e:84:ec:1e:fa:e0:82:be:7b:c0:35:0f:e2:c2:
                    67:de:7d:20:66:d3:3f:70:8f:3f:9f:58:01:e6:ef:
                    10:e4:09:10:56:49:71:65:52:13:96:c1:59:e3:0f:
                    60:a1:d4:26:e5:e4:bc:01:f6:ab:53:ac:b2:28:2c:
                    38:66:2c:70:94:8e:cd:5c:a8:22:35:47:3b:6c:4f:
                    ef:d0:68:39:fe:df:d5:f9:56:77:4f:8e:96:08:c9:
                    6d:a0:5a:ca:c5:91:c5:18:49:5c:d6:5e:eb:9f:d9:
                    4f:a3:cf:32:d9:66:eb:7e:4c:d7:42:d2:a3:ca:9e:
                    2d:e2:c9:0e:f0:10:51:0a:fd:db:39:e8:af:18:c6:
                    45:49:af:d7:19:62:0d:45:b8:44:60:cf:b9:96:a7:
                    b3:a4:11:39:80:70:7b:6d:09:d6:63:14:2f:a0:fd:
                    b0:3f:e8:91:3c:d0:7b:6b:ce:69:d0:2e:d3:10:73:
                    84:60:2f:09:39:fc:5b:8a:f3:14:1a:72:47:78:b3:
                    9a:98:88:ed:0f:2c:a1:c8:a5:5d:f2:ba:ef:ec:8e:
                    3d:aa:20:15:3a:86:95:ed:8e:fe:78:ef:5f:e8:69:
                    21:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0C:13:E6:5A:BC:FE:51:51:DF:FE:50:6D:77:C4:2B:CA:C0:91:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/6c85b21c-78ec-3c1f-8a29-cf58c94d2c4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6/0acd930f-69db-4fad-a737-b4b3b2f142c6.crl

            X509v3 Authority Key Identifier:
                keyid:12:7C:E9:07:67:6B:81:E2:77:9F:9C:62:37:5D:B7:19:5F:E3:64:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0acd930f-69db-4fad-a737-b4b3b2f142c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:3a:76:2d:5d:a1:87:82:e8:d0:19:53:11:2d:ad:37:f2:18:
         f1:b2:d0:9e:e8:b4:c8:c8:90:c5:30:9b:fa:f9:b2:2c:65:0f:
         98:8b:ad:94:94:43:fc:e7:15:57:f2:c8:9f:6b:1a:2b:a3:0d:
         e6:05:20:5c:85:8e:7e:86:b6:cc:8b:02:be:2d:e9:c5:81:cb:
         93:19:31:4b:e3:6e:cb:4c:74:7a:6f:09:f3:8a:bd:36:14:d8:
         d3:07:ff:33:26:7e:20:32:2b:b0:6c:a2:dc:dd:d6:0f:db:5a:
         3a:59:40:56:7e:42:c6:fa:99:ef:a2:5b:a1:14:31:f7:48:58:
         54:6b:a5:6a:9b:49:d4:e3:ec:db:3b:53:08:51:bf:9d:e3:c8:
         f8:33:9d:7e:ea:0f:3f:db:2e:69:96:1e:97:9b:98:d6:4b:dc:
         c7:00:65:e0:de:3c:f7:2a:02:49:57:dc:28:23:99:31:ea:3f:
         b6:9a:56:6b:ee:ba:b4:09:0d:0c:62:c4:81:f9:51:08:36:5a:
         be:fb:ca:78:b7:3e:cc:f2:76:45:52:1a:b2:68:f9:a6:5b:51:
         27:26:b9:82:59:e3:11:cb:fe:24:38:04:35:50:8d:55:ba:03:
         37:93:92:c8:6d:1f:0e:b3:00:c6:64:b6:cb:f9:bc:6f:93:47:
         49:61:e2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:32:44 2026 by rpki-client