Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04/37198e11-c5d4-34ea-93b0-bfcba0b154b5.roa
File:                     37198e11-c5d4-34ea-93b0-bfcba0b154b5.roa (raw, json)
Hash identifier:          akbrNQ1zik83UVmRp3hiVDfaSGNxFNr80hfEI3bddY4=
Subject key identifier:   CA:66:CF:F9:98:39:54:FF:5D:A0:A6:A5:BB:87:05:EB:9E:74:C7:05
Certificate issuer:       /CN=9352489f-1208-4760-a292-4b8a2bda8e04
Certificate serial:       010D0C9F4328584DD67D00B60422F8D11ACC3B80
Authority key identifier: 34:EE:C5:D6:C3:C7:59:DD:66:39:A1:1F:32:0C:83:3B:60:58:5C:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04/37198e11-c5d4-34ea-93b0-bfcba0b154b5.roa
Signing time:             Fri 15 May 2026 03:56:26 +0000
ROA not before:           Fri 15 May 2026 03:56:26 +0000
ROA not after:            Thu 13 Aug 2026 03:56:26 +0000
asID:                     400684
IP address blocks:        23.130.244.0/24 maxlen: 24
                          208.75.96.0/21 maxlen: 24
                          2605:5ec0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04/9352489f-1208-4760-a292-4b8a2bda8e04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04/9352489f-1208-4760-a292-4b8a2bda8e04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:7d:00:b6:04:22:f8:d1:1a:cc:3b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9352489f-1208-4760-a292-4b8a2bda8e04
        Validity
            Not Before: May 15 03:56:26 2026 GMT
            Not After : Aug 13 03:56:26 2026 GMT
        Subject: CN=02435c69-241c-4d45-b6dd-b3e2311df808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:64:3a:4d:31:02:9a:59:fb:cd:85:d2:2b:74:
                    3b:37:0c:65:26:ec:2f:0d:98:75:c7:fd:35:be:5c:
                    14:82:8b:7a:ad:c6:cb:be:46:c6:b8:f5:4f:e4:51:
                    54:9c:9b:2a:5c:44:b4:58:c9:90:07:7a:9f:f7:38:
                    83:d9:13:dd:3c:82:81:61:5e:62:4e:21:53:fe:28:
                    cd:49:3d:90:0b:84:1f:36:cf:43:ad:8f:46:bc:21:
                    cd:6d:83:f7:0c:8c:3c:4b:0d:0b:ce:91:dd:63:94:
                    82:95:2b:61:f0:34:6d:cb:6d:53:c5:6a:e6:ed:a1:
                    01:7b:73:d3:59:a7:30:17:81:65:53:e9:43:84:69:
                    32:25:b0:73:57:b0:25:6a:bb:a1:16:11:1b:7d:4c:
                    e9:83:b8:02:4a:96:38:c0:91:b9:b8:98:df:8f:d8:
                    3c:36:98:e7:ba:e7:da:74:2a:93:d3:e9:d1:5d:fd:
                    4a:05:62:0b:01:56:88:ac:43:bc:3d:bb:41:0f:77:
                    48:4b:59:a2:d4:a2:fd:65:de:7d:b2:61:26:e9:9c:
                    a6:ef:89:75:81:fc:74:25:56:80:b1:69:d8:80:8b:
                    0e:a1:7e:d4:e6:8c:3e:b0:e4:5a:3e:0f:0a:d6:7c:
                    11:3c:56:61:68:76:01:d5:ab:8f:96:d0:25:40:26:
                    c0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:66:CF:F9:98:39:54:FF:5D:A0:A6:A5:BB:87:05:EB:9E:74:C7:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04/37198e11-c5d4-34ea-93b0-bfcba0b154b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04/9352489f-1208-4760-a292-4b8a2bda8e04.crl

            X509v3 Authority Key Identifier:
                keyid:34:EE:C5:D6:C3:C7:59:DD:66:39:A1:1F:32:0C:83:3B:60:58:5C:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9352489f-1208-4760-a292-4b8a2bda8e04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.244.0/24
                  208.75.96.0/21
                IPv6:
                  2605:5ec0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:5c:c5:28:6d:3d:e5:04:45:29:91:ca:fb:22:49:29:10:b7:
         e8:a8:13:12:3e:64:58:ce:fa:bc:4c:d5:f5:b4:68:58:51:d0:
         0d:a5:64:92:07:37:6b:78:fa:36:a3:90:72:1f:7b:c9:70:ae:
         dd:79:a5:13:69:3b:e3:c5:18:9c:59:8e:a1:61:37:37:21:57:
         54:69:5b:63:9f:33:44:9e:00:de:58:1a:1b:d7:21:35:f8:42:
         33:55:47:9a:cc:b4:27:77:72:e7:00:c0:74:1f:d6:66:4d:81:
         a1:81:ae:cb:97:3a:27:d8:44:ce:43:21:d0:77:7d:fe:a6:b0:
         7f:ec:d8:3e:90:f1:f1:7d:21:e1:46:16:48:35:58:ec:76:c2:
         87:1e:5b:98:f3:45:b0:5d:86:08:5d:34:0d:21:12:3f:97:b7:
         15:bc:7c:e2:c2:90:7f:dd:f9:17:31:c8:cd:94:25:c2:70:d4:
         cb:d4:d7:b7:d3:5c:95:b8:a2:62:0b:7a:98:11:82:c8:7f:d9:
         d8:65:aa:79:50:63:c6:72:ca:c7:38:7c:ab:3e:85:7a:87:ca:
         a1:b6:63:42:88:5b:6d:ce:42:09:6a:cd:1f:c9:38:2c:4c:14:
         59:8d:0d:11:81:81:af:51:ee:ac:8c:ce:45:08:34:05:57:1d:
         bb:2d:d0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:04:07 2026 by rpki-client