Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c0c7fad8-e585-42ec-b88c-9000db6c441e/7d7567bd-aacc-33ef-af88-2099e4379ea8.roa
File:                     7d7567bd-aacc-33ef-af88-2099e4379ea8.roa (raw, json)
Hash identifier:          G8TOz6p2rDWKmVzniPyh7XGAnJ1h8B/ifGuQyGIbDBQ=
Subject key identifier:   14:8F:EB:2D:A3:93:F3:2E:CF:4D:E0:E2:4B:07:72:87:81:C4:FC:CA
Certificate issuer:       /CN=c0c7fad8-e585-42ec-b88c-9000db6c441e
Certificate serial:       010D0C9F4328584E885A5FC7664CC74435438200
Authority key identifier: 6F:9C:23:44:BF:4B:7E:8A:18:5A:CC:08:11:71:0C:F2:8B:2B:E4:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c0c7fad8-e585-42ec-b88c-9000db6c441e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c0c7fad8-e585-42ec-b88c-9000db6c441e/7d7567bd-aacc-33ef-af88-2099e4379ea8.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     152179
IP address blocks:        23.153.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c0c7fad8-e585-42ec-b88c-9000db6c441e/c0c7fad8-e585-42ec-b88c-9000db6c441e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c0c7fad8-e585-42ec-b88c-9000db6c441e/c0c7fad8-e585-42ec-b88c-9000db6c441e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c0c7fad8-e585-42ec-b88c-9000db6c441e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:5f:c7:66:4c:c7:44:35:43:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0c7fad8-e585-42ec-b88c-9000db6c441e
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=05875a27-2f08-40f3-8a2e-8c8fedbe95cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:f6:d5:5e:98:44:11:a4:ff:52:ed:53:3a:
                    b1:3b:08:e1:3a:89:5e:ac:dc:2a:b6:89:a8:92:21:
                    b0:bf:1a:b8:4c:ce:f5:42:0b:3e:74:58:06:de:22:
                    a5:21:d9:cd:9f:12:cc:17:11:98:df:2f:62:3f:fc:
                    62:7a:3b:02:40:a8:cc:4e:ce:60:ea:b6:d1:a5:17:
                    f4:ae:2d:f4:7b:ea:5d:39:fb:40:e6:5d:40:51:52:
                    59:55:76:07:bb:82:ae:71:0e:c4:7e:54:ac:32:bf:
                    b1:de:70:a7:42:5c:da:6e:fa:a7:82:41:aa:29:01:
                    57:84:45:55:b3:77:a6:eb:4b:d8:45:93:57:46:93:
                    a5:f9:ec:e0:5b:ff:0d:d0:40:a9:42:9b:b5:48:6c:
                    03:79:89:99:32:98:de:0f:79:8b:30:c0:77:5c:a1:
                    58:c5:44:c5:b8:3a:52:8f:95:a2:c0:9e:5a:2d:77:
                    f7:d3:bf:e1:f2:95:20:9d:3b:80:2c:9e:cf:2a:06:
                    02:ca:0c:fe:5e:10:ac:e8:a4:90:36:67:e8:27:ed:
                    44:7b:b1:fd:34:6f:46:63:85:93:8b:b9:b5:bf:70:
                    69:08:88:52:1b:61:9b:1c:e0:36:9c:77:2b:d5:89:
                    79:06:01:d9:be:c5:f8:a2:20:0d:fb:50:d8:81:16:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8F:EB:2D:A3:93:F3:2E:CF:4D:E0:E2:4B:07:72:87:81:C4:FC:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c0c7fad8-e585-42ec-b88c-9000db6c441e/7d7567bd-aacc-33ef-af88-2099e4379ea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c0c7fad8-e585-42ec-b88c-9000db6c441e/c0c7fad8-e585-42ec-b88c-9000db6c441e.crl

            X509v3 Authority Key Identifier:
                keyid:6F:9C:23:44:BF:4B:7E:8A:18:5A:CC:08:11:71:0C:F2:8B:2B:E4:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c0c7fad8-e585-42ec-b88c-9000db6c441e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:4c:8f:a0:3a:0b:cc:3d:27:0c:04:ac:9b:f6:37:48:37:57:
         6b:a7:8c:94:9b:be:db:5c:e0:b4:92:5d:c6:24:04:1b:97:ff:
         8a:f3:7a:ee:7a:cb:36:0d:78:a3:4a:6a:53:b3:59:e5:1b:3c:
         2b:94:83:cf:a8:05:4d:3f:0f:47:ee:b5:4a:c7:28:f3:09:38:
         0b:7a:d9:ae:f6:fb:ff:28:bc:26:64:77:d3:a1:6d:fa:2c:94:
         3f:aa:f9:4d:e0:e4:ac:d7:bb:00:b5:39:c0:88:fa:7f:e5:26:
         ce:8e:9c:f6:1a:86:f8:66:fd:cc:44:06:17:c3:3f:e8:e6:af:
         ee:e8:f4:a4:e1:6d:5c:91:8e:89:34:31:40:9e:47:0f:21:61:
         f3:9c:c0:23:34:61:48:cf:14:cf:3d:ec:09:df:74:00:d1:b6:
         fb:95:d0:1e:e9:d1:db:77:09:ef:c0:74:da:7b:b7:ef:17:ae:
         fe:fc:23:ef:75:5c:33:8a:f4:53:a7:35:8e:8d:64:c7:d5:2f:
         68:c8:c6:39:86:48:88:76:09:92:7b:ea:06:37:b4:2a:17:75:
         fa:60:ac:2d:d8:cf:75:77:c0:34:d5:cb:bc:05:17:7e:59:7d:
         2c:27:61:af:56:7f:1e:be:94:d2:dd:a9:6d:08:39:b9:31:9e:
         c6:5e:e0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:29:06 2026 by rpki-client