Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/61dbdfa1-3301-37b4-b771-25d5eccb2489.roa
File:                     61dbdfa1-3301-37b4-b771-25d5eccb2489.roa (raw, json)
Hash identifier:          pEwBEUyN2WS9rQfia07Igy3hHN9JRuXtE6z6vSOlZnw=
Subject key identifier:   FF:82:28:C6:97:51:72:C5:AE:86:EA:27:82:70:AA:82:53:90:A6:9C
Certificate issuer:       /CN=d87256b0-8122-4d03-a901-06b0556ada70
Certificate serial:       010D0C9F4328584E709F7D62C23C9926B4B36180
Authority key identifier: A9:8D:09:1A:86:55:7D:C2:FD:47:D1:21:D5:11:C3:ED:F0:6B:C0:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/61dbdfa1-3301-37b4-b771-25d5eccb2489.roa
Signing time:             Thu 09 Jul 2026 09:00:13 +0000
ROA not before:           Thu 09 Jul 2026 09:00:13 +0000
ROA not after:            Wed 07 Oct 2026 09:00:13 +0000
asID:                     152179
IP address blocks:        23.180.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/d87256b0-8122-4d03-a901-06b0556ada70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/d87256b0-8122-4d03-a901-06b0556ada70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:70:9f:7d:62:c2:3c:99:26:b4:b3:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d87256b0-8122-4d03-a901-06b0556ada70
        Validity
            Not Before: Jul  9 09:00:13 2026 GMT
            Not After : Oct  7 09:00:13 2026 GMT
        Subject: CN=2eb23564-2777-4968-8325-2755f0c66f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1e:93:2a:89:2e:a9:3f:50:66:00:94:08:7a:
                    db:1b:3f:77:2a:ce:ad:91:7b:9e:d5:16:1c:ac:81:
                    61:8a:ae:52:04:d8:e6:c6:3d:82:64:79:fd:67:17:
                    68:c8:dd:39:0e:03:4c:84:2f:65:8f:95:02:20:d7:
                    59:b9:fe:3d:61:d5:16:17:40:57:69:4f:95:75:2d:
                    5e:f5:98:c5:13:7f:63:8d:87:af:f7:dd:f5:52:ae:
                    42:b5:12:4d:ec:e2:47:83:fe:61:25:e4:be:78:b0:
                    68:11:60:04:82:53:fc:46:ed:f9:80:c9:6a:c7:c9:
                    d5:72:da:bc:b1:d1:af:56:1e:96:9d:b1:8a:5c:86:
                    83:6e:64:1f:97:d0:54:05:18:9f:fa:6a:2a:b7:ec:
                    09:2b:99:e7:4a:78:ec:bf:0b:ad:33:e7:de:d6:af:
                    c9:58:1b:9f:3e:d4:60:9b:64:2c:21:a4:18:50:72:
                    71:51:1c:93:56:b1:64:ce:d1:13:7d:16:a6:c1:58:
                    56:34:d9:85:8a:bd:d8:6b:54:5f:28:d9:9d:a8:78:
                    8f:80:69:46:21:99:3c:02:ff:47:b1:66:31:29:dc:
                    64:eb:0d:4f:b5:ad:22:5d:3c:e6:d8:59:79:3f:39:
                    fe:f4:8b:7e:8f:0c:5d:74:5d:f9:1b:75:d3:a1:f8:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:82:28:C6:97:51:72:C5:AE:86:EA:27:82:70:AA:82:53:90:A6:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/61dbdfa1-3301-37b4-b771-25d5eccb2489.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70/d87256b0-8122-4d03-a901-06b0556ada70.crl

            X509v3 Authority Key Identifier:
                keyid:A9:8D:09:1A:86:55:7D:C2:FD:47:D1:21:D5:11:C3:ED:F0:6B:C0:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d87256b0-8122-4d03-a901-06b0556ada70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:15:78:66:07:09:50:06:81:2b:36:2e:af:fc:12:50:2d:38:
         e2:fe:5d:99:c5:6d:66:f8:3f:72:9c:ed:d3:c2:8b:53:aa:e7:
         83:02:53:12:44:8d:bb:f3:0f:36:9e:4c:f9:ac:6d:04:8f:b4:
         7e:96:77:6c:63:e4:22:07:8c:32:0f:d1:9d:dd:d5:c2:84:34:
         5f:25:1b:e9:13:12:d9:b0:dc:62:d9:4a:83:15:43:6a:a8:50:
         8d:55:98:dc:67:af:3c:fe:45:ee:83:6a:98:b4:9c:07:b3:e4:
         1e:df:77:c1:19:1e:d8:3c:81:3b:6e:ab:54:8b:8e:92:a3:d3:
         22:45:70:cc:a5:f4:11:ac:57:c9:cd:8a:2c:95:fc:aa:28:78:
         50:6b:ec:63:f7:62:66:0b:0e:c1:a9:f0:69:7d:b2:0d:c8:22:
         b1:39:0f:4d:ef:b2:1e:f7:58:76:3a:7c:be:d0:19:7f:53:d8:
         9f:b8:3e:10:6d:08:37:47:e3:30:78:52:31:a4:94:21:3b:1c:
         71:5a:cc:26:10:3c:08:4d:d6:e2:31:b4:ba:3a:17:d4:47:de:
         b2:90:3f:2e:cb:58:22:55:87:e1:95:61:69:8b:50:dc:5e:08:
         da:b2:d8:f9:e0:d3:38:8a:6a:dc:1e:49:a2:8c:3c:42:15:c1:
         e0:f0:3b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:14:44 2026 by rpki-client