Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/16442d32-5a66-39ea-bad5-cc80a076028d.roa
File:                     16442d32-5a66-39ea-bad5-cc80a076028d.roa (raw, json)
Hash identifier:          0i80b0VGtd7mPhKY6SxGE+n3ZmbZf/+fLseAU1UyJYc=
Subject key identifier:   1E:EA:3A:B4:14:19:B8:D9:7B:A1:27:C2:C4:68:0B:0E:4F:0D:4F:6B
Certificate issuer:       /CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
Certificate serial:       010D0C9F4328584E3E5F56523A29C6611124A890
Authority key identifier: 95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/16442d32-5a66-39ea-bad5-cc80a076028d.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     396073
IP address blocks:        23.173.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:56:52:3a:29:c6:61:11:24:a8:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=598cc685-5c0c-40a1-86ed-2d4998f5d3ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ce:ee:84:ad:99:e3:4c:99:0c:b8:db:19:f4:
                    2f:7c:fb:c9:8f:fa:5c:21:50:fa:d9:06:5e:f1:54:
                    d2:b1:a7:d7:db:05:6d:46:0d:dd:f9:2c:e8:3e:15:
                    99:d4:24:8c:13:d2:18:85:c5:44:3f:3c:37:e1:b9:
                    a1:c7:7c:fa:da:40:41:92:ea:2e:52:0a:15:08:3a:
                    de:cc:fe:d1:cb:96:f4:27:08:74:16:f5:05:80:b7:
                    e6:cd:d1:e7:e4:19:80:22:32:00:34:df:25:ac:57:
                    30:12:80:66:6e:4b:8f:cb:ca:1b:fa:0e:62:9d:57:
                    24:2f:3c:32:21:83:e2:18:25:ba:eb:a7:42:07:0a:
                    1d:c7:bf:1b:24:6d:0a:b9:b0:8f:a9:74:66:4f:41:
                    b0:9a:74:a2:eb:c9:51:2a:10:60:18:c0:93:18:a0:
                    4a:e4:3a:43:5c:b0:77:4a:6a:b6:4a:b7:f6:12:40:
                    32:d6:a3:36:c0:3c:14:ac:78:27:dd:13:25:fd:d4:
                    38:e1:a5:b2:e5:de:46:40:e5:b0:50:2b:21:7d:08:
                    a7:9c:d6:d3:79:41:8b:d9:04:08:86:ba:6d:58:0e:
                    15:ea:c2:87:14:4b:78:3b:03:56:f5:88:e0:15:1f:
                    e7:70:8c:18:c9:8b:53:32:6c:99:ce:5f:96:42:32:
                    24:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EA:3A:B4:14:19:B8:D9:7B:A1:27:C2:C4:68:0B:0E:4F:0D:4F:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/16442d32-5a66-39ea-bad5-cc80a076028d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.crl

            X509v3 Authority Key Identifier:
                keyid:95:DA:CF:F6:CE:78:AB:08:69:D7:2F:9B:E7:81:E0:0F:40:8D:96:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0f510b1b-6a0f-46f9-9ab8-f7fe63fcba9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:58:b0:66:e4:38:06:02:7d:98:6e:b0:03:5e:13:f0:99:f6:
         49:fb:b1:cc:c1:ba:88:3f:17:70:33:c8:bb:b5:07:4a:4e:b5:
         12:2a:ff:f1:d9:a0:44:ef:c6:8e:79:de:3d:4f:63:60:51:93:
         17:74:01:38:8d:30:45:e6:3d:43:0a:50:d0:30:b7:b9:59:6c:
         15:aa:5e:f3:0e:11:e3:f6:55:53:d6:ca:96:cd:b8:c5:e0:85:
         22:f9:85:e8:25:91:79:bf:f4:9a:c7:85:1a:17:7a:4d:36:cb:
         e2:96:09:d8:20:2d:00:70:ff:c4:e4:53:d8:a0:bf:c3:1d:37:
         d3:a3:0e:0f:1d:dc:f1:b9:e5:5e:f3:62:32:2a:1a:8b:81:8d:
         7e:ef:e9:11:6b:28:38:4f:a8:7b:fd:02:d9:f9:94:9c:38:16:
         4f:ec:50:96:2d:e0:4e:a8:a5:75:32:95:f5:8c:1f:6c:aa:f6:
         2a:f7:87:ea:19:82:8a:75:10:9b:01:91:5d:82:38:bf:a6:fa:
         15:b4:1e:b5:31:d8:a4:cc:c3:55:b3:7d:98:d4:91:58:2c:fb:
         2d:c0:11:c4:60:9b:95:63:f7:e1:94:38:40:26:cd:99:a6:2f:
         c6:cc:92:58:46:ca:80:a5:17:98:ce:58:16:36:e7:39:37:8d:
         bc:d1:0f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:39:47 2026 by rpki-client