Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/98674deb-9ae9-3698-b3b1-a3d22f06d2f5.roa
File:                     98674deb-9ae9-3698-b3b1-a3d22f06d2f5.roa (raw, json)
Hash identifier:          X1hEv3tf3GnrAI5LfcuqOfVZLPrzJFiBJtk77D4bV+E=
Subject key identifier:   A3:AD:45:C6:7F:D5:40:CF:EF:46:99:E4:4B:BC:6C:3C:E3:40:69:EF
Certificate issuer:       /CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d
Certificate serial:       010D0C9F4328584E31CF1545353C703C3E90C420
Authority key identifier: CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/98674deb-9ae9-3698-b3b1-a3d22f06d2f5.roa
Signing time:             Tue 16 Jun 2026 21:00:12 +0000
ROA not before:           Tue 16 Jun 2026 21:00:12 +0000
ROA not after:            Mon 14 Sep 2026 21:00:12 +0000
asID:                     394532
IP address blocks:        23.146.96.0/24 maxlen: 24
                          2602:fe4d::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:31:cf:15:45:35:3c:70:3c:3e:90:c4:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b1fad74-f135-4279-93d5-fe9aa818fc6d
        Validity
            Not Before: Jun 16 21:00:12 2026 GMT
            Not After : Sep 14 21:00:12 2026 GMT
        Subject: CN=a03f7052-d53f-495b-8725-3d0d310f8b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8f:c7:39:23:b5:b3:f9:bd:86:3f:42:d4:a6:
                    83:06:cd:af:17:97:c4:45:06:f3:3a:76:76:b0:da:
                    7d:b4:21:60:be:15:21:30:55:ce:30:13:63:f3:31:
                    af:b9:eb:73:4f:de:4b:e2:fb:00:0c:de:13:26:98:
                    ff:1b:d9:a4:d1:7c:8a:c6:35:6c:e6:17:b6:8f:5c:
                    d4:64:1e:b0:3a:ee:90:44:42:8f:7b:36:7e:22:0f:
                    f8:b3:31:7f:3c:26:99:c5:73:24:fe:ef:f8:1c:3a:
                    47:56:e4:ee:e9:57:79:4d:b7:83:5f:45:83:2c:d2:
                    fb:c2:49:42:c4:c1:94:59:7c:0b:07:1f:3c:eb:b5:
                    9c:87:d0:6f:b8:2e:40:dd:af:89:61:31:a7:5f:70:
                    ff:07:75:ae:20:e7:db:39:31:ee:fd:7b:95:f6:4b:
                    a2:ce:48:c8:95:4c:98:77:97:81:b1:04:2d:49:6d:
                    e2:43:cf:c9:48:f9:4a:01:41:46:c8:05:78:1d:45:
                    18:28:2c:83:b3:e9:c9:55:e5:2b:0b:e2:3d:1d:ab:
                    a0:fb:eb:23:65:0f:a4:ce:51:0e:71:a7:4b:15:01:
                    7c:91:5d:5d:ad:95:cf:34:b8:91:03:df:b5:a9:d5:
                    2c:96:31:3e:c1:26:fb:a4:24:8e:8a:14:6b:96:d4:
                    bc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AD:45:C6:7F:D5:40:CF:EF:46:99:E4:4B:BC:6C:3C:E3:40:69:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/98674deb-9ae9-3698-b3b1-a3d22f06d2f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.crl

            X509v3 Authority Key Identifier:
                keyid:CA:05:35:82:08:D5:0D:D1:73:F2:36:C9:A2:36:0D:68:F0:2D:CC:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/7b1fad74-f135-4279-93d5-fe9aa818fc6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.96.0/24
                IPv6:
                  2602:fe4d::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:fe:43:79:02:cd:75:6d:ad:0a:88:75:57:29:80:4e:2b:ae:
         24:65:f7:65:39:f3:4b:c0:31:f9:65:52:5b:1c:ac:60:c6:2f:
         2f:47:eb:03:c2:54:3e:ee:4c:a6:2e:da:3e:a8:a7:0b:cd:bc:
         2a:dc:07:7d:92:12:59:29:2c:19:61:f5:ad:0a:f3:ff:8f:81:
         9d:00:91:a9:9d:cc:7c:8c:7d:3c:4c:61:28:8f:62:62:ce:1e:
         4b:90:4f:93:ad:54:8a:a6:c7:85:93:2e:7f:2b:02:21:58:d7:
         bf:28:a7:18:de:b6:ef:cf:ec:1b:07:55:23:91:c8:c0:39:ba:
         b1:86:a7:f0:e4:df:c4:1c:cc:d5:88:4f:1e:0d:93:6d:1e:1d:
         42:b9:df:07:95:eb:0e:2c:38:90:c6:79:c9:5e:bf:4b:d0:f7:
         c2:67:a3:5f:70:60:97:d3:fb:75:83:a4:2f:81:5c:bf:c1:14:
         6d:ef:01:cb:b7:16:92:f9:31:f9:b2:5c:32:a9:b9:24:c0:31:
         14:b1:90:89:a5:f5:61:ae:f5:98:21:4a:93:55:56:fc:54:47:
         1f:f0:51:c5:9f:e7:05:4f:fb:08:8e:fd:bf:a1:c7:05:52:5b:
         ae:a5:f4:10:75:26:9c:4d:59:91:25:5f:0d:75:79:6c:da:7c:
         b5:7c:d3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 00:40:44 2026 by rpki-client