Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa
File:                     99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa (raw, json)
Hash identifier:          71R2ww8UlsndjbjKzKghIyJjQRNHDGTN05qfv+seSyg=
Subject key identifier:   F4:6E:83:DE:F4:18:35:FB:BA:36:B7:24:D5:6F:29:A4:42:18:79:DD
Certificate issuer:       /CN=eff73345-b771-45fd-be81-1f41a7f777ec
Certificate serial:       010D0C9F4328584E577F46E3E1C67730FDDFFD80
Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa
Signing time:             Tue 30 Jun 2026 09:00:12 +0000
ROA not before:           Tue 30 Jun 2026 09:00:12 +0000
ROA not after:            Mon 28 Sep 2026 09:00:12 +0000
asID:                     400967
IP address blocks:        23.175.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:57:7f:46:e3:e1:c6:77:30:fd:df:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec
        Validity
            Not Before: Jun 30 09:00:12 2026 GMT
            Not After : Sep 28 09:00:12 2026 GMT
        Subject: CN=20d74805-d2ce-4f3b-a7c0-393e09736127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1f:81:6f:87:c6:31:e2:70:48:e5:13:4e:c7:
                    e7:0e:39:44:c7:47:0a:33:a2:17:36:b8:0d:b0:1b:
                    54:fc:33:e2:b5:59:b9:9b:bf:03:a9:a6:16:09:ca:
                    b9:f0:62:25:ba:6b:8f:db:6b:d2:ee:9a:5c:53:86:
                    fd:b7:47:eb:3c:37:5f:a6:34:c0:b9:c8:ea:ea:f9:
                    ec:55:cd:f2:c8:6a:bb:9f:6d:cf:b8:3e:8b:d1:46:
                    f9:a9:c2:ab:df:76:07:65:1d:ba:11:c4:66:59:5c:
                    9f:cb:49:8d:0a:e7:f8:26:6f:8b:20:e9:ee:3e:7f:
                    bf:1f:0c:80:4b:2d:7d:8d:31:f4:1e:4e:97:4e:01:
                    bb:43:10:75:cf:1f:0d:84:16:79:f7:28:2c:6a:37:
                    44:9d:21:04:93:d0:2a:dc:ad:52:56:2c:a3:7d:da:
                    29:7a:36:55:01:0e:f9:c8:68:30:6f:f1:be:ef:b4:
                    ff:c6:2a:8c:62:14:08:0c:d7:24:0a:52:84:98:56:
                    51:4b:de:7e:b2:fa:f0:df:3a:4d:8b:6b:86:8d:f2:
                    32:89:92:64:44:cc:5e:4d:0d:a1:07:39:61:83:66:
                    07:b8:de:06:f7:85:8a:5b:7f:12:47:0a:fb:be:03:
                    84:91:c7:08:75:8b:b4:4f:ee:a3:0c:a6:74:74:4c:
                    d4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:6E:83:DE:F4:18:35:FB:BA:36:B7:24:D5:6F:29:A4:42:18:79:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/99e92a98-6ceb-3d2d-8dc5-7376844cf267.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl

            X509v3 Authority Key Identifier:
                keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:e9:ea:90:e3:14:44:8c:73:14:a2:1f:55:41:aa:a1:de:1a:
         cd:a6:20:6a:d9:4c:22:52:fc:6e:42:c0:2c:72:76:52:47:89:
         c2:6a:1f:9d:80:44:f5:08:5a:21:bb:a3:1f:20:b6:94:3a:5e:
         47:81:ec:8e:81:30:6c:55:24:cf:19:d7:16:d3:01:db:39:58:
         fa:a8:91:63:b3:8f:a3:e1:42:5c:91:8e:28:70:d4:49:23:cb:
         95:94:75:0f:85:dc:d1:af:9b:c3:f0:d5:43:cd:d8:30:60:34:
         3d:d8:22:d7:80:d3:57:11:0c:21:9c:13:91:9a:a1:52:1f:ad:
         f1:ef:b0:62:98:90:45:f4:5b:bf:1a:dd:5e:4d:62:1a:9a:58:
         5f:2c:72:d8:7e:a0:c7:be:18:e5:1d:30:fb:27:99:d8:d1:66:
         5c:78:0c:e8:44:65:a9:5a:73:28:e5:e0:39:57:ab:7b:10:0e:
         21:42:67:dc:89:4e:8f:b4:b0:d3:e3:c9:2b:a3:d5:5b:b2:39:
         f3:d5:3a:a2:b5:66:dd:7b:a7:19:76:03:ca:37:fb:96:db:22:
         f4:7c:0e:7b:fa:1b:e3:92:c6:0e:72:44:f6:11:6a:4a:f6:b8:
         42:6b:ac:62:3a:a2:fd:88:4c:80:6e:df:5a:49:b1:86:f8:4f:
         41:f9:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:35:44 2026 by rpki-client