Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/d57e7f91-6249-391c-9109-024819383866.roa
File:                     d57e7f91-6249-391c-9109-024819383866.roa (raw, json)
Hash identifier:          h6UARWzy9c3BeYA53Ip6ynfFa63266zwhYWCwFKm1d8=
Subject key identifier:   43:1E:DA:64:54:60:60:7B:CB:1D:44:40:34:77:95:6E:8F:3A:F8:AD
Certificate issuer:       /CN=5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba
Certificate serial:       010D0C9F4328584DADAADBBF5F0D142B94C12580
Authority key identifier: E7:25:80:10:AC:E9:3C:2E:71:67:98:DD:74:69:33:AC:C5:77:87:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/d57e7f91-6249-391c-9109-024819383866.roa
Signing time:             Thu 30 Apr 2026 13:00:31 +0000
ROA not before:           Thu 30 Apr 2026 13:00:31 +0000
ROA not after:            Wed 29 Jul 2026 13:00:31 +0000
asID:                     211954
IP address blocks:        23.155.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ad:aa:db:bf:5f:0d:14:2b:94:c1:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba
        Validity
            Not Before: Apr 30 13:00:31 2026 GMT
            Not After : Jul 29 13:00:31 2026 GMT
        Subject: CN=aa9b6457-8c8c-4c47-98b3-1feeb010c181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a1:59:b8:82:e7:5c:13:1c:8d:ed:e1:a0:33:
                    46:e0:a3:0f:42:3e:b8:bb:f2:cd:ae:e0:9d:58:c0:
                    02:20:1e:d7:2f:cc:ac:31:b6:88:72:bc:6a:94:f1:
                    f4:b4:30:ad:56:64:5b:87:04:57:fe:11:56:58:ad:
                    c6:5a:3e:78:28:25:d4:67:ff:e6:93:3a:2f:74:48:
                    e4:51:3f:77:bc:45:11:c5:38:c6:76:ed:7a:ee:47:
                    fe:30:11:e2:57:dc:8b:b2:c3:ad:ea:01:16:96:70:
                    4a:c7:3f:dc:f7:02:15:b3:35:93:fa:41:4a:97:74:
                    a3:49:9b:dc:e0:37:93:23:20:ab:47:8f:1a:18:41:
                    2f:58:21:16:57:77:66:dc:71:44:53:c2:3a:f3:6e:
                    71:b8:25:55:00:aa:79:0e:4b:67:1c:4a:aa:23:0d:
                    b7:58:c1:dd:a9:c4:5f:c9:2e:5f:11:60:03:a6:3c:
                    e5:73:f9:52:5f:c8:6d:4f:5c:6c:6d:ac:29:a0:fe:
                    f6:2b:64:82:b0:f7:e3:9b:f5:d0:78:ae:42:ca:40:
                    da:a5:81:32:71:a6:93:6a:e5:a2:b4:c6:0c:a1:c1:
                    84:6a:86:0e:d5:71:b9:a4:59:3e:33:d1:77:98:40:
                    1c:14:fb:5d:53:37:16:2e:3f:e3:44:d3:77:74:bf:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1E:DA:64:54:60:60:7B:CB:1D:44:40:34:77:95:6E:8F:3A:F8:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/d57e7f91-6249-391c-9109-024819383866.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.crl

            X509v3 Authority Key Identifier:
                keyid:E7:25:80:10:AC:E9:3C:2E:71:67:98:DD:74:69:33:AC:C5:77:87:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a3a87f2-b9ad-4c4f-bb88-5cc1e0e580ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:88:32:63:13:1c:85:23:6c:76:ad:a3:92:a3:68:31:98:f8:
         37:50:ce:6d:a2:9f:61:2b:95:f9:d4:25:2b:73:7b:dc:ec:3d:
         f2:b0:48:8c:a1:e1:4d:e8:10:ee:1f:51:83:1e:39:13:10:cb:
         a3:8a:0e:24:1c:3d:30:e5:49:70:e2:a8:f6:89:65:7b:9a:0d:
         a6:74:1b:e2:9c:6b:4c:32:32:e4:81:43:d2:b6:39:a0:bf:af:
         43:be:fb:39:37:1a:2c:47:7a:a2:a9:2e:ca:da:52:ee:88:74:
         a1:61:27:b7:3f:f4:af:8d:57:52:2e:7c:ef:d8:99:27:3a:09:
         7d:43:56:d1:a0:13:2d:00:e1:20:90:48:e8:33:d0:b8:7f:06:
         27:58:26:34:c5:ad:e4:97:ff:be:00:db:4f:73:6b:ec:37:bd:
         b6:40:3e:f6:70:86:8d:3f:ab:77:d1:8e:cd:43:25:6f:bb:c1:
         80:71:96:9c:90:68:55:56:d6:9c:ab:68:97:fd:d4:c4:d7:38:
         35:a2:39:39:8b:dc:e4:01:76:54:a3:73:e4:73:92:3a:da:ac:
         6c:24:dc:39:3e:30:19:93:3f:88:e4:36:2a:1e:3a:3f:0d:cf:
         10:51:98:3d:53:2b:ce:d4:2d:39:f6:17:f8:ee:12:08:d1:9c:
         90:0f:d6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 04:15:51 2026 by rpki-client