Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa
File:                     1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa (raw, json)
Hash identifier:          kR1lvRHRnlcbzU8XnIXWfRqh9/G3uFWil0NzvCqM5EE=
Subject key identifier:   74:60:F6:5A:FB:5F:52:A4:7B:F1:03:C5:91:89:7B:90:32:55:6E:F8
Certificate issuer:       /CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe
Certificate serial:       010D0C9F4328584E50849F528AECE0FB68897D80
Authority key identifier: DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     32526
IP address blocks:        23.160.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:9f:52:8a:ec:e0:fb:68:89:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afd44b9c-2312-4acb-b23e-40aaaafe2dfe
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=3d54668f-27df-4de2-b61e-5da322e59876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cb:74:f6:d7:de:21:b3:62:a1:21:95:4b:06:
                    5f:d0:97:a7:2b:cc:7a:2b:01:97:16:a2:21:d5:92:
                    f8:8d:3b:93:d9:15:79:15:30:22:06:e7:e0:76:74:
                    33:1b:e7:c6:14:2a:2c:b0:59:c3:1b:a6:f3:3a:e7:
                    2d:63:e0:ce:74:9a:85:44:f6:40:fd:73:a2:57:f8:
                    69:67:22:c5:8c:7b:18:94:1b:fa:f9:23:3e:bc:24:
                    d5:0c:3a:e8:d8:79:56:78:4b:50:49:2a:63:35:6c:
                    be:41:55:9e:95:78:b3:9e:e1:b1:88:98:7f:9b:cc:
                    9b:18:63:d4:6a:c4:49:63:68:88:2d:fc:6c:7b:41:
                    b7:a9:19:cd:04:9d:74:80:f1:15:dd:fa:85:be:34:
                    34:ef:dc:80:ae:19:c2:99:d3:9a:95:73:4a:65:7c:
                    7f:64:fd:2b:bb:2a:86:ab:4b:a4:e8:60:87:fb:83:
                    d4:45:d5:95:d5:ce:ff:22:fe:b0:15:86:b9:12:f7:
                    1b:14:65:3c:72:3f:fb:2e:93:d9:01:e2:4d:e5:44:
                    1d:4d:0a:8b:7a:c5:9a:e7:ab:b7:52:4e:1c:20:07:
                    15:ca:99:db:d0:6b:56:26:58:ca:5d:02:08:ca:07:
                    18:12:23:2d:0b:1c:d9:0d:85:b9:14:c9:a8:52:42:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:60:F6:5A:FB:5F:52:A4:7B:F1:03:C5:91:89:7B:90:32:55:6E:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/1664b509-5d8c-30ad-869e-e9e2bb1599ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.crl

            X509v3 Authority Key Identifier:
                keyid:DD:53:C2:D4:4C:6F:01:C2:36:0A:95:11:80:42:93:50:03:58:D3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/afd44b9c-2312-4acb-b23e-40aaaafe2dfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:10:98:4d:ed:5c:a2:7c:e3:25:07:bb:ca:5f:fb:4f:67:1e:
         25:15:18:8b:eb:86:b0:f1:73:a2:f8:13:bc:96:8f:55:76:b9:
         b1:a6:8f:33:f6:83:bc:65:fc:ab:39:e0:42:1d:00:0d:0e:06:
         c7:09:bc:86:17:58:d4:fb:d0:3f:b9:8b:06:84:c6:ad:6f:57:
         cd:67:7e:78:74:be:ac:0b:4f:c3:97:03:78:41:70:64:45:79:
         e5:8a:9c:d1:a7:14:f2:27:95:cd:1e:7d:dc:3a:dc:f4:a8:13:
         a3:cf:09:da:5c:f1:9d:dc:a8:f6:8c:fe:e6:3e:25:41:f0:d6:
         8e:fb:11:b2:66:25:3b:49:29:62:43:c8:d8:0a:e3:bc:f9:0b:
         19:76:2d:d3:75:93:50:3b:0c:f7:81:2a:21:aa:99:ab:33:f5:
         d1:36:a5:f4:57:a2:73:1d:24:9d:3a:11:70:79:fe:af:d0:f0:
         59:c9:b6:65:f0:c8:a6:23:9b:51:9a:28:c6:79:61:ae:27:67:
         e7:fc:63:78:72:a2:b6:25:ef:87:4d:fe:7d:6d:80:4c:f1:04:
         c8:bd:43:9d:45:44:d6:e4:7f:c7:27:1c:2c:5d:2d:c6:02:5f:
         4a:c3:33:e8:7f:e9:1b:b4:90:41:8f:02:59:96:5e:f7:79:1a:
         10:d3:45:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 02:16:11 2026 by rpki-client