Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/4b41e20f-4681-3b72-b8c6-62058d29fffa.roa
File:                     4b41e20f-4681-3b72-b8c6-62058d29fffa.roa (raw, json)
Hash identifier:          drL16Lk1+on7Q/n+ii+R1LaZ4TdLSlCRXpoalZ4tPHU=
Subject key identifier:   10:9C:AF:33:F2:E6:58:56:4E:5C:34:19:83:EB:FC:E7:34:5E:C6:90
Certificate issuer:       /CN=d30c475d-8944-47ed-ba1d-63ff537595ba
Certificate serial:       010D0C9F4328584DD35B0F455897328AC5CF4980
Authority key identifier: 4A:44:7A:35:AC:B8:5B:C6:35:98:E0:D3:A7:A1:14:C8:1A:DA:08:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/4b41e20f-4681-3b72-b8c6-62058d29fffa.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     32872
IP address blocks:        23.157.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/d30c475d-8944-47ed-ba1d-63ff537595ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/d30c475d-8944-47ed-ba1d-63ff537595ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:0f:45:58:97:32:8a:c5:cf:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d30c475d-8944-47ed-ba1d-63ff537595ba
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=629cbcd0-90c2-4865-b00a-104e475196f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c8:74:d2:e6:f4:26:78:c2:15:8b:78:f2:cd:
                    16:7a:01:44:98:cf:85:90:03:cf:86:d7:1b:62:5e:
                    f1:5b:8f:46:00:44:16:85:4b:c8:09:86:39:29:30:
                    c6:fd:dc:a6:c8:c5:4c:6b:1d:ad:af:ad:dc:70:e3:
                    46:a1:14:34:7f:32:81:77:f7:f7:33:c1:31:5c:e9:
                    48:48:6b:7f:ea:58:04:9f:98:8e:b5:fc:98:22:1a:
                    89:13:a8:29:35:ab:02:eb:7b:e8:3a:b3:e9:b9:d0:
                    08:36:42:1e:00:ed:f3:f7:5f:d5:37:77:5d:01:f3:
                    2f:a9:77:24:0b:13:71:56:2f:4a:fb:0f:d8:89:bd:
                    48:2b:cc:50:1a:2f:03:ca:d4:10:bf:5f:f6:f9:fe:
                    be:22:4b:2d:cd:21:ef:1c:bf:ef:26:fe:c7:92:97:
                    28:2a:cb:61:cb:e5:68:4c:1e:3b:d4:de:0c:34:77:
                    32:c2:ec:ba:d3:59:35:24:6b:58:1f:d1:2d:80:e5:
                    85:76:ff:fa:96:64:c3:a6:77:c4:6a:b7:d7:a9:f5:
                    03:db:f5:55:87:c0:63:e8:32:c7:d5:22:3c:54:64:
                    e8:53:ef:3c:53:ec:bb:3b:78:6a:24:49:35:9a:e5:
                    27:a2:19:3a:24:28:f4:fc:0a:bb:de:6c:70:07:08:
                    18:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9C:AF:33:F2:E6:58:56:4E:5C:34:19:83:EB:FC:E7:34:5E:C6:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/4b41e20f-4681-3b72-b8c6-62058d29fffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba/d30c475d-8944-47ed-ba1d-63ff537595ba.crl

            X509v3 Authority Key Identifier:
                keyid:4A:44:7A:35:AC:B8:5B:C6:35:98:E0:D3:A7:A1:14:C8:1A:DA:08:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d30c475d-8944-47ed-ba1d-63ff537595ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.157.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:8c:c8:d4:d7:3d:a2:45:8b:4a:e0:e1:d4:4e:bb:78:a0:54:
         ca:1c:2f:6a:33:18:87:0b:a0:8e:3f:07:cf:3a:5b:67:69:e6:
         10:a2:51:7d:70:d2:80:2b:fb:3c:e3:e2:45:35:49:62:06:f3:
         4e:8c:ec:f1:e2:23:e8:42:43:b9:35:c8:f1:cf:a9:ab:ed:ab:
         90:98:b9:79:8a:58:27:74:e8:a6:fa:50:b2:b5:bd:9f:24:c7:
         98:89:90:b4:0d:fd:74:5e:95:24:ef:b0:65:f9:e0:39:6d:a0:
         1a:d7:7b:d6:2a:17:8a:da:db:4a:b3:b5:b2:2f:00:b1:cd:7f:
         cc:3f:02:c2:85:1e:dc:b0:f5:4d:43:c2:13:96:91:e0:9f:61:
         80:22:ea:b4:77:62:83:b2:74:a5:82:d6:0d:9d:92:60:4f:cd:
         8b:eb:88:79:c9:25:94:06:2f:ad:e4:1c:49:6e:0e:2c:bc:70:
         75:ce:64:e7:0e:32:3e:11:ea:71:91:98:6e:1c:ae:ca:37:90:
         13:2e:fd:e7:9e:27:ea:73:8a:4c:ee:86:d0:4f:fa:72:68:cd:
         a6:c5:97:75:04:bf:5f:d5:82:57:41:a9:b1:07:87:98:e1:5d:
         39:29:bc:35:b9:64:5a:a8:cb:da:ba:4f:7b:64:49:b7:e9:ed:
         fc:7e:12:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 18:35:03 2026 by rpki-client