Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa
File:                     0e8a0d07-db89-35b7-89ab-5b71612a7984.roa (raw, json)
Hash identifier:          KNTaC1M0RTICLR1lsXAZ/lYXSl5983wfZd0EjaS6ho4=
Subject key identifier:   9B:85:21:06:A5:E3:52:F5:33:34:63:56:C0:63:0A:2A:00:6B:DA:E2
Certificate issuer:       /CN=1d6006cb-f538-4709-8be5-960b57450a76
Certificate serial:       010D0C9F4328584DEB15E7DA720A132354305F60
Authority key identifier: 5C:8F:06:CB:20:BB:50:44:59:D1:C7:19:B7:CD:71:27:38:DC:B5:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa
Signing time:             Fri 22 May 2026 13:00:31 +0000
ROA not before:           Fri 22 May 2026 13:00:31 +0000
ROA not after:            Thu 20 Aug 2026 13:00:31 +0000
asID:                     396422
IP address blocks:        23.151.88.0/24 maxlen: 24
                          2607:3dc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:eb:15:e7:da:72:0a:13:23:54:30:5f:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6006cb-f538-4709-8be5-960b57450a76
        Validity
            Not Before: May 22 13:00:31 2026 GMT
            Not After : Aug 20 13:00:31 2026 GMT
        Subject: CN=b6a30487-a2ba-4824-a398-0bc16d8eda30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:18:23:07:8b:8f:3d:d1:5f:2f:11:f3:8f:5f:
                    df:8a:59:33:81:f1:19:0e:bc:3d:41:ee:01:20:51:
                    e8:4a:c7:e2:b2:c4:93:81:60:27:91:63:7f:99:fd:
                    7d:92:4e:5f:95:f7:10:cd:86:9b:c6:0e:44:8d:da:
                    ab:b2:dc:6c:7a:46:da:72:22:d2:aa:41:5e:75:1f:
                    76:e3:a4:84:d1:68:4b:9e:ff:1f:f2:d4:74:d5:7d:
                    06:95:38:69:8d:fe:7c:79:b6:db:df:5f:61:11:dd:
                    e2:3c:ce:34:1b:21:56:d0:f7:fc:b8:24:78:ce:0b:
                    43:e8:f6:27:d2:f5:d1:41:90:1e:7b:d6:22:0b:c7:
                    ba:cb:84:91:21:85:3a:fa:35:d6:a1:93:54:da:6c:
                    a4:30:13:35:e0:1c:f1:c1:87:6d:be:12:24:91:0e:
                    b9:0e:cb:27:ca:cd:6d:83:93:24:d0:7d:52:1b:42:
                    fb:6f:da:f1:91:da:73:16:43:03:37:8f:59:00:53:
                    41:b0:39:a1:4d:4a:8e:50:36:a5:2b:f0:88:d7:34:
                    c5:bf:c3:16:24:08:36:0c:c9:2a:c5:4a:b6:a8:71:
                    5a:a0:95:88:01:c4:10:f0:3b:38:72:64:7f:42:34:
                    ef:4b:27:df:10:ad:7c:e5:6a:3a:89:b8:2c:b4:b5:
                    0e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:85:21:06:A5:E3:52:F5:33:34:63:56:C0:63:0A:2A:00:6B:DA:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/0e8a0d07-db89-35b7-89ab-5b71612a7984.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76/1d6006cb-f538-4709-8be5-960b57450a76.crl

            X509v3 Authority Key Identifier:
                keyid:5C:8F:06:CB:20:BB:50:44:59:D1:C7:19:B7:CD:71:27:38:DC:B5:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1d6006cb-f538-4709-8be5-960b57450a76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.88.0/24
                IPv6:
                  2607:3dc0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:2c:f9:f1:b8:0d:08:c7:1c:62:c5:f2:01:f7:bc:2d:45:cd:
         74:95:30:6f:72:ba:8a:1f:ae:dc:82:b7:64:7c:57:e9:4f:75:
         7b:b4:24:92:dd:51:f0:77:c3:8c:21:f0:1a:71:ce:da:55:80:
         1c:67:98:83:90:f1:89:6d:c1:24:62:50:4b:d6:23:31:96:50:
         dd:15:48:58:7f:df:b6:66:4a:91:91:7f:5b:33:d7:32:52:43:
         20:bd:2d:24:8a:d6:aa:82:e6:6b:16:24:92:1b:ef:e3:c0:76:
         c0:4b:b6:96:3c:76:dd:cd:a9:f4:b7:5d:55:77:aa:78:18:7b:
         86:bf:82:7b:43:a9:13:af:8e:dc:f2:57:b1:ec:a0:11:e4:9b:
         59:3e:b5:6d:7e:02:90:74:46:0a:70:4c:09:1f:66:ad:ee:31:
         1c:78:22:fa:b9:fb:8e:19:01:5c:a3:e1:54:4d:2b:26:03:3d:
         1b:36:41:12:6a:e2:58:40:1f:af:61:07:df:72:e3:ad:a5:53:
         da:47:4a:36:8a:60:69:4f:10:b4:f1:04:a0:e4:2b:d9:d9:64:
         47:9c:b4:0d:c0:0d:3e:49:fc:fe:88:e9:b9:34:ba:77:7f:a3:
         fd:c5:74:eb:83:e0:3a:ea:d8:7a:f5:1a:99:b9:b5:e2:1d:2b:
         c8:30:d6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 06:46:35 2026 by rpki-client