Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/326ebc0d-5ff6-3488-aae7-ad81daff4aff.roa
File:                     326ebc0d-5ff6-3488-aae7-ad81daff4aff.roa (raw, json)
Hash identifier:          av0+j4i7AWWhiJ8AocbkGBD0LYk9ctu3nxxbpmR5L4s=
Subject key identifier:   37:1B:24:33:51:EA:31:49:F9:AF:DE:FE:89:DF:19:A9:7F:5D:B4:54
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D237A66D03F363B2B177AC980
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/326ebc0d-5ff6-3488-aae7-ad81daff4aff.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        104.145.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 22 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:66:d0:3f:36:3b:2b:17:7a:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=9b7f6304-246c-4787-9bdb-d33e49cdcfa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e6:13:c3:72:35:45:67:7d:66:29:e7:bb:1c:
                    06:9a:c0:c5:a2:c0:3b:57:4a:f8:b0:92:f2:d4:3c:
                    bd:4f:21:2a:7a:e0:46:5e:2f:c2:2f:85:49:47:49:
                    64:1e:00:fa:5e:0b:ab:b7:ad:33:1e:4a:a1:9a:82:
                    23:ab:bd:5f:f9:a2:ba:d2:a2:4c:6a:58:d0:06:ce:
                    46:7e:cf:59:e8:cf:a7:12:32:6b:8f:ae:81:a0:32:
                    b5:30:aa:ad:63:2f:f0:78:79:f9:cc:dd:7a:05:ec:
                    ac:3b:2d:e3:59:31:46:6e:2c:6d:aa:aa:72:72:f4:
                    14:8d:ad:d1:31:bf:a7:35:1c:50:51:42:8e:dd:cb:
                    e0:11:49:3d:f5:57:46:ac:cf:37:4f:9d:fb:d9:83:
                    df:df:9e:2e:70:b0:ba:92:a1:2c:f6:3d:6d:ab:67:
                    d8:5f:cc:62:98:25:30:3b:d9:99:5d:7a:34:ad:a5:
                    9c:b7:a8:98:39:0b:d3:da:f8:fa:27:87:cf:eb:c1:
                    8d:0e:a3:e7:c8:8d:12:28:d9:c6:c2:eb:56:70:ea:
                    f4:f1:01:8b:8d:da:3b:72:5f:92:96:a4:11:c4:49:
                    f4:6e:54:e2:a4:34:f7:8e:1b:82:e0:6a:1a:37:27:
                    37:29:7a:63:5a:eb:f0:ae:15:7a:e3:2e:96:b0:82:
                    4e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:1B:24:33:51:EA:31:49:F9:AF:DE:FE:89:DF:19:A9:7F:5D:B4:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/326ebc0d-5ff6-3488-aae7-ad81daff4aff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:4f:a4:07:9d:39:11:6a:a5:a3:be:fb:3a:67:52:60:4b:54:
         35:b2:c3:ae:6c:fa:08:40:40:d4:3d:72:08:69:b5:90:0d:d9:
         f2:d3:a5:14:01:f3:dd:25:9e:3a:b9:f8:c9:0a:1a:ac:fc:3e:
         04:a7:db:e7:8c:df:a5:ff:90:76:11:34:4a:e4:80:95:04:78:
         c3:87:5c:5f:f9:8a:6d:81:2b:84:6e:03:dc:65:31:69:03:a0:
         66:2c:58:91:fa:7b:8c:88:d9:d5:56:40:55:14:a8:2f:dc:02:
         3f:a6:6f:44:eb:2e:b3:2e:0b:f1:0a:4c:35:df:06:8f:f1:1a:
         d0:0f:f4:9c:58:2b:40:bf:05:11:90:04:39:cb:33:93:d6:70:
         99:01:04:88:bf:b6:a2:67:f5:af:ab:7d:9c:1c:74:cc:bb:58:
         cb:f3:68:65:49:79:83:54:9d:cf:6d:e5:11:a2:a3:d1:7c:73:
         1c:d6:96:2d:10:32:36:a5:70:22:e1:98:7e:3b:55:af:8c:56:
         3d:26:ba:c4:6a:f7:56:94:bd:30:bc:f5:0b:7b:60:c3:50:e5:
         dc:6a:ae:e4:2d:41:09:74:a4:16:95:e1:a5:b8:4b:b6:8c:14:
         92:a0:0a:0f:c8:d2:a2:6c:d5:3b:d1:45:25:4d:df:7e:36:2c:
         af:ff:bb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:54:39 2026 by rpki-client