Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/41ce957e-b668-3ae7-a767-7566a25b32f3.roa
File:                     41ce957e-b668-3ae7-a767-7566a25b32f3.roa (raw, json)
Hash identifier:          cDr3i9bpvdrYShE6EsOj22ipzATjVJoap5UmNbUssME=
Subject key identifier:   7A:89:AA:01:D3:B9:48:82:92:66:7A:F4:9B:69:21:6D:8D:F7:6A:D5
Certificate issuer:       /CN=eb3e61fb-eee2-4438-a37d-23139bbc427a
Certificate serial:       010D0C9F4328584DD625B7AA904046A3BF6ED900
Authority key identifier: 45:03:34:E5:3F:EE:A8:32:0D:29:26:EA:4C:60:57:01:92:7D:46:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/41ce957e-b668-3ae7-a767-7566a25b32f3.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     400992
IP address blocks:        23.177.184.0/24 maxlen: 24
                          2602:f909::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/eb3e61fb-eee2-4438-a37d-23139bbc427a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/eb3e61fb-eee2-4438-a37d-23139bbc427a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:b7:aa:90:40:46:a3:bf:6e:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3e61fb-eee2-4438-a37d-23139bbc427a
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=ec9b0430-69b0-422c-82c2-d1ed1c766029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:26:e6:5c:bf:3b:dc:7d:17:8e:55:dd:db:ff:
                    23:8c:ad:78:fa:fa:37:a0:34:ce:2c:dc:4d:f7:8a:
                    71:7e:39:64:2d:4e:45:69:63:40:47:51:a1:e3:2d:
                    a2:a5:66:3f:02:43:56:c4:2e:c8:f6:3a:4b:5d:d6:
                    73:b8:c9:0f:27:ca:d5:c9:88:0d:b5:89:e8:06:c4:
                    54:c4:f4:43:db:14:33:0c:51:90:53:7d:2b:49:9e:
                    cc:3f:b6:e2:36:10:9f:bb:17:78:f1:31:bf:0e:bd:
                    fc:36:f5:4b:f5:67:1b:5b:72:55:56:20:d6:8e:3b:
                    f5:03:11:a8:d6:96:91:c7:eb:c3:da:ae:a9:2a:ab:
                    30:23:15:32:64:4c:9b:1d:80:d0:fe:0c:28:ca:19:
                    e7:04:89:99:08:d0:fa:6a:da:13:2b:49:6a:1f:85:
                    df:d8:ab:bc:11:fb:fa:ee:34:c4:5b:74:8d:64:f6:
                    8b:fb:33:24:c5:59:80:33:54:57:bb:14:a0:d3:83:
                    76:c2:30:68:ba:4b:6d:0a:cb:a3:b5:4c:a2:35:92:
                    5f:a9:03:56:3e:7f:f7:1a:7e:57:b3:1c:21:70:a7:
                    4d:75:3e:35:00:45:73:b1:dc:fc:e0:f2:19:ee:70:
                    34:3a:be:83:eb:1f:e1:28:5d:c4:00:f6:4b:ac:54:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:89:AA:01:D3:B9:48:82:92:66:7A:F4:9B:69:21:6D:8D:F7:6A:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/41ce957e-b668-3ae7-a767-7566a25b32f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/eb3e61fb-eee2-4438-a37d-23139bbc427a.crl

            X509v3 Authority Key Identifier:
                keyid:45:03:34:E5:3F:EE:A8:32:0D:29:26:EA:4C:60:57:01:92:7D:46:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.184.0/24
                IPv6:
                  2602:f909::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a2:cc:58:22:ea:2b:7e:20:f6:f5:57:4c:1f:bc:2b:95:d3:
         ed:d6:49:b1:f4:e8:3d:9e:96:5d:b8:4a:91:53:88:01:0e:55:
         07:9a:75:a5:35:f8:90:a6:3b:d2:78:86:a2:89:a9:ce:c8:16:
         d7:b6:22:ab:64:ff:a5:21:43:3c:4d:e1:38:74:58:e3:c8:d4:
         48:ba:c1:e0:c8:25:07:c4:1d:df:31:ed:3a:0c:d8:6f:58:c7:
         a8:30:6a:64:80:9c:0f:fd:bb:af:81:7a:d7:d8:dd:02:07:6d:
         43:e8:56:01:a4:2a:4d:73:db:54:fe:49:33:af:b6:cf:0a:a6:
         75:36:1c:1e:dc:1d:df:d4:2c:15:df:dc:5e:cd:21:89:ea:44:
         be:43:90:e4:44:f6:a8:dd:1c:63:16:73:a1:cc:d4:dd:27:64:
         59:3d:1e:3c:5d:8f:a1:ec:37:1e:62:43:af:d4:1d:f5:16:ef:
         12:cf:38:4b:29:e5:4b:43:6d:bb:e7:c9:e2:50:0b:2f:ef:c9:
         44:5c:04:e6:f6:6f:5e:c6:30:02:3e:c5:02:c1:ae:98:a1:f3:
         c8:a5:1f:ce:54:e3:8f:3d:bc:47:05:0d:ee:85:6d:d6:60:4b:
         4d:59:cd:8c:e2:73:d9:8d:56:fb:37:b0:85:1c:8a:ff:af:28:
         f6:a4:d1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:15:14 2026 by rpki-client