Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/0745313a-11f6-3abb-a87b-e8f665c76567.roa
File:                     0745313a-11f6-3abb-a87b-e8f665c76567.roa (raw, json)
Hash identifier:          i6DSbCP5FqrM2dPMx3yNyBxRePbD9enhrHjJr5MvNyY=
Subject key identifier:   8C:82:E6:E8:8A:C6:75:68:C2:01:E4:0F:9B:C3:31:03:F8:DE:11:48
Certificate issuer:       /CN=5204fe74-822a-4ff7-8d74-0c02c7243bd9
Certificate serial:       010D0C9F4328584D8AC5463FEE4F559560F93580
Authority key identifier: 49:20:D0:2D:19:C8:02:93:27:68:D6:01:30:78:99:AE:F5:45:71:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/0745313a-11f6-3abb-a87b-e8f665c76567.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     1027
IP address blocks:        23.142.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/5204fe74-822a-4ff7-8d74-0c02c7243bd9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/5204fe74-822a-4ff7-8d74-0c02c7243bd9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Apr 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:46:3f:ee:4f:55:95:60:f9:35:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5204fe74-822a-4ff7-8d74-0c02c7243bd9
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=ab4e68ae-3e23-4a1c-aa15-dea078c6426b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b4:74:70:43:2e:dd:e7:c1:e4:8e:05:cc:04:
                    52:b6:ee:ff:c5:f4:d4:a9:72:84:b8:cf:ec:2f:03:
                    bd:2f:eb:87:2e:b6:f1:30:64:7c:b2:b1:c1:7d:3b:
                    3a:42:ad:ae:0e:ee:4d:00:a1:10:3b:86:87:1c:19:
                    0f:1d:45:59:65:96:af:a7:52:43:a2:57:49:a9:69:
                    40:ad:ae:e0:c3:27:d6:42:88:39:db:3f:b6:fd:be:
                    89:1f:d4:3d:24:20:50:99:b8:9c:be:d3:ee:5e:3a:
                    d1:9f:ad:ff:fe:b2:ce:f0:66:92:23:15:e4:2b:2c:
                    05:98:83:69:a4:c5:27:c3:e6:f6:d6:ce:4f:09:f1:
                    39:09:fd:fc:18:2e:09:55:60:38:dd:ce:aa:8b:6e:
                    ee:d7:aa:12:11:a7:ec:99:7c:87:c5:94:c2:a2:b2:
                    59:25:4b:d6:8d:2b:34:d0:d7:ec:18:12:09:14:0c:
                    f0:5d:2e:01:5f:41:90:ee:fb:ae:aa:d4:5a:aa:19:
                    ad:03:67:76:2f:59:26:eb:75:b1:bd:db:2f:ae:ed:
                    d0:5d:d7:b1:5d:c3:ed:1d:61:66:63:ba:10:5d:5a:
                    e6:5e:ef:fe:94:cf:f0:7e:c7:32:dc:fa:19:13:c1:
                    10:87:8d:86:37:b2:96:70:f7:d7:b8:3e:ea:1d:42:
                    02:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:82:E6:E8:8A:C6:75:68:C2:01:E4:0F:9B:C3:31:03:F8:DE:11:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/0745313a-11f6-3abb-a87b-e8f665c76567.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9/5204fe74-822a-4ff7-8d74-0c02c7243bd9.crl

            X509v3 Authority Key Identifier:
                keyid:49:20:D0:2D:19:C8:02:93:27:68:D6:01:30:78:99:AE:F5:45:71:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5204fe74-822a-4ff7-8d74-0c02c7243bd9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:15:3f:f9:d9:e9:3a:d8:94:e1:00:39:00:b4:46:5f:de:82:
         70:13:16:a6:e2:58:22:0b:46:ba:6c:07:06:6c:d5:ff:aa:7b:
         a7:f2:6c:6b:be:b7:88:41:e1:1e:3c:80:02:c3:67:1a:e3:42:
         0b:f4:4e:bb:31:e3:9e:2d:3d:2f:d1:7d:b0:c8:aa:11:e5:34:
         dd:d0:24:56:ca:25:dd:ac:60:cb:05:21:fc:65:fa:e6:35:ef:
         50:8d:44:1d:3f:5f:85:65:2b:0a:58:9f:0c:93:cc:f8:fe:80:
         cd:06:87:09:1f:90:16:62:a7:3c:b3:37:22:b0:86:09:eb:b9:
         14:9f:d1:0e:67:89:f0:9d:73:ad:e1:34:6e:9a:72:8f:63:83:
         8f:80:77:3d:a3:ee:e9:b1:74:d8:8b:2f:02:60:16:85:26:8d:
         84:94:58:65:a7:ba:a5:eb:27:ee:b3:83:36:3c:07:7a:88:f3:
         c1:dc:40:5e:38:6e:0e:48:c8:be:3a:14:7e:6b:bf:46:e5:c2:
         e7:04:2a:73:51:c4:82:98:2b:d5:6c:81:3b:05:45:b2:5f:6a:
         7f:ae:29:c2:35:e2:ba:6e:0f:e9:f2:03:05:c8:7a:4b:05:6c:
         3e:1e:67:b4:1c:bb:3b:94:55:d4:9b:b9:ea:5e:96:62:30:a8:
         48:ab:08:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:34:07 2026 by rpki-client