Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/237cccfb-e7ba-3325-9636-0ddadf83067a.roa
File:                     237cccfb-e7ba-3325-9636-0ddadf83067a.roa (raw, json)
Hash identifier:          Yzr+YyQ4YCh1PnrB+/3+9aTud7x9nPIRvovuK+FbMk8=
Subject key identifier:   C8:E9:E0:58:82:CC:A8:AB:8B:79:D3:CD:9B:CF:5C:76:DC:80:D0:43
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584E296F00661B0398EE8BD6E3E0
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/237cccfb-e7ba-3325-9636-0ddadf83067a.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     62610
IP address blocks:        23.248.162.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6f:00:66:1b:03:98:ee:8b:d6:e3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=58d43106-ffd7-42dc-871c-2bfcb46a981e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c7:6a:e3:68:db:e2:f4:0c:5b:10:ff:23:a1:
                    a4:19:25:ce:45:b8:31:f4:4e:11:12:17:f9:e8:89:
                    fd:d6:18:e1:a3:22:93:e8:ba:dd:06:9d:b3:92:c2:
                    cf:b2:81:03:38:6e:90:9a:c2:69:35:d7:8b:92:ca:
                    95:33:ac:6a:a8:66:b4:dc:a5:bd:11:7c:1c:b4:e6:
                    c0:0a:7e:c7:f0:bb:4b:e8:96:66:9c:1f:19:02:df:
                    ed:77:8b:d3:1c:47:69:41:a7:da:e4:7a:13:61:76:
                    8d:e2:78:cc:66:3e:e9:c7:f6:aa:f8:c8:82:14:60:
                    8a:6f:55:22:66:db:bb:de:22:03:e1:19:7b:13:4e:
                    6c:51:a4:81:d5:7b:ff:cc:9d:12:ba:5b:59:97:24:
                    db:00:e7:17:fa:a0:1f:d8:f1:39:dc:a0:e5:91:37:
                    5a:33:5e:53:2c:89:a5:b6:63:f5:61:ec:fe:af:8b:
                    ae:85:1e:8f:4b:bf:1b:c2:c8:58:b5:2e:bd:39:ba:
                    3a:c0:0f:35:ee:a5:ae:06:a8:f9:82:9d:b9:45:5c:
                    63:86:77:24:74:d9:e5:c0:68:d3:cf:72:c0:9c:5e:
                    8e:ee:bf:52:42:45:48:e8:5e:93:6e:2d:a0:03:fd:
                    f5:53:1c:fc:fc:21:66:ca:eb:54:c9:9c:61:d0:c8:
                    62:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E9:E0:58:82:CC:A8:AB:8B:79:D3:CD:9B:CF:5C:76:DC:80:D0:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/237cccfb-e7ba-3325-9636-0ddadf83067a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.248.162.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:7c:32:8a:cc:a6:ab:4b:f2:af:a3:bc:80:ca:99:93:ad:28:
         c9:63:8b:fe:ee:e8:b0:59:0f:18:28:a9:f1:16:3d:2f:9d:0b:
         1f:ba:2f:71:1b:3b:a0:e8:a5:ee:a3:45:af:7e:25:7f:1b:46:
         c2:86:20:6a:3d:95:0f:3b:c8:09:ac:36:5c:9e:5e:e2:2d:90:
         fa:88:0a:6d:5e:c2:51:d5:1f:18:f9:36:3e:66:f9:79:80:b0:
         79:54:d6:26:69:53:33:c9:83:2a:1f:11:76:dc:da:e9:bf:ed:
         11:21:e2:ad:57:e0:f7:36:a9:77:1f:98:23:80:3f:2f:66:69:
         6d:a3:b3:b7:84:e3:18:2f:7c:f6:b5:7b:7b:83:a1:d7:cf:6f:
         c8:aa:fc:24:76:dc:82:b9:e7:6d:b2:84:ab:bf:cc:37:28:24:
         d8:37:61:91:5f:1a:f4:d7:f2:58:c1:eb:76:33:f4:26:8a:1b:
         65:2f:ac:ee:f7:ef:ff:26:6e:65:b1:10:d9:2c:64:78:02:2c:
         eb:bc:a5:a6:ac:6e:c4:86:8d:d4:1e:af:2a:86:06:4d:a5:ef:
         43:8b:f7:ef:36:ba:9d:d3:a6:06:d8:dd:77:ba:b8:b7:3e:ab:
         c3:56:92:44:ee:f3:8b:4b:1c:c4:10:c6:52:c5:28:d4:aa:26:
         cd:84:b6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:57:45 2026 by rpki-client