Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd6af4c2-5403-3185-a2e1-55aebfa6ffd5.roa
File:                     dd6af4c2-5403-3185-a2e1-55aebfa6ffd5.roa (raw, json)
Hash identifier:          ZALINmvYJKoAf5oknRckg+YeNX2pSt9Pjt88yRc4Jv4=
Subject key identifier:   D5:7C:45:4E:6E:15:5C:92:FD:80:F2:5B:41:6B:F2:BA:53:68:7C:4C
Certificate issuer:       /CN=2aa2eb71-3102-4859-928f-a833f2c63713
Certificate serial:       010D0C9F4328584E376468389518E9DFDFB4006C
Authority key identifier: AA:77:D5:7B:C1:16:4F:BE:B8:81:7D:3F:4C:E0:33:7E:47:42:3C:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd6af4c2-5403-3185-a2e1-55aebfa6ffd5.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     64260
IP address blocks:        23.138.192.0/24 maxlen: 24
                          138.128.252.0/22 maxlen: 24
                          2607:7c80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 24 Jun 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:68:38:95:18:e9:df:df:b4:00:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa2eb71-3102-4859-928f-a833f2c63713
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=242417a4-bfa9-4e27-b9fa-826e4cc6f602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:db:dd:51:d1:e3:e0:e6:13:5f:18:c5:72:
                    bb:6a:34:b5:ca:78:53:c7:c2:85:9b:a1:a5:24:64:
                    8f:d9:65:02:ee:5a:c9:c4:1a:f3:e1:44:80:8a:58:
                    57:c2:91:7c:1c:6f:1d:b2:78:1a:ce:b0:4d:c9:8d:
                    da:6d:d6:e2:0c:c8:5b:99:a1:4c:63:ea:95:92:18:
                    e7:d3:3f:9e:f6:36:33:e7:8a:ee:54:ae:3b:12:59:
                    70:e6:d6:01:da:2b:99:7d:80:88:60:cf:86:db:fd:
                    3d:45:b7:59:42:5c:2c:2a:49:c2:16:fe:e2:34:f0:
                    c6:31:29:43:27:f1:fd:c8:18:a8:c1:00:19:ca:e9:
                    de:41:1d:70:b4:73:9d:5b:91:72:2f:cb:af:d4:ca:
                    3c:df:1d:ff:0c:1f:0f:93:25:1f:77:a1:d2:2f:03:
                    53:d6:94:3f:83:41:a0:39:ef:d4:dc:2d:a4:4c:5f:
                    2f:19:ad:e8:32:c2:20:0f:a0:31:15:77:48:73:02:
                    28:4c:34:b9:09:9c:85:e3:7e:8f:92:f7:f8:99:f9:
                    26:70:aa:44:5d:6e:da:ea:7a:80:86:44:89:1c:a0:
                    e0:d2:1d:6a:4c:cc:a0:05:65:96:9e:44:4a:67:69:
                    65:e7:de:d4:c2:2e:c1:81:eb:47:d1:96:5f:2e:fd:
                    e1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7C:45:4E:6E:15:5C:92:FD:80:F2:5B:41:6B:F2:BA:53:68:7C:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/dd6af4c2-5403-3185-a2e1-55aebfa6ffd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713/2aa2eb71-3102-4859-928f-a833f2c63713.crl

            X509v3 Authority Key Identifier:
                keyid:AA:77:D5:7B:C1:16:4F:BE:B8:81:7D:3F:4C:E0:33:7E:47:42:3C:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2aa2eb71-3102-4859-928f-a833f2c63713.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.192.0/24
                  138.128.252.0/22
                IPv6:
                  2607:7c80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:a7:d7:fc:2a:36:a1:f1:50:2d:05:4f:0f:d9:5e:0a:87:a0:
         d7:58:27:f6:30:9e:f6:fd:63:ec:cd:92:a1:a2:40:58:32:73:
         62:3c:d3:e6:3b:2a:10:25:e2:61:b9:0c:45:06:4c:06:18:6c:
         fa:1c:d2:34:24:a1:0e:35:3f:f9:f3:b2:27:b6:17:0b:03:6b:
         28:ef:02:e6:6a:78:fd:86:cb:8a:aa:09:8e:58:50:ba:a9:7e:
         a9:aa:71:cb:cd:c2:d8:df:a5:bf:20:c1:5f:62:8d:5d:3b:f2:
         2d:03:72:b8:5d:6e:b6:71:3b:c8:de:c3:98:81:03:51:0d:12:
         b8:f0:ca:fd:00:5a:09:33:6a:d0:e3:8e:c3:b6:17:05:8b:8b:
         44:86:2b:af:94:eb:62:56:05:ed:b3:62:71:0c:2c:12:64:e2:
         c7:06:a7:04:eb:3b:66:ff:30:25:a4:e9:00:f9:72:1f:46:2a:
         bd:3c:92:b1:7b:7c:ab:07:c4:33:da:73:2c:a1:cb:99:e4:eb:
         90:35:08:cc:4b:d3:69:08:93:bc:07:3d:56:f0:9a:48:b0:90:
         7c:55:74:b3:4e:e0:b1:43:25:18:86:09:36:24:78:be:ae:d4:
         d9:64:67:fa:a9:f3:c6:b7:4a:b8:43:c3:58:b5:24:cc:32:3e:
         28:aa:fe:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 22:53:01 2026 by rpki-client