Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa
File:                     ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa (raw, json)
Hash identifier:          jqFCrhUNApzbseHWt5/e80g4wmvhGPHylCJ6gTlBhFA=
Subject key identifier:   F6:92:99:D8:D3:13:86:E7:70:96:40:08:11:01:AE:17:7B:38:70:90
Certificate issuer:       /CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
Certificate serial:       010D0C9F4328584EB2B1AE67AFE86331B7924900
Authority key identifier: E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     33436
IP address blocks:        23.165.144.0/24 maxlen: 24
                          2602:fd09::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:ae:67:af:e8:63:31:b7:92:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc439a1-f5ed-4937-b478-64da6b4fe887
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=1b71ef56-4ba5-48e2-99ad-bdd01919f4f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:38:ca:b9:7a:c7:12:79:1f:c7:06:ef:c2:d3:
                    3a:02:de:a7:3f:13:cc:25:d7:0c:66:29:b4:b8:42:
                    c4:4f:15:14:e7:4a:c1:9c:3f:04:19:86:50:d4:60:
                    d3:ee:28:f6:bf:99:6d:ba:11:5d:35:f3:d0:b2:be:
                    45:b0:e3:68:82:e2:48:7c:ab:e0:c0:cf:87:f3:a5:
                    e9:b4:7a:7e:77:4c:21:a1:83:76:19:71:0c:d3:a3:
                    ea:90:aa:e6:c8:01:cc:0a:e4:60:e4:99:1c:92:f7:
                    1d:f0:fc:d8:9b:d9:7e:e1:e4:bc:a7:89:55:5b:8f:
                    88:70:e1:33:0f:ff:63:b8:50:c5:55:3e:53:f0:0c:
                    5e:38:6a:d8:db:84:0d:68:4f:3a:f9:1e:3b:51:d2:
                    56:14:25:4f:6e:91:99:6a:28:7a:c6:d9:91:cc:20:
                    d2:15:87:be:a3:13:0d:28:5d:8e:9a:60:ed:ac:2e:
                    65:81:4f:36:26:78:eb:1c:c3:05:8a:d9:d0:b4:a7:
                    fe:c5:6c:ff:31:8d:3b:5b:85:5a:3b:77:ed:98:0d:
                    d3:5c:b7:b5:9b:9b:62:95:a4:f2:d5:6e:4c:23:ca:
                    0c:bf:22:15:9d:ee:82:22:5d:3b:4e:7b:97:0c:3f:
                    66:4e:36:b1:53:2e:9c:c2:8d:76:71:95:ae:7d:bd:
                    dc:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:92:99:D8:D3:13:86:E7:70:96:40:08:11:01:AE:17:7B:38:70:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/ee0dbb1b-5a23-32c0-abfa-f297678e0cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887/6cc439a1-f5ed-4937-b478-64da6b4fe887.crl

            X509v3 Authority Key Identifier:
                keyid:E7:83:AE:C7:57:FE:F1:A6:B6:C9:1C:98:59:EA:54:F2:4D:1E:59:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6cc439a1-f5ed-4937-b478-64da6b4fe887.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.165.144.0/24
                IPv6:
                  2602:fd09::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:f3:64:f8:2a:08:d0:62:94:26:63:60:f0:f1:8a:d2:6b:ab:
         e3:c3:6b:9e:3b:c0:ad:65:4d:61:c9:12:c3:28:39:a8:a6:31:
         89:09:ab:e4:f1:4a:73:01:e8:6b:d2:28:9f:89:49:c3:6a:68:
         9d:87:fc:62:56:d1:2e:f3:f8:0a:65:cc:6a:5d:c1:fb:8f:8d:
         1d:94:24:9a:01:27:5b:23:9b:68:a8:82:14:b1:79:8e:4a:f3:
         a5:89:1d:f3:b6:93:1b:cc:b8:59:a0:0a:6f:9f:b1:29:79:9b:
         9b:c7:73:4e:22:c0:b2:72:44:47:38:10:34:dd:c0:5e:6a:d3:
         61:53:63:d7:3e:d3:60:0c:b8:36:69:9c:9e:f1:f6:d2:64:9e:
         b7:f1:8c:63:18:ce:6f:b8:89:2e:45:dd:01:a1:07:2b:1a:73:
         92:ee:d0:99:61:92:54:00:13:3d:db:9f:01:97:8c:a7:7f:0b:
         a6:42:ee:a7:ae:e1:e0:5d:7b:f6:dc:fd:4e:bf:c7:38:cb:2a:
         7c:3b:10:ef:61:dc:77:5c:90:55:35:03:c3:43:f3:c6:62:dd:
         09:1c:05:95:27:24:73:7e:39:b8:d0:43:e9:51:7f:45:3b:90:
         31:0a:b7:79:03:a8:6e:26:e0:3b:be:d1:97:8e:d2:4e:5b:bb:
         f5:b3:28:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 16:30:44 2026 by rpki-client