Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa
File:                     7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa (raw, json)
Hash identifier:          84USi/J9sIwveZIuqxSYm/lxQFtUNqz9bDlKeS7ruBI=
Subject key identifier:   83:A7:A5:3D:5B:19:19:16:B7:48:1D:DC:CE:59:6F:3B:B0:0A:BF:00
Certificate issuer:       /CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
Certificate serial:       010D0C9F4328584E3A2F1E6AB0310FDBCF66D3C0
Authority key identifier: 0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     398898
IP address blocks:        23.168.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:1e:6a:b0:31:0f:db:cf:66:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cc9f3bd-75d8-41a5-bec8-2e7af65f5687
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=33df1ab5-065f-47d8-9067-bd1760ff05a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b5:5c:56:21:96:bf:f8:b8:dd:70:26:fe:67:
                    27:ae:f7:71:e5:34:ca:83:2e:fc:00:4c:31:d6:40:
                    75:ab:5c:fa:2e:8f:2b:40:17:97:04:6f:7d:6a:3a:
                    e5:39:be:a3:4d:66:ac:7c:c0:fe:b9:67:8b:d8:86:
                    8f:a1:55:74:0c:09:bd:8f:fe:dd:67:51:5a:c1:5b:
                    85:32:ee:14:b2:6f:39:7b:e1:be:6f:3f:df:a7:a5:
                    6e:66:e4:94:a8:33:5c:9c:ac:bc:6a:5a:e4:91:78:
                    ea:c7:e3:8f:ef:42:d5:29:73:d2:d8:55:02:71:6a:
                    4e:92:f8:b1:5b:66:44:d5:f9:17:0c:cb:5f:fa:1d:
                    e4:2f:b3:a7:7e:d0:cd:66:f4:30:10:05:7d:56:39:
                    85:92:0c:a8:cf:ec:45:38:43:65:36:b3:52:60:81:
                    21:25:79:db:91:bf:ea:53:0a:20:5d:43:e8:43:24:
                    f4:ec:69:a7:78:78:bb:78:2d:be:13:b8:20:97:a3:
                    a7:81:2f:55:38:79:96:2b:80:69:c7:3d:6d:3b:65:
                    32:04:6c:4d:64:84:79:15:b2:86:c9:2b:6f:1a:60:
                    17:b6:84:e0:15:93:6f:fb:d4:03:44:50:df:e1:13:
                    a8:b7:65:e0:23:51:ad:1d:1a:d7:83:39:44:d9:3c:
                    d7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A7:A5:3D:5B:19:19:16:B7:48:1D:DC:CE:59:6F:3B:B0:0A:BF:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7fa0cc30-65e3-3794-b15d-991d8f0a5562.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.crl

            X509v3 Authority Key Identifier:
                keyid:0B:09:79:58:DE:CD:36:2F:27:4C:D1:43:17:6C:37:CB:2E:05:BA:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7cc9f3bd-75d8-41a5-bec8-2e7af65f5687.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:96:11:bd:da:ca:e3:82:2e:cf:f6:10:4b:91:9f:b5:e2:2c:
         48:a9:4a:f3:a5:09:1a:06:f5:40:9e:82:d4:03:6e:17:e0:f8:
         73:54:4d:9b:53:30:5b:a9:1e:bf:4d:c6:1e:60:98:ae:d6:79:
         39:78:93:ac:75:47:67:3a:e1:ca:ff:cd:92:af:22:b1:86:3e:
         14:2d:88:38:9b:06:36:43:a7:33:de:e4:3c:04:8e:d5:3f:f9:
         33:16:ac:c6:47:4a:05:77:2d:4f:47:2c:29:5d:fc:ce:14:04:
         40:0a:43:6c:10:17:2a:67:3f:73:57:7b:4b:84:6a:8f:50:ff:
         b6:bd:48:76:c1:df:3b:97:c9:f6:cd:c6:97:ba:44:22:66:38:
         07:2c:df:41:6b:d4:97:5c:7b:ce:90:ac:70:1d:6f:f0:16:49:
         71:d4:94:82:d7:a0:9f:dc:c2:77:76:85:6c:54:5e:d6:10:b3:
         b0:4e:48:ba:04:0c:13:a1:b8:ac:aa:0d:27:7e:fb:cf:a9:1f:
         8c:87:4b:c3:a8:7c:a3:12:fd:ac:2d:e3:23:71:0b:b3:cb:19:
         1a:fb:eb:26:5d:c4:81:c2:e3:a8:08:c6:f8:c6:44:94:1a:18:
         b3:a7:bd:4e:93:7b:3c:a6:1d:b3:56:b8:9c:99:78:ee:37:2f:
         63:44:9e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:39:49 2026 by rpki-client