Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/fdc8a2c8-e833-37b5-aa96-54f5d96579b5.roa
File:                     fdc8a2c8-e833-37b5-aa96-54f5d96579b5.roa (raw, json)
Hash identifier:          lsPiZksu99kJ/RM2UcB41/biTILgCeSltkQWjpGCZek=
Subject key identifier:   86:75:FE:2D:71:4B:B1:59:28:C9:AE:16:73:90:79:9D:F0:3B:3F:20
Certificate issuer:       /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
Certificate serial:       010D0C9F4328584EB6E1A6320154C0550BE8F960
Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/fdc8a2c8-e833-37b5-aa96-54f5d96579b5.roa
Signing time:             Mon 03 Aug 2026 13:00:12 +0000
ROA not before:           Mon 03 Aug 2026 13:00:12 +0000
ROA not after:            Sun 01 Nov 2026 14:00:12 +0000
asID:                     15020
IP address blocks:        23.188.17.0/24 maxlen: 24
                          23.188.18.0/24 maxlen: 24
                          23.188.19.0/24 maxlen: 24
                          23.188.20.0/24 maxlen: 24
                          23.188.21.0/24 maxlen: 24
                          23.188.22.0/24 maxlen: 24
                          23.188.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b6:e1:a6:32:01:54:c0:55:0b:e8:f9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12
        Validity
            Not Before: Aug  3 13:00:12 2026 GMT
            Not After : Nov  1 14:00:12 2026 GMT
        Subject: CN=16b90649-85aa-420e-97b2-0e801eb3d822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:46:2c:de:67:50:31:c6:d1:8b:ac:bc:f5:
                    b2:70:41:33:15:09:c4:09:69:70:39:df:5a:40:18:
                    ae:1e:3e:f1:5d:d8:1c:b7:34:5c:de:97:bb:45:1d:
                    6e:43:52:ca:e9:28:be:48:91:89:df:d9:6e:fb:90:
                    5f:ef:6a:85:93:ee:2c:cd:6a:c3:47:e5:ed:03:13:
                    ed:ec:2c:99:8d:be:d9:61:e1:d3:fe:e4:7d:8b:30:
                    7f:80:5b:81:d5:00:55:93:f2:bd:df:46:15:4d:49:
                    e4:b9:91:1f:a2:ff:6b:a7:69:33:6d:6e:9a:55:ad:
                    36:42:c3:4e:1e:19:eb:09:13:7f:b4:00:c4:83:cd:
                    87:dc:c3:e9:f1:dc:96:0e:13:fd:c4:59:6d:7f:92:
                    e6:71:26:ce:d7:6b:b3:93:b3:aa:73:e6:8c:97:31:
                    f9:e2:dd:ca:94:c1:72:d5:0d:e2:35:33:98:88:11:
                    13:92:a1:ab:8b:bf:02:3c:f2:e5:fe:9b:f1:40:e7:
                    83:7a:41:87:76:b7:2a:21:9b:f6:0f:12:c7:ec:c2:
                    d2:a5:23:bb:4b:b5:96:79:d8:66:fa:1b:14:4d:de:
                    b0:0a:5d:59:cb:34:96:16:0d:d9:f0:56:dd:73:91:
                    e7:bc:6f:5e:bd:60:b6:61:8a:09:d2:92:05:f0:34:
                    45:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:75:FE:2D:71:4B:B1:59:28:C9:AE:16:73:90:79:9D:F0:3B:3F:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/fdc8a2c8-e833-37b5-aa96-54f5d96579b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl

            X509v3 Authority Key Identifier:
                keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.188.17.0-23.188.23.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:1a:4c:74:ee:ca:90:bc:3a:f5:cd:b2:2c:c6:a9:59:94:34:
         5e:01:7e:90:f3:1b:c8:58:44:46:6c:50:84:98:6c:a5:89:e3:
         11:f3:fc:cd:b2:f2:c0:44:98:c8:50:db:67:af:8f:85:f0:29:
         09:0b:a6:77:42:fc:14:90:5f:31:46:fe:49:37:ef:2f:ef:2f:
         b9:4a:55:f9:d0:70:5e:6d:15:4a:6f:3e:91:02:1b:a7:32:7a:
         da:c8:aa:6a:68:d4:e8:58:b2:28:38:bc:e6:7a:b2:d3:72:b2:
         7e:ad:d4:ac:6f:9a:fe:22:3c:94:d9:b1:28:dd:e3:5b:66:ee:
         aa:38:dd:2e:fc:15:1c:f0:34:3b:3f:ea:04:86:51:1c:bd:76:
         0c:52:8f:26:7e:ef:30:1c:91:2c:96:02:39:7b:a2:0c:a3:96:
         e3:81:fe:ef:2f:69:ad:da:f2:9f:15:eb:b4:72:c5:35:bc:5e:
         30:1a:02:3b:4e:59:d5:47:cf:ba:5a:35:8d:09:7a:53:78:5a:
         ee:bc:34:69:35:3b:b8:92:0a:39:6b:b4:3d:8e:d5:4b:59:b7:
         cb:c6:27:d1:1a:5a:11:25:14:f6:1d:ce:a3:94:4d:d3:82:d1:
         62:32:61:ba:71:07:52:9a:ee:26:f3:0a:46:56:ab:60:ca:f0:
         ad:7f:d0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:46:37 2026 by rpki-client