Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa
File:                     8c96b8b5-6d96-394f-8062-cb55430e1548.roa (raw, json)
Hash identifier:          tUdaxye+goYx2blkUSnrlp4G34SEBMllHpC5rcGPbHQ=
Subject key identifier:   15:AE:A2:D6:AD:09:71:14:7C:36:02:86:40:57:49:71:42:23:45:60
Certificate issuer:       /CN=265875fa-2cd8-4782-9b63-97850fa49dfa
Certificate serial:       010D0C9F4328584E2F045D2AB11751D135D619C0
Authority key identifier: 2C:5D:06:09:CF:16:D0:66:81:D1:58:51:A3:F8:E8:5D:50:A9:9F:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa
Signing time:             Mon 15 Jun 2026 21:00:12 +0000
ROA not before:           Mon 15 Jun 2026 21:00:12 +0000
ROA not after:            Sun 13 Sep 2026 21:00:12 +0000
asID:                     402075
IP address blocks:        23.147.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2f:04:5d:2a:b1:17:51:d1:35:d6:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265875fa-2cd8-4782-9b63-97850fa49dfa
        Validity
            Not Before: Jun 15 21:00:12 2026 GMT
            Not After : Sep 13 21:00:12 2026 GMT
        Subject: CN=572787d6-7383-435d-87b2-d8de3aa222d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:37:63:07:5e:ce:0e:80:70:fc:e3:49:e0:e1:
                    29:85:2c:77:d4:08:5c:80:f1:07:b8:c6:a4:cd:6b:
                    f3:b2:e4:59:19:39:8a:e8:89:03:8c:89:05:78:89:
                    9a:b8:4a:f6:2f:19:c1:66:7e:88:32:d8:73:4f:56:
                    5c:70:29:a0:8c:18:7a:17:95:9e:aa:82:e9:6f:5f:
                    16:36:ea:6a:6b:5a:4f:f8:0d:c4:a0:8d:1f:8a:bc:
                    96:aa:7d:9c:82:fd:12:36:a0:99:ba:b0:fe:00:53:
                    42:7a:4d:ac:a4:47:e9:a3:f9:68:8d:64:dc:24:7b:
                    b6:8e:b2:03:58:0d:61:c4:3f:9c:8b:f0:f4:94:5c:
                    30:58:62:18:8a:db:dc:43:a2:6a:e8:f6:a5:e6:f4:
                    1e:f2:7d:29:81:a5:fc:8b:a0:dc:2a:a6:e4:6d:7c:
                    93:5e:be:0c:00:2f:02:71:aa:db:08:ad:49:29:1c:
                    73:7c:8f:10:d8:d0:bf:b2:43:d4:63:d6:29:cd:2b:
                    5d:5f:43:fc:99:fd:bb:ec:24:dd:02:10:bc:66:5f:
                    a2:64:0b:40:31:72:dc:d2:50:59:80:2a:6e:90:cc:
                    8d:79:d7:ac:9a:e0:61:cb:cb:67:56:2d:b7:2d:36:
                    9a:17:2f:3a:9c:6d:01:b4:76:22:65:da:f8:2d:9d:
                    a0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AE:A2:D6:AD:09:71:14:7C:36:02:86:40:57:49:71:42:23:45:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.crl

            X509v3 Authority Key Identifier:
                keyid:2C:5D:06:09:CF:16:D0:66:81:D1:58:51:A3:F8:E8:5D:50:A9:9F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:86:44:fa:25:25:be:4d:9b:66:c4:c8:77:ee:a3:d7:4b:ef:
         cb:60:05:06:c2:67:2f:eb:1c:1d:18:9d:b4:fd:44:af:62:ab:
         70:76:d8:00:e4:fb:ff:1b:27:42:e7:0c:02:88:af:2b:11:3b:
         ee:ea:01:84:e9:7a:ca:09:4d:b7:2e:b3:1b:06:30:d8:ef:30:
         07:42:a1:9e:b6:1f:3e:47:6e:7a:b6:43:ec:49:68:93:1d:53:
         36:28:d3:aa:b5:5e:d5:39:be:56:53:73:e1:2b:45:db:75:0e:
         7b:f4:26:0a:b2:58:5c:f5:40:67:f2:f2:1d:21:0b:08:4b:6a:
         d4:68:a4:be:91:bc:de:df:01:10:4f:15:66:1b:79:89:16:c7:
         d7:dc:25:fb:87:2b:0d:52:5f:16:28:b8:73:40:95:de:56:4e:
         00:d1:d2:72:aa:54:42:c6:47:31:40:0c:d8:01:38:d0:e7:f2:
         be:82:b8:88:f7:84:1c:77:f4:17:51:4c:23:51:ec:23:13:11:
         63:ad:59:04:de:32:bf:d6:59:86:07:08:79:74:cb:83:6a:4b:
         52:1e:45:c2:cf:61:44:18:e7:2a:68:7f:8c:e9:72:fc:1c:b1:
         c4:f9:46:2d:65:a2:e1:3e:59:47:80:f7:c0:63:c1:60:6d:f9:
         0b:a5:4c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:46:51 2026 by rpki-client