Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/520160ce-4acb-4f52-9fb7-d99a9ac74375/d7e14d73-8dab-36d6-a2c0-d9d1f1f5cf7b.roa
File:                     d7e14d73-8dab-36d6-a2c0-d9d1f1f5cf7b.roa (raw, json)
Hash identifier:          sr7k+JmorCPrdFIxKiYhJfDvHfq6UzjjFxHFTc3dZUQ=
Subject key identifier:   88:7B:09:E9:1D:49:D8:4D:3C:B2:74:5F:EA:89:12:FC:5F:97:2C:1E
Certificate issuer:       /CN=520160ce-4acb-4f52-9fb7-d99a9ac74375
Certificate serial:       010D0C9F4328584E296EFF32382D83ACE4733C80
Authority key identifier: 2A:97:02:BF:BE:35:68:72:88:5D:F6:D7:22:FA:5A:F3:88:C4:40:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/520160ce-4acb-4f52-9fb7-d99a9ac74375.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/520160ce-4acb-4f52-9fb7-d99a9ac74375/d7e14d73-8dab-36d6-a2c0-d9d1f1f5cf7b.roa
Signing time:             Sat 13 Jun 2026 21:00:12 +0000
ROA not before:           Sat 13 Jun 2026 21:00:12 +0000
ROA not after:            Fri 11 Sep 2026 21:00:12 +0000
asID:                     214483
IP address blocks:        23.150.52.0/24 maxlen: 24
                          2602:f4bb::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/520160ce-4acb-4f52-9fb7-d99a9ac74375/520160ce-4acb-4f52-9fb7-d99a9ac74375.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/520160ce-4acb-4f52-9fb7-d99a9ac74375/520160ce-4acb-4f52-9fb7-d99a9ac74375.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/520160ce-4acb-4f52-9fb7-d99a9ac74375.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 16 Jul 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:29:6e:ff:32:38:2d:83:ac:e4:73:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=520160ce-4acb-4f52-9fb7-d99a9ac74375
        Validity
            Not Before: Jun 13 21:00:12 2026 GMT
            Not After : Sep 11 21:00:12 2026 GMT
        Subject: CN=ddfda0d2-7e2b-44df-9f82-3ad78009a2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:e5:c8:cd:35:37:f4:01:b3:d3:ce:b6:a2:
                    d6:e8:5c:f9:94:35:db:b1:3a:7e:d8:7d:41:03:75:
                    f5:d0:25:e1:12:e3:c6:c9:6f:a5:bc:16:29:10:3d:
                    89:ec:f7:7f:a3:af:6b:a2:06:f5:d0:f1:cc:ef:4c:
                    4a:af:38:67:33:cc:88:6c:03:a6:88:de:96:2f:00:
                    f3:fd:76:f6:5f:c0:6c:50:c8:34:77:09:66:ff:19:
                    3e:e4:6b:02:48:a9:9a:2a:31:4f:34:54:f8:4f:f1:
                    3f:f1:82:f7:c5:e8:4f:1e:66:0e:94:d6:6a:b2:46:
                    fe:64:39:b0:bc:7b:e5:a6:3d:38:5b:52:69:e0:93:
                    46:6b:48:05:17:f5:bc:16:ea:a4:83:ea:ba:65:de:
                    b8:e2:22:15:13:7a:75:d1:52:c1:cf:b7:43:60:5b:
                    d8:55:9c:82:11:5d:e3:24:93:5c:b3:a1:80:8a:38:
                    77:b3:86:be:c2:7c:d1:b8:cf:7c:a6:02:ae:d4:81:
                    c4:cf:b9:19:c9:43:d2:86:8d:bb:ac:bb:19:63:27:
                    bd:92:99:26:63:b2:30:b4:4d:f9:17:63:25:69:b0:
                    55:ca:e2:6b:88:14:80:26:42:99:cd:b6:1d:02:ab:
                    a1:e0:8a:7f:04:36:29:db:d8:d9:24:63:35:90:01:
                    87:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7B:09:E9:1D:49:D8:4D:3C:B2:74:5F:EA:89:12:FC:5F:97:2C:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/520160ce-4acb-4f52-9fb7-d99a9ac74375/d7e14d73-8dab-36d6-a2c0-d9d1f1f5cf7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/520160ce-4acb-4f52-9fb7-d99a9ac74375/520160ce-4acb-4f52-9fb7-d99a9ac74375.crl

            X509v3 Authority Key Identifier:
                keyid:2A:97:02:BF:BE:35:68:72:88:5D:F6:D7:22:FA:5A:F3:88:C4:40:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/520160ce-4acb-4f52-9fb7-d99a9ac74375.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.52.0/24
                IPv6:
                  2602:f4bb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:2d:1f:08:1f:7a:bc:9f:4a:ea:b9:5d:c5:c7:8e:8f:7f:d9:
         79:02:ca:bd:64:c7:db:27:77:a0:c1:e9:10:8e:e4:6a:d1:80:
         21:ad:d8:a8:7e:73:58:08:bf:13:73:da:48:e8:a5:c0:c5:bc:
         14:26:80:0f:5f:cd:e2:ed:d5:ec:d2:b2:a1:06:92:22:a1:aa:
         dc:0d:e6:c5:19:48:7e:0a:51:7e:8f:38:ff:77:e8:7a:bb:3e:
         fe:92:fd:02:09:88:28:76:9b:90:74:9b:72:d6:57:95:2b:c2:
         75:2f:e8:05:81:7e:a7:b6:f0:20:52:04:c4:72:b9:95:8d:70:
         86:76:16:8e:24:8e:e1:05:f9:53:d0:5d:f6:21:83:68:b1:9f:
         58:63:89:31:ad:cf:8d:40:8e:d3:85:56:84:5a:56:11:43:44:
         09:39:96:40:0b:27:7d:52:90:7b:47:d8:68:dd:21:37:27:35:
         05:07:8e:f0:de:6e:65:cc:29:8d:8e:43:e1:5c:f5:d8:30:b4:
         d9:cc:1e:e4:51:7e:91:c6:49:96:a8:40:d9:90:1b:6f:54:7c:
         90:19:4d:59:e8:7b:fb:e1:1f:bb:76:8c:c3:61:1e:aa:6f:16:
         44:ae:24:a9:d9:32:df:56:ac:b5:89:6a:dd:a1:23:7f:f7:fa:
         19:c2:12:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 01:48:23 2026 by rpki-client