Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/573ad8c6-2882-33ac-86ca-8fda368a6c77.roa
File:                     573ad8c6-2882-33ac-86ca-8fda368a6c77.roa (raw, json)
Hash identifier:          ofqXdwQxeysF7Uqo6Rku4O+wfPWXEgkSnnF7rViWcT4=
Subject key identifier:   90:A7:B8:AA:77:60:83:54:5A:4E:C0:98:76:DA:A6:22:A4:5D:AB:39
Certificate issuer:       /CN=5e87876c-4225-44e7-b377-9a3bf9bdb315
Certificate serial:       010D0C9F4328584D4BF4F1A91BBA10827D70FFC0
Authority key identifier: 50:6D:8A:DF:E7:77:92:83:B0:4C:78:90:23:EE:6D:45:29:44:3B:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/573ad8c6-2882-33ac-86ca-8fda368a6c77.roa
Signing time:             Thu 26 Mar 2026 13:00:41 +0000
ROA not before:           Thu 26 Mar 2026 13:00:41 +0000
ROA not after:            Wed 24 Jun 2026 13:00:41 +0000
asID:                     402090
IP address blocks:        23.147.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/5e87876c-4225-44e7-b377-9a3bf9bdb315.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/5e87876c-4225-44e7-b377-9a3bf9bdb315.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4b:f4:f1:a9:1b:ba:10:82:7d:70:ff:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e87876c-4225-44e7-b377-9a3bf9bdb315
        Validity
            Not Before: Mar 26 13:00:41 2026 GMT
            Not After : Jun 24 13:00:41 2026 GMT
        Subject: CN=a8100a79-f1c4-4222-b077-9cbf1dbf6a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:68:8f:cb:c5:f5:89:69:f9:ad:39:3f:49:0f:
                    5d:39:16:05:2c:a4:19:b8:53:09:7d:af:4e:db:21:
                    f9:5b:99:b5:19:b6:61:10:fb:ed:46:1f:d2:ef:98:
                    e6:64:84:94:b4:fb:36:5f:e4:09:18:97:78:74:28:
                    29:91:37:50:d7:dc:50:d2:a7:1e:36:de:4e:d6:66:
                    6f:95:ce:d5:4c:f5:36:ca:6c:fe:fb:4f:3f:cb:3b:
                    ff:1f:52:4e:af:bd:4f:3d:5e:e7:f4:11:20:cb:2a:
                    5a:83:e0:15:e8:d5:f7:d0:d8:6f:db:9b:e6:e8:04:
                    54:92:fb:f2:77:5a:23:18:0a:0a:5e:d1:6f:66:5a:
                    79:47:c4:1b:a0:ab:f6:b9:7a:bd:a0:53:d1:45:b0:
                    bc:b1:63:87:83:85:82:2a:e1:4b:b8:5f:ed:ca:e1:
                    bb:fc:e1:c5:61:c8:c1:ad:29:a2:f4:69:de:40:0b:
                    b0:ca:37:41:b4:60:9b:a2:bc:16:61:4f:f9:d5:20:
                    6b:1b:c8:ec:c6:98:4d:de:0b:66:04:e1:f5:ca:d0:
                    7a:d8:55:5d:36:d9:7b:c3:9b:30:13:dd:be:a0:9a:
                    30:20:2e:ed:15:ff:7f:49:15:65:17:b9:3c:6b:61:
                    2c:53:03:7a:67:2f:98:52:b9:79:ff:38:c8:97:50:
                    be:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A7:B8:AA:77:60:83:54:5A:4E:C0:98:76:DA:A6:22:A4:5D:AB:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/573ad8c6-2882-33ac-86ca-8fda368a6c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/5e87876c-4225-44e7-b377-9a3bf9bdb315.crl

            X509v3 Authority Key Identifier:
                keyid:50:6D:8A:DF:E7:77:92:83:B0:4C:78:90:23:EE:6D:45:29:44:3B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:46:33:30:7c:b5:2d:8a:af:d1:68:ed:33:92:f4:f8:93:4c:
         41:cb:3a:58:b0:aa:3f:4a:53:55:34:0f:c2:ec:c2:80:3e:0a:
         3c:5f:77:12:97:ed:92:80:41:44:4f:d1:0e:b2:cd:b1:9d:b4:
         58:f1:2b:72:ac:bc:a0:ae:2d:12:e3:61:8f:30:53:ce:85:b4:
         af:d6:00:f1:b5:2f:ca:87:dd:d8:48:b2:33:06:61:64:7e:dc:
         b2:96:33:58:45:de:01:74:05:78:90:0b:61:96:d9:a2:5a:11:
         b0:22:d4:09:e1:4f:c3:40:f1:ab:94:6d:44:b3:3e:83:f7:0c:
         75:b8:5f:c3:f4:dc:32:c8:a9:4c:d7:d6:be:48:ea:58:50:cc:
         3f:7f:78:cd:0a:b2:2e:5a:82:6b:38:fb:c1:a4:24:fc:f6:ba:
         06:47:14:91:17:cb:17:aa:d0:9a:01:c9:c9:02:a0:af:6d:df:
         a6:65:99:70:82:8d:81:13:97:43:ea:45:14:14:5c:4b:4a:ee:
         d1:07:02:bc:e5:be:ef:1f:0e:a4:b3:29:0a:e6:77:6e:6e:c8:
         ce:ae:f4:6a:dd:ba:94:5d:de:8b:50:f1:e6:ba:ae:19:1f:d9:
         f7:2c:ca:14:31:83:5e:50:b8:f4:2a:9e:03:78:a1:3e:45:cb:
         a5:3d:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:10:19 2026 by rpki-client