Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/a9e307cb-bc6d-318b-9659-6b643e6151fd.roa
File:                     a9e307cb-bc6d-318b-9659-6b643e6151fd.roa (raw, json)
Hash identifier:          vGbgYvHrkEz4yeDfwrVRSmeVShS8TD362R0bf0lB6l0=
Subject key identifier:   3A:2A:9E:D3:06:3A:0B:1E:DA:FD:41:C7:33:63:90:56:B8:78:C8:78
Certificate issuer:       /CN=9477d25a-981d-4eb4-9fd8-7eea914a2840
Certificate serial:       010D0C9F4328584E2F045DEB1EE1EB892D49EF60
Authority key identifier: 15:0B:A4:99:6B:62:D4:0B:05:3C:1C:13:D4:B4:2E:49:A5:44:8B:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/a9e307cb-bc6d-318b-9659-6b643e6151fd.roa
Signing time:             Mon 15 Jun 2026 21:00:12 +0000
ROA not before:           Mon 15 Jun 2026 21:00:12 +0000
ROA not after:            Sun 13 Sep 2026 21:00:12 +0000
asID:                     402075
IP address blocks:        23.147.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/9477d25a-981d-4eb4-9fd8-7eea914a2840.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/9477d25a-981d-4eb4-9fd8-7eea914a2840.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2f:04:5d:eb:1e:e1:eb:89:2d:49:ef:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9477d25a-981d-4eb4-9fd8-7eea914a2840
        Validity
            Not Before: Jun 15 21:00:12 2026 GMT
            Not After : Sep 13 21:00:12 2026 GMT
        Subject: CN=2c598358-b8ce-4b3e-9b88-4b95a2628401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:df:1b:77:08:2c:ea:04:e9:e3:12:72:4f:
                    23:d0:90:34:1c:7e:63:4a:1a:b3:a5:7a:00:5a:03:
                    dd:7b:ae:3f:99:1e:5a:c7:a0:43:e1:fe:e9:d0:86:
                    a1:29:ef:b3:5a:21:e4:19:1b:11:fe:64:67:49:10:
                    9a:2c:f6:b6:3b:a3:78:7b:20:93:f6:23:78:2e:1c:
                    82:54:d8:cc:8d:89:65:fe:2c:4c:b1:af:69:52:28:
                    b5:dd:81:0b:07:b8:de:e1:c1:14:30:8e:cb:c2:c0:
                    36:be:7a:e3:23:e8:2e:37:70:88:ba:5e:48:2c:b9:
                    26:8f:28:f1:2b:0f:ef:3c:02:d3:c9:cd:39:2c:b0:
                    27:54:41:44:a3:88:21:41:a1:1b:46:fd:7c:02:02:
                    82:cd:af:1a:26:21:4d:a5:5c:32:03:fa:a6:37:dc:
                    cc:4b:8f:0b:97:06:c1:14:27:c7:44:5d:04:de:18:
                    5b:90:f7:b6:87:30:2a:ec:7a:16:96:53:de:5c:fa:
                    5d:28:c1:a2:b6:b3:cd:83:ad:38:70:c1:b3:cc:f7:
                    b7:43:29:a3:44:70:08:5a:c0:e4:ec:79:9a:a3:ae:
                    1a:2b:b9:65:d7:13:18:5e:57:a2:7c:c0:9a:ab:ff:
                    3e:48:b1:93:93:70:52:ec:8a:28:98:d8:9f:57:32:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2A:9E:D3:06:3A:0B:1E:DA:FD:41:C7:33:63:90:56:B8:78:C8:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/a9e307cb-bc6d-318b-9659-6b643e6151fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840/9477d25a-981d-4eb4-9fd8-7eea914a2840.crl

            X509v3 Authority Key Identifier:
                keyid:15:0B:A4:99:6B:62:D4:0B:05:3C:1C:13:D4:B4:2E:49:A5:44:8B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9477d25a-981d-4eb4-9fd8-7eea914a2840.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:fc:86:81:8e:db:39:4a:5a:da:e8:98:e0:35:cd:c5:57:12:
         3f:89:c1:35:9e:9a:fc:83:05:da:66:0c:66:96:58:dc:ad:da:
         06:3c:3b:7a:bf:17:75:68:37:c5:33:98:28:af:96:cc:9a:05:
         0c:08:4b:a9:67:00:f0:96:3b:89:25:e4:33:36:e5:d1:a4:69:
         4d:af:97:f0:16:f5:1c:7a:e6:11:1e:e0:f2:15:43:87:05:8c:
         ec:99:8b:83:f8:97:1c:a1:99:8e:db:c1:6b:80:97:ba:7d:0c:
         12:87:fd:b1:01:c3:5f:13:e8:43:c4:20:9c:4a:f5:43:6c:0d:
         74:27:09:9c:b6:8e:fa:22:9d:74:2d:7e:5d:f2:10:02:37:fe:
         a7:75:09:80:b8:14:47:eb:09:b8:96:a5:90:72:ad:03:6d:a6:
         a4:08:35:7d:c2:fe:e5:fb:79:8a:3a:84:8e:d4:3e:8d:e2:3b:
         f3:09:fb:94:b0:ca:8e:4e:9b:86:4e:ad:4e:5d:e2:aa:e5:3f:
         cf:d7:e3:4f:3f:c1:bc:62:43:a5:e2:9c:78:6c:b4:9a:12:fc:
         d7:f4:ef:25:6b:39:bc:bf:f2:62:f2:61:04:40:ea:01:59:97:
         91:6a:db:73:ab:40:78:2b:41:fe:c2:d9:1c:34:f5:5f:da:ef:
         b5:b7:a8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:45:44 2026 by rpki-client