Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/fffa2d48-0064-31ba-9b29-d239d610482f.roa
File:                     fffa2d48-0064-31ba-9b29-d239d610482f.roa (raw, json)
Hash identifier:          6kaaNnSKa70qvrQXgE4t0U9hRmAJsa1g+iSpMFJ2ML8=
Subject key identifier:   F1:E7:0B:76:31:64:57:06:8A:38:EF:A2:CA:09:0D:87:B6:3E:BD:1F
Certificate issuer:       /CN=be15a26b-f84c-4a26-80bf-412c1bc133a1
Certificate serial:       010D0C9F4328584D5CB4F7E9AEB9CBA813693F70
Authority key identifier: E8:FA:35:7A:70:C5:6B:31:4C:58:2B:AB:79:5B:C1:2B:D4:A5:46:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/fffa2d48-0064-31ba-9b29-d239d610482f.roa
Signing time:             Wed 01 Apr 2026 13:00:30 +0000
ROA not before:           Wed 01 Apr 2026 13:00:30 +0000
ROA not after:            Tue 30 Jun 2026 13:00:30 +0000
asID:                     152918
IP address blocks:        23.147.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/be15a26b-f84c-4a26-80bf-412c1bc133a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/be15a26b-f84c-4a26-80bf-412c1bc133a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:5c:b4:f7:e9:ae:b9:cb:a8:13:69:3f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be15a26b-f84c-4a26-80bf-412c1bc133a1
        Validity
            Not Before: Apr  1 13:00:30 2026 GMT
            Not After : Jun 30 13:00:30 2026 GMT
        Subject: CN=fc43a883-7545-48ad-b8cb-1cdaa32e8e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:48:cd:8e:70:18:ed:a3:f1:af:f4:9e:8b:
                    cf:66:70:05:9d:ef:cc:38:27:5d:2d:08:38:2a:c2:
                    b2:21:d9:05:c5:ed:42:46:ff:3e:55:97:e3:1d:77:
                    b1:e2:11:3e:ab:73:8f:5c:06:41:76:9c:11:3c:d9:
                    bd:59:13:ef:8a:eb:3a:90:ed:c9:ad:2c:b5:d1:f1:
                    04:0b:4f:36:6d:8c:6d:39:0f:a1:03:94:cd:e3:75:
                    40:3c:dd:e7:09:c8:87:67:1d:28:0e:e3:93:c7:ad:
                    1e:52:5b:51:17:1a:21:4c:c9:5c:fc:6d:54:ee:6b:
                    2b:23:ce:bb:65:48:11:86:d7:87:69:4e:4c:d9:1a:
                    bd:d9:ae:2a:0c:99:a3:47:10:b2:8e:be:99:b8:7e:
                    94:da:28:e0:8b:35:8a:f7:4e:cb:3f:75:67:a4:8e:
                    cc:99:0d:84:6f:14:6f:25:bb:c1:60:9f:f5:b6:73:
                    62:af:f8:c0:81:3b:25:56:cd:e6:30:73:60:95:4a:
                    d9:77:3c:47:0f:6c:3e:50:42:84:31:26:a5:be:69:
                    d4:a0:6a:f2:7c:a8:f6:0a:a4:b5:05:44:14:59:d0:
                    69:a3:6f:40:cd:d8:91:bd:4d:23:93:6e:10:83:7e:
                    64:ac:d8:92:86:1a:60:77:5e:a3:5e:13:70:98:4f:
                    60:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E7:0B:76:31:64:57:06:8A:38:EF:A2:CA:09:0D:87:B6:3E:BD:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/fffa2d48-0064-31ba-9b29-d239d610482f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/be15a26b-f84c-4a26-80bf-412c1bc133a1.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FA:35:7A:70:C5:6B:31:4C:58:2B:AB:79:5B:C1:2B:D4:A5:46:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:91:38:52:97:6d:61:12:31:d6:91:8e:39:bd:2d:cd:1a:4d:
         4e:76:d8:5a:93:1a:f3:90:37:c5:ef:0b:81:ab:f2:2a:86:b5:
         d1:49:73:ce:66:0b:c2:c8:4b:bf:79:58:7b:6b:f4:89:fb:87:
         37:ed:6f:fb:8a:55:90:fd:a9:46:40:e0:90:b1:80:b9:79:53:
         48:4a:f1:69:d8:2f:f8:fb:5e:1b:20:76:b1:2f:62:1d:26:20:
         45:f9:a1:a2:a9:23:b5:44:e7:5c:ce:79:8c:ce:16:d2:40:6e:
         e4:9d:be:d6:3a:90:07:d3:98:59:56:74:db:ce:69:a0:dc:a2:
         c6:dd:3c:b6:7c:76:1b:d8:40:27:99:1c:b7:0f:85:d3:73:46:
         ba:20:2f:90:63:15:34:39:98:b3:f4:b4:9b:4f:53:ee:97:9d:
         0f:f6:94:6b:0e:d8:65:df:57:c3:07:1c:8a:53:37:6b:cb:f1:
         33:23:7f:4c:9f:35:49:9b:d5:84:8d:fe:d2:d0:36:dc:b5:e1:
         92:30:a2:74:cc:d3:d9:ef:32:de:45:8f:84:26:07:29:1b:31:
         dd:5f:96:a4:ac:55:9f:4b:33:da:2f:6e:8f:6d:9f:0e:e1:f7:
         f6:28:e3:95:ff:0c:7a:f6:96:7e:f5:f7:6f:7a:8a:14:61:1c:
         43:73:f1:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:12:08 2026 by rpki-client