Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/f892866d-30f5-3571-8c05-96164e674d1f.roa
File:                     f892866d-30f5-3571-8c05-96164e674d1f.roa (raw, json)
Hash identifier:          IhSnkAU9GQnZwElDIohopZ0XBIAcJETytGlLpga3ibk=
Subject key identifier:   B1:76:2B:FA:88:C6:36:EC:B7:8F:2E:0B:3D:74:5D:B3:92:B8:5D:EB
Certificate issuer:       /CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
Certificate serial:       010D0C9F4328584D9755581A991883642352EF80
Authority key identifier: F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/f892866d-30f5-3571-8c05-96164e674d1f.roa
Signing time:             Wed 22 Apr 2026 13:00:32 +0000
ROA not before:           Wed 22 Apr 2026 13:00:32 +0000
ROA not after:            Tue 21 Jul 2026 13:00:32 +0000
asID:                     40806
IP address blocks:        23.149.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:97:55:58:1a:99:18:83:64:23:52:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
        Validity
            Not Before: Apr 22 13:00:32 2026 GMT
            Not After : Jul 21 13:00:32 2026 GMT
        Subject: CN=ae8971d5-af25-4cbe-a1bc-4faed12f327e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:66:96:ae:18:f6:f7:1f:4a:28:94:3a:21:51:
                    28:93:16:8e:99:1e:f4:bc:92:42:ab:11:67:c2:82:
                    0e:30:23:6b:89:03:51:91:97:ad:e3:8b:1e:94:55:
                    16:80:14:09:c1:ca:33:bf:c7:83:a7:04:bc:3b:5c:
                    14:2d:9c:38:34:4c:57:85:ed:59:ef:f9:2e:66:36:
                    39:83:0f:20:8e:57:db:06:18:a5:71:3c:b7:8f:c8:
                    50:74:e9:1f:0a:94:ad:d1:a0:00:8d:12:78:c2:e1:
                    56:ca:5f:ef:65:85:ac:1e:60:a3:fd:e5:f5:4d:c5:
                    07:d3:8f:d7:f7:e5:24:7c:7b:69:31:fc:17:a3:a8:
                    7f:4d:6c:f6:fb:33:f8:a1:23:fa:71:94:41:78:d9:
                    c8:4c:d8:cb:ce:28:c2:8b:d3:9a:ea:db:2b:0c:bc:
                    54:eb:97:50:08:4d:1f:23:73:c9:93:93:0a:d2:25:
                    5d:59:2b:50:80:5b:20:b5:db:43:2e:30:e1:02:6c:
                    b2:7b:23:81:47:44:37:24:5b:43:f0:c2:2a:fa:a4:
                    86:09:b4:e6:0d:8e:b3:49:31:4d:2f:d1:d6:8c:c5:
                    5a:79:16:9e:c3:2b:75:fd:68:48:5f:6c:06:81:13:
                    be:8b:e4:79:9b:11:21:07:69:b5:04:02:b3:36:c7:
                    ca:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:76:2B:FA:88:C6:36:EC:B7:8F:2E:0B:3D:74:5D:B3:92:B8:5D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/f892866d-30f5-3571-8c05-96164e674d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl

            X509v3 Authority Key Identifier:
                keyid:F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:7f:46:21:1b:50:63:75:f0:35:64:f4:da:46:72:d8:fb:f9:
         b6:81:5f:96:60:64:eb:26:70:61:4b:c5:19:05:25:b6:d8:ea:
         1f:a9:a6:bf:99:68:09:c6:14:f2:57:d5:b0:cb:e4:17:5d:c1:
         c4:9f:e6:e6:1d:e6:fa:2e:a3:e2:51:91:c4:b8:a2:23:d6:d1:
         74:89:a4:b8:7f:79:aa:3f:df:ea:f0:d6:72:d5:bc:fe:db:31:
         9b:18:14:5a:6b:e6:d8:a8:fc:ed:c6:67:6c:95:87:5d:da:42:
         a8:ea:3b:c4:0e:68:ea:2a:69:55:47:5d:5e:c7:21:ae:ab:fe:
         9d:47:03:5f:c2:40:25:18:68:c2:a5:5f:8a:e7:d7:a3:48:ec:
         0d:61:0d:ff:0d:10:93:e8:56:a5:d1:70:46:3b:95:35:f4:d0:
         95:01:0d:c6:59:20:69:7e:fe:ee:f9:80:49:c4:e8:30:12:93:
         44:de:08:5c:d8:50:c4:19:60:c0:03:5a:f8:6c:a0:22:fc:1b:
         ef:7f:59:3d:66:b8:2b:1b:5d:ff:60:c7:26:f8:55:f7:d8:95:
         6a:3e:28:a9:61:c1:af:d6:08:69:80:70:b6:a8:82:07:df:a1:
         7f:b5:ce:46:61:1f:14:95:9e:0f:5a:0a:08:ac:4d:c7:f6:57:
         74:25:cb:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:03:30 2026 by rpki-client