Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa
File:                     06356a9a-a928-3159-af92-998e04f7da3a.roa (raw, json)
Hash identifier:          vgYA5ekX1JPJRzqbx0sJ2rI+r1XDA9SCvBAsWbk7/Wc=
Subject key identifier:   A0:0C:BD:97:CA:29:85:16:24:A0:2D:DE:ED:7B:2E:58:2D:29:B9:AC
Certificate issuer:       /CN=007561fe-4b04-417a-b423-349b8b4b047d
Certificate serial:       010D0C9F4328584EA788800070CB8C43C3ABBE80
Authority key identifier: 6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     19651
IP address blocks:        23.168.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:80:00:70:cb:8c:43:c3:ab:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007561fe-4b04-417a-b423-349b8b4b047d
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=33b919a7-2ae3-4d84-b4c2-5613e0208f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a8:49:91:56:b8:8a:e4:d4:f9:b4:e7:84:36:
                    b4:68:a1:8f:d0:da:ae:55:79:71:6f:67:eb:24:9c:
                    87:e9:3b:10:83:f6:ff:86:1b:5e:a6:31:e4:84:68:
                    1b:34:4c:0a:92:d6:92:59:ca:e3:6c:c2:46:48:10:
                    0a:79:16:5b:0e:d7:7d:d6:38:8d:3b:97:ab:dd:15:
                    3c:80:58:93:29:73:9d:f8:4c:61:0a:94:eb:47:5e:
                    4a:dc:99:09:91:43:af:4e:87:5c:7e:eb:3b:44:29:
                    4c:13:84:9c:84:6a:9a:e8:02:fd:d4:27:48:ad:aa:
                    b5:4a:e1:c2:ed:04:80:4b:15:93:b9:74:65:33:7b:
                    11:7b:a4:ff:3a:a7:11:90:50:d5:c4:b1:65:81:20:
                    82:da:25:e0:29:b3:9a:0d:09:f4:e6:63:97:6a:f5:
                    59:05:42:c9:c4:f2:c5:10:50:23:3a:44:f1:f0:4f:
                    40:e4:76:99:92:46:47:c6:14:f5:67:9c:c9:12:57:
                    db:17:43:90:c2:0d:78:72:97:50:7c:0e:d2:fb:02:
                    84:dd:f1:e2:c1:ea:1f:c9:ff:fe:0b:df:f6:62:0c:
                    82:c7:87:09:18:0c:80:b9:32:75:1e:3d:fe:93:cd:
                    f7:dd:86:2f:dc:b8:02:49:d4:cd:4c:f2:9c:f2:3e:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0C:BD:97:CA:29:85:16:24:A0:2D:DE:ED:7B:2E:58:2D:29:B9:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/06356a9a-a928-3159-af92-998e04f7da3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d/007561fe-4b04-417a-b423-349b8b4b047d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:6D:D4:95:D7:0E:6B:F0:C4:56:E6:DC:73:F5:9C:E3:43:9C:83:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/007561fe-4b04-417a-b423-349b8b4b047d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9c:c0:91:64:66:0d:6e:f1:8e:00:e4:95:23:86:31:d4:f3:
         49:0f:06:a5:7f:25:b9:1f:e0:6f:d6:ec:41:82:86:42:01:a8:
         e0:79:a1:f7:76:a6:75:ca:66:cc:ce:42:d0:a7:f0:af:da:fd:
         04:75:92:93:90:97:53:cf:a3:16:97:3a:70:c1:0e:b6:8f:b8:
         3b:b1:f6:2a:47:d0:e2:50:24:69:57:d0:f1:3b:da:64:da:b4:
         dd:33:c8:91:f2:b8:fe:05:8a:6c:b5:0f:21:2f:33:1b:c1:22:
         f4:47:94:9a:6c:31:30:54:9e:79:1a:c1:2f:0f:a0:80:85:f7:
         7b:10:d6:2b:1a:82:33:a2:ab:0b:31:6b:54:61:1e:69:59:54:
         85:be:dd:49:18:35:86:2e:9c:40:15:3f:d4:95:c6:ef:20:a0:
         ce:20:5e:0e:83:50:61:e3:41:c5:27:2c:d1:d8:f3:9d:c9:7d:
         83:6d:76:e2:42:90:f3:77:d5:8c:6c:30:ea:50:57:66:90:84:
         ee:e4:36:76:d1:52:94:c7:d6:e3:20:97:d6:3d:ac:6e:52:30:
         24:39:c0:1a:59:30:81:3a:4a:91:0d:af:5d:74:fb:81:67:e0:
         5b:1f:14:2e:34:ef:76:14:c3:5a:0c:1c:48:9f:b8:03:48:57:
         bb:17:eb:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:05:47 2026 by rpki-client