Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa
File:                     002ef700-936e-3cb8-aa93-bc3050bdb98d.roa (raw, json)
Hash identifier:          gXameBu56ZFBt27GQXtBW0VVqocM2rVY0WtLyZWwz/I=
Subject key identifier:   EE:56:A1:9F:FA:DE:3E:1E:34:10:A8:8A:B6:F6:12:80:06:C5:5C:3D
Certificate issuer:       /CN=1c59fee6-6fbd-4e70-b8c8-332ead43ccdd
Certificate serial:       010D0C9F4328584E7FFA3AF0DA495BB7B14AC6C0
Authority key identifier: 5F:2D:BC:FC:32:43:4D:81:C2:5F:35:D9:9A:19:49:DB:25:3D:3A:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     201579
IP address blocks:        23.166.72.0/24 maxlen: 24
                          2602:f9e4::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:3a:f0:da:49:5b:b7:b1:4a:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c59fee6-6fbd-4e70-b8c8-332ead43ccdd
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=cb1eb513-69cc-40f8-a272-b4407a2543e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a7:ce:c8:a2:18:52:8f:38:27:ed:7e:b2:a2:
                    9c:e4:0c:59:37:e6:80:22:1e:a1:ab:a4:30:76:80:
                    b0:3b:63:84:20:12:ea:0c:9b:1f:2c:d3:53:94:a6:
                    df:03:37:de:68:0d:00:59:48:3d:93:0d:ad:63:df:
                    bc:57:d3:a0:77:b5:18:6b:1b:11:28:ab:39:24:0e:
                    7a:00:3c:89:d9:c2:e9:62:02:87:eb:4c:70:30:7a:
                    40:fb:14:07:fc:af:bb:f2:49:f7:e5:56:64:e4:f9:
                    41:1f:60:ac:51:6c:d7:5c:c3:38:d1:e3:9e:47:6c:
                    a2:8a:42:04:4d:b0:96:bf:c7:9d:9e:50:f2:3a:25:
                    98:ae:17:66:89:92:43:49:bd:02:2c:07:7a:50:ed:
                    ef:ad:47:45:00:a2:2e:04:16:04:a4:d0:df:1a:d2:
                    73:dc:05:0d:d0:75:ec:94:3d:00:9d:fb:7f:37:47:
                    75:04:ac:4d:c8:8f:95:a5:bc:d8:27:6f:f6:90:93:
                    42:be:74:bb:a5:14:62:3c:4c:89:a9:69:76:fd:fc:
                    63:0b:28:f7:a7:54:27:4b:3c:06:fe:14:c5:b6:62:
                    bb:c8:31:09:99:b5:11:09:ed:2a:e9:d0:04:dd:3d:
                    0e:7a:8a:d5:8d:67:6b:d9:14:c0:a0:1a:6a:f8:0f:
                    c1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:56:A1:9F:FA:DE:3E:1E:34:10:A8:8A:B6:F6:12:80:06:C5:5C:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.crl

            X509v3 Authority Key Identifier:
                keyid:5F:2D:BC:FC:32:43:4D:81:C2:5F:35:D9:9A:19:49:DB:25:3D:3A:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.72.0/24
                IPv6:
                  2602:f9e4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:36:25:39:05:4c:9a:58:4e:8f:2b:13:db:24:4f:32:12:85:
         cd:09:80:3f:23:90:f2:b7:fd:70:d5:7d:de:00:f9:cf:6d:29:
         84:f5:86:46:80:21:53:bc:47:f7:ec:da:da:1b:6a:8d:3d:41:
         dd:5f:cd:ef:48:3e:63:dc:1d:85:f8:c6:3b:82:7c:40:3a:82:
         f7:12:ae:83:3b:04:49:6d:18:14:76:9f:f9:c6:2e:b0:2b:d6:
         7d:f6:f6:ac:3d:0b:1c:22:fd:53:f1:a4:27:0d:26:a7:0f:6e:
         50:07:2f:2f:44:56:0d:c8:a6:5a:5b:a7:9c:6b:c6:d2:49:e0:
         e5:ad:b5:63:62:51:90:fd:da:95:a0:d1:46:64:7c:61:95:55:
         43:20:a3:a9:69:6a:4d:e7:b9:cc:8b:95:08:d6:3d:88:f0:70:
         75:8c:ae:3e:36:b2:d5:65:72:81:a3:8b:13:15:5c:54:89:20:
         88:41:ad:3b:36:fc:bf:94:a5:03:d1:0c:1f:99:55:a2:1b:5e:
         ef:59:22:2b:c7:3a:46:62:b5:c3:a3:dc:b3:55:7c:07:78:1d:
         0f:0d:37:81:b2:24:49:b8:72:23:8e:91:8c:6e:de:3a:8a:61:
         49:3c:1d:79:a7:fa:76:30:ee:ae:a8:35:13:e3:77:e6:d0:ee:
         55:98:ae:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:19:01 2026 by rpki-client