Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa
File:                     41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa (raw, json)
Hash identifier:          4stx2uHMTDADk8oHa4rt6hFv+N1VT6Fp62qtQFdiPnM=
Subject key identifier:   40:5F:62:2C:0E:84:63:15:1B:B5:E9:30:8E:39:ED:EA:18:78:52:B9
Certificate issuer:       /CN=749b2153-8fb9-49bc-b117-9e419bd6fddf
Certificate serial:       010D0C9F4328584DD35B0FE0F1735215DE0F6700
Authority key identifier: FB:4B:87:F3:B8:AF:6D:93:11:3A:0F:F6:B7:68:44:72:AC:49:BC:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa
Signing time:             Thu 14 May 2026 01:00:25 +0000
ROA not before:           Thu 14 May 2026 01:00:25 +0000
ROA not after:            Wed 12 Aug 2026 01:00:25 +0000
asID:                     25737
IP address blocks:        23.162.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d3:5b:0f:e0:f1:73:52:15:de:0f:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749b2153-8fb9-49bc-b117-9e419bd6fddf
        Validity
            Not Before: May 14 01:00:25 2026 GMT
            Not After : Aug 12 01:00:25 2026 GMT
        Subject: CN=825c3e7a-c165-4587-8c8e-a587371fabea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e9:6e:c6:df:a3:7c:21:ce:a7:4c:7d:44:e4:
                    f5:de:72:d8:77:1b:e4:e4:a3:2c:01:33:b0:07:39:
                    6e:81:f9:45:71:e8:52:32:92:f1:89:4e:26:1f:7a:
                    bb:18:3f:5e:cc:f2:67:de:27:02:f2:db:5a:7b:bb:
                    0c:2f:22:70:e7:5c:eb:b2:40:8a:13:f1:fc:ff:f0:
                    8a:64:b2:86:f2:cb:28:59:f2:93:2c:cb:54:e0:87:
                    cd:c3:bc:bb:20:8a:8b:75:7a:3f:e6:ce:41:f9:1a:
                    98:24:fa:e9:11:04:49:83:3a:4a:3f:e1:18:21:f3:
                    d7:29:3a:37:4c:35:13:f8:10:fc:47:ac:ad:97:5d:
                    b4:a4:1e:06:0a:c0:6d:a0:3a:5a:dd:43:4a:40:7c:
                    46:9c:45:7f:34:5d:70:57:d4:ee:1f:99:32:da:6d:
                    19:70:4b:0f:77:50:4a:2e:94:42:68:57:d4:f2:e4:
                    f1:9f:fb:95:e7:94:91:06:2e:5a:1f:e6:96:4c:b1:
                    56:22:6e:25:bf:e8:60:bd:e1:ef:93:0e:76:8c:cc:
                    76:31:0c:c8:b1:4a:b5:4f:47:e3:5e:20:75:f3:71:
                    fa:d9:e3:a7:6f:b0:88:fb:8a:d3:07:b6:d4:05:b2:
                    fb:d6:27:81:31:43:1b:e9:4f:8f:c4:1e:df:00:c8:
                    ff:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5F:62:2C:0E:84:63:15:1B:B5:E9:30:8E:39:ED:EA:18:78:52:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.crl

            X509v3 Authority Key Identifier:
                keyid:FB:4B:87:F3:B8:AF:6D:93:11:3A:0F:F6:B7:68:44:72:AC:49:BC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:18:6b:7d:08:11:b2:a7:32:ec:ae:12:22:8e:64:ac:79:92:
         1e:03:20:1d:2b:80:b7:92:48:5c:84:74:5c:08:98:9d:32:b1:
         e6:1e:f1:6f:7a:3f:8e:ad:9f:a8:98:25:18:85:81:a4:b6:11:
         69:ed:4d:cd:e4:85:fa:94:5b:e4:7d:53:c8:00:d9:90:e0:54:
         d5:97:40:46:5c:ea:a6:2b:10:82:d3:73:bc:c2:93:f3:16:eb:
         f0:93:10:ec:0b:7f:d4:5d:ca:0b:62:97:db:9a:2b:a6:9d:ec:
         2c:aa:22:80:8e:dc:1e:b2:0c:9e:9f:21:c6:6b:1c:c4:c2:bb:
         cf:48:3a:8e:a4:96:16:7e:07:8e:87:b5:0c:c6:e4:3b:09:44:
         38:6b:e7:9c:05:4a:4d:88:06:09:62:26:22:d0:7c:9a:2f:65:
         a6:30:61:f1:5b:52:c6:61:ee:57:7d:65:ac:fd:8f:4c:f2:f6:
         f1:ba:0d:8f:7f:a8:09:4e:da:f2:62:bb:5b:8e:b3:1e:04:ca:
         ef:4f:2f:79:9a:25:2c:34:1c:6d:f1:48:29:07:55:37:bb:0c:
         97:b8:ef:9b:35:fb:66:19:f2:6b:cc:1f:56:c3:41:7e:d3:89:
         6a:34:57:6b:a8:49:da:c6:1f:d3:01:22:c3:4e:84:a4:11:df:
         97:bf:1b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 17:38:44 2026 by rpki-client