Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f58c6d9b-e6e5-3840-863e-25077d42223f.roa
File:                     f58c6d9b-e6e5-3840-863e-25077d42223f.roa (raw, json)
Hash identifier:          9CtuYz+Ak5ccqRNl9avjv/rF0IUAyM+K3I+OA9zyN2A=
Subject key identifier:   6B:66:C9:8F:8A:CC:98:83:4F:22:51:FD:BD:43:8C:8F:41:45:F3:20
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EBF6D04BA9BB5B0A0F4B0E5AD
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f58c6d9b-e6e5-3840-863e-25077d42223f.roa
Signing time:             Thu 06 Aug 2026 14:27:34 +0000
ROA not before:           Thu 06 Aug 2026 14:27:34 +0000
ROA not after:            Wed 04 Nov 2026 15:27:34 +0000
asID:                     396190
IP address blocks:        23.81.136.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bf:6d:04:ba:9b:b5:b0:a0:f4:b0:e5:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  6 14:27:34 2026 GMT
            Not After : Nov  4 15:27:34 2026 GMT
        Subject: CN=e44031a3-dba2-40fd-8907-583b5b5057dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:cc:c4:b1:fd:6a:85:3f:d2:7e:19:1a:3f:c6:
                    eb:42:8e:cd:2c:9e:60:f6:10:dc:9d:1f:7c:13:a5:
                    b3:cb:e7:70:1b:15:7e:8f:a3:54:d8:14:ad:6d:d3:
                    a3:9c:89:be:5f:28:f3:2c:36:a3:8c:26:51:ba:d1:
                    23:1f:63:26:e9:15:e6:54:62:f6:a4:e0:01:2e:16:
                    b0:36:94:46:84:ab:2e:da:aa:2b:ab:58:38:78:43:
                    ee:3d:47:26:b1:20:03:ac:a1:bf:6a:9e:19:19:34:
                    86:57:d7:45:d1:9e:64:f0:d2:44:da:50:dd:1b:27:
                    f6:e1:bf:d8:9e:f8:e5:cb:dd:f7:c2:ae:0b:14:83:
                    11:0b:40:d4:d1:bc:aa:af:e8:5d:a5:55:30:5e:51:
                    28:cd:97:6b:9d:8b:58:e7:3c:f8:56:c0:91:16:27:
                    62:2a:64:cc:ec:37:18:91:6b:8c:b9:1f:30:9a:22:
                    d1:6e:a5:e6:4d:d0:93:d4:d2:d9:f9:af:cd:20:33:
                    b4:09:a1:d1:c5:af:8d:b3:50:e3:5b:2b:57:00:74:
                    c4:fa:2d:07:5d:3b:af:52:17:3f:28:8b:76:1a:55:
                    2f:57:b3:21:f3:31:77:d6:36:81:12:bd:65:65:b8:
                    b1:91:6e:f2:df:17:90:38:37:e9:43:3e:1d:3f:9c:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:66:C9:8F:8A:CC:98:83:4F:22:51:FD:BD:43:8C:8F:41:45:F3:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/f58c6d9b-e6e5-3840-863e-25077d42223f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.81.136.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b1:bb:c0:7f:ed:0d:64:27:7f:00:e1:73:5a:16:45:9a:e8:
         93:61:19:26:ad:0a:d1:d0:d4:2a:57:21:a1:b1:36:dc:60:06:
         ce:9f:6c:fb:fe:62:87:ad:83:64:f5:c9:08:67:99:05:42:e0:
         2a:e4:44:d1:b3:39:59:9e:48:c1:cb:05:ac:f8:54:f7:9a:2c:
         93:1f:f5:ff:95:6e:51:58:93:2c:9f:f6:97:ed:92:d2:6d:70:
         4d:8e:9e:f0:ab:42:a2:77:d8:da:94:82:71:ed:9c:b2:ff:1b:
         15:dc:9e:9a:4a:8d:3e:31:a2:e2:38:b0:60:f9:67:43:60:ab:
         eb:3e:71:67:62:f3:41:03:2e:f8:5e:6f:22:4c:1f:48:11:62:
         c1:cb:9e:1e:5a:2d:12:5c:59:e1:98:0d:72:44:8f:81:03:d3:
         9b:9e:98:7e:49:3b:a3:08:7d:1c:88:5e:50:bf:91:f6:9f:37:
         0a:1b:23:1b:ef:4b:33:59:27:8c:d9:32:a5:74:ef:f3:33:45:
         1c:0a:65:2f:0a:f1:4e:c9:ed:f2:25:2e:30:fc:4d:96:bb:0d:
         cb:59:15:90:1c:e2:69:eb:91:23:41:83:1d:c4:8f:b9:bc:4b:
         90:fb:5d:70:fe:c6:51:88:f5:cf:4d:9e:48:c3:18:52:e9:60:
         ff:6a:99:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:33 2026 by rpki-client