Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/57cb9949-5a60-3ecb-8859-c3575f5fe8f1.roa
File:                     57cb9949-5a60-3ecb-8859-c3575f5fe8f1.roa (raw, json)
Hash identifier:          v2VEDcWY1CO6obm68cKqg7Pr23OyVBJd9FXgc/wpIAQ=
Subject key identifier:   F5:D5:49:4A:54:37:42:71:EA:F1:14:88:BE:03:9C:15:08:40:C4:70
Certificate issuer:       /CN=483acfc7-39d2-4411-8cda-97152f12ce16
Certificate serial:       010D0C9F4328584D3F64F18A07871AD2E1A10C80
Authority key identifier: CF:CE:BC:D0:44:F4:46:17:80:0A:66:51:B0:57:13:33:07:B2:41:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/57cb9949-5a60-3ecb-8859-c3575f5fe8f1.roa
Signing time:             Sun 22 Mar 2026 01:00:32 +0000
ROA not before:           Sun 22 Mar 2026 01:00:32 +0000
ROA not after:            Sat 20 Jun 2026 01:00:32 +0000
asID:                     267
IP address blocks:        23.138.112.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/483acfc7-39d2-4411-8cda-97152f12ce16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/483acfc7-39d2-4411-8cda-97152f12ce16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3f:64:f1:8a:07:87:1a:d2:e1:a1:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=483acfc7-39d2-4411-8cda-97152f12ce16
        Validity
            Not Before: Mar 22 01:00:32 2026 GMT
            Not After : Jun 20 01:00:32 2026 GMT
        Subject: CN=5264b2bd-3428-41ce-b779-7abbff52da9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:cf:f6:ec:36:20:26:27:50:f1:5e:00:f0:04:
                    6c:17:37:46:71:99:14:57:19:d8:bd:4c:58:33:ed:
                    89:2d:c0:8a:13:47:9b:eb:63:73:cd:fb:42:4f:43:
                    b1:c6:a5:77:f4:fb:78:38:d7:6d:e4:80:da:59:4c:
                    00:19:cf:ca:82:dd:8d:90:41:b8:77:97:37:3c:66:
                    b3:84:aa:0e:6a:09:0b:b0:f8:37:e0:04:93:0f:3a:
                    3a:7c:0b:e4:94:b9:5f:8d:b9:c7:7b:7b:52:9a:67:
                    01:de:b6:d8:54:9a:fa:88:19:ae:75:1b:8b:8b:df:
                    ea:bd:fc:49:4f:f9:21:e5:d6:f4:49:ce:0c:38:0d:
                    56:b4:44:a5:17:c2:c9:ff:43:4f:59:b8:a9:ac:d5:
                    cf:f6:5b:ec:da:b7:cc:14:de:75:7c:65:0d:bc:f9:
                    0e:8b:f5:22:28:c6:fd:d4:94:be:54:a4:56:be:9c:
                    21:fd:bc:04:09:b1:82:30:1d:f7:c1:05:a4:b8:60:
                    78:f8:9c:02:6c:51:6c:ef:25:af:85:79:bc:9f:05:
                    2b:f9:ff:48:50:bd:77:f5:66:2c:b0:12:c7:a4:7c:
                    ab:f9:29:d3:ea:08:2c:a1:da:89:06:e1:8d:01:e4:
                    a7:3c:8e:88:df:0f:ef:c8:07:99:10:b9:b9:48:c3:
                    2e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:D5:49:4A:54:37:42:71:EA:F1:14:88:BE:03:9C:15:08:40:C4:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/57cb9949-5a60-3ecb-8859-c3575f5fe8f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16/483acfc7-39d2-4411-8cda-97152f12ce16.crl

            X509v3 Authority Key Identifier:
                keyid:CF:CE:BC:D0:44:F4:46:17:80:0A:66:51:B0:57:13:33:07:B2:41:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/483acfc7-39d2-4411-8cda-97152f12ce16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:9e:e3:02:44:e1:87:22:99:df:02:47:ca:b8:d5:bf:ee:e9:
         22:01:47:92:31:37:66:61:a5:03:c7:19:61:e1:24:cc:f9:ef:
         78:32:ba:d1:61:46:a4:25:af:7e:bf:d2:d8:cc:75:76:85:1c:
         62:0c:e1:89:42:c0:67:d2:e0:ff:39:73:a5:b1:ee:89:9f:79:
         67:0c:24:03:6d:4a:67:6b:5e:c5:4c:5f:95:c1:ee:17:b6:c0:
         85:bb:7c:9d:7a:0a:de:26:66:55:91:54:af:b8:d5:75:d3:66:
         ea:6b:90:de:2d:28:b4:be:7d:10:41:3e:94:af:29:e5:15:2e:
         d3:c8:c1:0f:bd:ee:dd:3f:ad:f9:be:4e:ca:01:cf:e2:6e:c8:
         7e:8c:d4:97:ea:b7:e9:5d:44:34:bb:3a:88:60:05:d6:a6:5d:
         06:20:3f:a5:77:54:b6:bf:95:0c:c2:02:9a:4e:d5:8f:c6:0a:
         a3:e7:4a:56:53:aa:57:4a:ea:1e:3e:84:7b:c9:09:38:8e:35:
         6a:f4:34:55:42:e6:13:aa:e8:a6:c9:dc:1a:02:37:eb:a2:35:
         e0:c8:bc:6a:3c:2d:ea:e2:4e:97:64:de:51:6f:49:ce:63:67:
         e9:47:5e:5b:69:b5:ef:32:3d:0b:e5:a1:cf:34:f2:43:00:4e:
         20:95:e0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:58:42 2026 by rpki-client