Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa
File:                     1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa (raw, json)
Hash identifier:          x9y4qiGSq3vBzJn2t7q3/8GpUQvxVPMLhJN0xr6lEHs=
Subject key identifier:   A9:94:11:70:E0:31:44:BC:04:DC:A8:D1:00:9F:E6:A8:F0:3D:D1:59
Certificate issuer:       /CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9
Certificate serial:       010D0C9F4328584DE2B5DD279B7494B5F092A540
Authority key identifier: 93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa
Signing time:             Tue 19 May 2026 13:00:32 +0000
ROA not before:           Tue 19 May 2026 13:00:32 +0000
ROA not after:            Mon 17 Aug 2026 13:00:32 +0000
asID:                     55140
IP address blocks:        23.138.0.0/24 maxlen: 24
                          162.220.180.0/22 maxlen: 24
                          162.245.104.0/21 maxlen: 24
                          198.1.0.0/21 maxlen: 24
                          209.177.74.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 31 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e2:b5:dd:27:9b:74:94:b5:f0:92:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9707c2dd-2647-4164-b4b3-9e7da141d5e9
        Validity
            Not Before: May 19 13:00:32 2026 GMT
            Not After : Aug 17 13:00:32 2026 GMT
        Subject: CN=773517fe-2dfc-4b34-924e-efc2668f2989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fd:d9:3b:ac:c7:70:54:cd:77:63:9b:e0:00:
                    a4:71:c1:83:96:84:ba:d5:5e:36:c2:2c:69:2a:e4:
                    5b:57:38:6e:a7:25:74:4c:85:a0:ec:bd:b9:78:fd:
                    dc:b2:85:d2:f8:19:5d:fa:f5:dc:eb:f2:02:04:19:
                    46:51:8d:84:dd:69:0d:d0:f2:c2:53:55:d3:d8:34:
                    09:ce:9d:ed:4c:e1:3a:02:72:33:2c:c4:84:a2:69:
                    de:a8:f2:61:59:1c:35:91:5d:b9:22:79:a2:62:b5:
                    25:45:eb:59:93:d3:38:30:e7:c8:cb:69:62:5d:bb:
                    e6:ba:21:03:71:5d:87:4d:d6:45:7e:6c:a7:30:d5:
                    a3:8e:46:44:16:e9:df:d4:fb:07:71:fa:87:cd:1e:
                    9d:43:c6:26:ba:5e:49:d0:f7:8c:3a:fc:01:0b:42:
                    dd:75:9c:d7:06:6d:de:e0:da:fb:b7:46:03:bc:cc:
                    ec:97:69:fc:b5:62:28:c4:1b:78:e4:48:49:08:a1:
                    bd:d9:24:d9:f7:98:6f:91:b3:15:f2:4a:fa:d3:f3:
                    c4:e7:8f:d7:3c:19:3a:94:5b:84:77:23:54:45:8f:
                    2f:0f:11:75:83:f4:0e:f6:3b:b1:13:2d:8c:10:2a:
                    a2:b0:fc:74:02:ec:9f:85:44:8e:5e:be:64:ec:05:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:94:11:70:E0:31:44:BC:04:DC:A8:D1:00:9F:E6:A8:F0:3D:D1:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/1c999b1b-71ff-3db9-a93a-06b4de8060aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9/9707c2dd-2647-4164-b4b3-9e7da141d5e9.crl

            X509v3 Authority Key Identifier:
                keyid:93:5B:A6:B5:09:46:11:32:D4:45:85:3A:D5:9D:18:43:04:EC:05:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9707c2dd-2647-4164-b4b3-9e7da141d5e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.0.0/24
                  162.220.180.0/22
                  162.245.104.0/21
                  198.1.0.0/21
                  209.177.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:63:dc:af:c7:77:3f:ab:2c:f0:53:0b:47:bc:a7:2d:7c:cb:
         f9:12:f3:40:65:f2:8c:cc:19:2a:87:f0:ed:fd:86:be:f1:5a:
         a8:7c:fd:a0:a9:fb:aa:13:a7:55:c1:6b:32:46:8f:5c:b8:3d:
         48:45:c0:5c:29:94:44:68:34:84:cc:7a:29:58:e9:fe:53:ce:
         c4:65:09:ed:5e:48:5a:9e:73:0d:9a:42:7b:fc:f0:20:cb:d3:
         93:6b:c7:c0:93:16:65:f5:19:e1:0d:3e:09:21:0f:55:a0:0f:
         ff:25:3d:02:99:b1:9a:46:19:04:ea:ec:e6:97:a0:20:1e:8c:
         59:13:70:8c:fc:aa:bd:ac:ae:0a:c2:a6:06:10:45:ee:b3:cc:
         46:ac:af:b6:1a:d6:14:54:77:b7:dc:2f:df:e0:98:eb:90:78:
         4b:ec:9e:dd:9e:9b:da:d4:0c:c3:aa:a7:4f:ae:91:35:70:65:
         5e:6f:3b:e8:a0:f2:db:63:1a:a5:06:d4:e5:c6:99:eb:7a:20:
         7e:c6:d0:e6:2d:d2:2a:33:96:83:a9:97:13:5f:45:98:9c:ab:
         b3:f5:09:55:f1:fa:94:6e:52:94:be:f3:ed:10:e6:d9:ca:89:
         3e:a7:39:49:10:b9:bb:ef:79:d4:3c:c2:f3:e0:fa:c3:ea:59:
         20:52:ae:58
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri May 29 16:17:44 2026 by rpki-client