Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/c2790227-b2a7-3771-9257-78748f60cd1e.roa
File:                     c2790227-b2a7-3771-9257-78748f60cd1e.roa (raw, json)
Hash identifier:          5MPFxMOYb2tVpuqFtci2W8k3y4r0XZhcvKdOoxx9gPM=
Subject key identifier:   6B:20:20:D6:E4:04:0D:26:4F:59:CD:5B:2F:F8:0A:AE:BB:03:50:75
Certificate issuer:       /CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
Certificate serial:       010D0C9F4328584D91C016CB74FAAE1D96E91AC0
Authority key identifier: C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/c2790227-b2a7-3771-9257-78748f60cd1e.roa
Signing time:             Mon 20 Apr 2026 13:00:33 +0000
ROA not before:           Mon 20 Apr 2026 13:00:33 +0000
ROA not after:            Sun 19 Jul 2026 13:00:33 +0000
asID:                     25855
IP address blocks:        23.147.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:91:c0:16:cb:74:fa:ae:1d:96:e9:1a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39cb960-2394-4b22-b9f1-3ac5566bc72a
        Validity
            Not Before: Apr 20 13:00:33 2026 GMT
            Not After : Jul 19 13:00:33 2026 GMT
        Subject: CN=784a5ad4-bec1-457f-aecf-5c3aaae43982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:10:dd:5c:29:81:35:2a:6e:70:36:d9:59:ce:
                    79:e9:8c:92:09:a2:3e:cd:93:db:9d:02:b1:ab:fb:
                    e4:46:5f:4b:06:8c:3c:9c:00:34:69:ff:a9:ac:26:
                    ac:62:c8:17:1e:11:e7:49:0b:8f:6e:8e:2f:5e:ef:
                    6a:35:18:0a:78:29:00:5a:d3:8c:20:0a:e4:98:87:
                    a7:93:68:e0:6b:c6:f6:06:11:ba:d0:f0:08:8e:10:
                    00:6b:50:28:7e:aa:f2:d6:63:fd:15:6a:56:0d:a6:
                    22:ce:cf:1a:cb:3b:3f:e8:83:42:4c:66:29:8e:d1:
                    9e:17:a6:b0:67:29:85:d8:96:a5:32:8b:24:bb:08:
                    c3:21:e1:56:7c:bf:b5:6e:69:fb:39:75:1e:57:8d:
                    a4:2f:bf:9b:09:fa:5c:03:27:c2:b7:48:f1:a2:40:
                    12:b2:56:a8:7e:3e:97:a6:44:d3:c9:b9:a9:69:3e:
                    aa:04:b5:2a:fe:68:3c:d6:39:21:b9:72:f0:8e:9b:
                    6c:b7:89:bf:47:c9:39:8e:e4:21:f3:75:b4:04:39:
                    55:ab:0e:54:d4:01:16:58:89:ad:2b:93:f6:48:6f:
                    24:c8:44:c3:4f:3d:be:48:e7:f9:cd:a5:e8:8f:56:
                    80:be:62:0c:a5:fb:46:42:67:6b:3c:4b:3f:df:83:
                    a6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:20:20:D6:E4:04:0D:26:4F:59:CD:5B:2F:F8:0A:AE:BB:03:50:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/c2790227-b2a7-3771-9257-78748f60cd1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a/e39cb960-2394-4b22-b9f1-3ac5566bc72a.crl

            X509v3 Authority Key Identifier:
                keyid:C7:98:AE:93:EE:6D:6B:ED:A2:5D:9B:70:06:F1:DD:45:39:D7:1F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e39cb960-2394-4b22-b9f1-3ac5566bc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:7e:9a:c6:63:58:31:73:16:1f:e9:7b:61:25:0a:3a:b5:18:
         6a:ec:80:1d:7f:e1:8c:bb:91:92:c0:ae:7a:90:ba:1d:5a:bc:
         0b:4a:9d:ba:67:c8:1c:19:83:cf:1e:7d:7f:75:88:ad:36:a5:
         89:69:43:23:64:a2:e6:86:d6:43:ad:7e:27:78:13:48:06:67:
         bc:99:4a:12:4a:32:1a:ab:26:ab:05:a5:db:9c:6a:c6:f9:ad:
         bf:68:9f:16:c9:7a:7f:c9:9b:f5:16:9b:d1:b3:aa:73:1b:d4:
         a2:8f:4a:a4:b5:be:52:06:20:b4:24:b8:11:2a:a0:56:e2:59:
         77:6e:fe:84:7f:17:51:3e:04:77:f3:29:ba:46:73:15:1a:e5:
         1d:da:bc:64:50:c7:d4:e8:16:ea:5f:b8:58:8d:8a:59:dc:d6:
         af:b8:5e:d3:e7:9f:39:16:ef:22:fc:35:9a:bc:e8:2d:c6:1f:
         24:d3:02:ad:8d:af:16:bf:0a:be:ae:bc:27:55:b9:87:9e:c6:
         73:0d:15:36:9a:bf:53:74:83:fa:9b:6d:5b:c1:d8:70:b3:65:
         d2:ac:28:f2:e4:51:46:6a:c5:b1:6b:b7:e8:cb:f9:8d:d3:fb:
         91:04:f9:56:95:88:a9:ec:71:11:bb:d7:c6:44:76:17:ef:3e:
         c7:08:b4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:16:01 2026 by rpki-client