Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7ec0b2b-7ba6-415a-9a16-5f185478d364/836418e7-b074-39b8-bcd4-164e3e129a01.roa
File:                     836418e7-b074-39b8-bcd4-164e3e129a01.roa (raw, json)
Hash identifier:          8aLJGybimefxpwyZo8hEo+oyXaCWolx4ALFL16tcbkQ=
Subject key identifier:   AD:B6:7A:A6:13:8C:A9:C9:3D:40:B2:59:1A:B7:39:BD:BC:7D:AD:F9
Certificate issuer:       /CN=e7ec0b2b-7ba6-415a-9a16-5f185478d364
Certificate serial:       010D0C9F4328584DE150A124E20A701484438080
Authority key identifier: 82:15:6C:42:15:0E:95:23:EF:3D:40:40:ED:BB:A9:F9:67:80:20:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7ec0b2b-7ba6-415a-9a16-5f185478d364.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7ec0b2b-7ba6-415a-9a16-5f185478d364/836418e7-b074-39b8-bcd4-164e3e129a01.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     63023
IP address blocks:        23.137.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7ec0b2b-7ba6-415a-9a16-5f185478d364/e7ec0b2b-7ba6-415a-9a16-5f185478d364.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7ec0b2b-7ba6-415a-9a16-5f185478d364/e7ec0b2b-7ba6-415a-9a16-5f185478d364.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7ec0b2b-7ba6-415a-9a16-5f185478d364.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:a1:24:e2:0a:70:14:84:43:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ec0b2b-7ba6-415a-9a16-5f185478d364
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=ecaa0800-1de8-4bad-9e61-6473f2416143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:25:e3:72:d6:01:ec:19:46:4c:9c:a5:ff:
                    a0:dc:f3:45:aa:85:af:54:81:4d:e1:28:60:f4:34:
                    a2:86:14:9d:b2:5b:fc:63:f0:51:5d:5c:1c:b5:fc:
                    77:08:2e:39:ea:07:7a:4c:68:97:2b:1f:12:04:93:
                    af:ff:18:39:59:3b:ec:11:f7:06:64:fb:25:46:93:
                    ee:55:d2:58:b3:8b:87:8d:20:98:e2:73:e1:b6:86:
                    c9:64:33:99:41:24:b8:3f:7b:ba:ed:4c:7a:e5:b1:
                    d7:88:1c:9a:6c:18:36:ed:44:c1:37:81:f7:e3:13:
                    16:5b:01:7b:00:28:5e:ce:5d:fa:be:2b:b7:41:d6:
                    15:8d:cc:c6:e0:91:b5:08:79:7d:45:90:d0:33:47:
                    bf:57:4f:a3:6e:4b:85:0f:57:34:16:dd:60:44:0a:
                    10:40:d2:b2:97:80:18:22:23:6f:e4:d4:54:7b:c6:
                    70:d5:3b:4a:0d:8c:0f:e5:2d:c6:d8:d4:ca:8e:30:
                    86:88:d2:6a:76:7c:12:6e:29:ba:47:a7:43:dd:fb:
                    dc:91:de:1c:6e:7a:2b:f8:1f:2a:e9:30:cc:81:07:
                    b5:9d:29:4e:41:53:54:94:e6:c2:55:8f:c5:d7:39:
                    10:b2:0b:61:6b:33:84:7b:b5:2b:c1:23:1e:7f:5c:
                    58:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B6:7A:A6:13:8C:A9:C9:3D:40:B2:59:1A:B7:39:BD:BC:7D:AD:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7ec0b2b-7ba6-415a-9a16-5f185478d364/836418e7-b074-39b8-bcd4-164e3e129a01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7ec0b2b-7ba6-415a-9a16-5f185478d364/e7ec0b2b-7ba6-415a-9a16-5f185478d364.crl

            X509v3 Authority Key Identifier:
                keyid:82:15:6C:42:15:0E:95:23:EF:3D:40:40:ED:BB:A9:F9:67:80:20:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e7ec0b2b-7ba6-415a-9a16-5f185478d364.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:fd:85:83:38:15:3f:a1:b8:b9:95:02:4a:ff:26:30:06:d6:
         55:75:3c:a3:d2:37:40:78:09:77:5d:a5:73:5f:8d:24:fe:1f:
         ef:2d:a1:93:b0:ce:30:dd:71:c7:94:ab:ae:9a:82:c5:50:51:
         d6:54:34:3e:c0:c5:38:4a:23:99:48:99:3f:ce:16:e6:44:b0:
         af:bf:11:8d:ba:e2:7d:74:10:f0:59:34:bf:4f:fb:d9:05:b2:
         61:2e:aa:e2:42:5b:ad:75:93:52:87:b1:05:b8:1d:e3:37:a4:
         8a:66:d3:a9:15:d7:aa:58:ad:5c:2c:56:04:1a:ce:08:1e:35:
         46:25:d2:f9:35:5c:b6:93:a8:7f:05:ed:1b:30:25:0a:e8:87:
         8d:85:be:a5:ca:b7:95:42:5a:53:c7:03:cf:1b:92:d5:82:89:
         91:91:e9:41:cc:bf:15:d4:62:64:a9:5c:b6:32:9c:15:89:41:
         dc:17:96:fb:60:25:05:c9:0e:03:d6:87:c3:f9:e7:ba:1f:39:
         66:f6:a5:5c:fc:5e:e9:94:0c:d5:08:74:d0:69:c5:ee:32:7c:
         01:2c:09:13:90:ad:db:cd:30:96:f5:a8:59:88:c7:ad:69:fc:
         3b:0e:00:22:44:64:d6:de:e4:9f:31:93:bf:12:0e:4a:f5:43:
         e3:b8:ec:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:17:31 2026 by rpki-client