Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4fc413a-87f9-4ec4-bbba-e0b124301a47/df0a6d0a-9a88-3e9d-a9a0-49c828401ec2.roa
File:                     df0a6d0a-9a88-3e9d-a9a0-49c828401ec2.roa (raw, json)
Hash identifier:          VsQtNVsyKZ5DxUAwsUQBe5UWAQ8wmHRBEKpQNC/82Og=
Subject key identifier:   FA:97:E3:B0:98:29:CA:A6:FB:CD:12:84:40:03:36:04:DE:7B:24:C1
Certificate issuer:       /CN=f4fc413a-87f9-4ec4-bbba-e0b124301a47
Certificate serial:       010D0C9F4328584E7E9E371D01FBEEDB16C33600
Authority key identifier: BB:D4:74:EB:4F:AA:52:CE:ED:CD:7D:51:13:08:A3:84:9F:8F:C4:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4fc413a-87f9-4ec4-bbba-e0b124301a47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4fc413a-87f9-4ec4-bbba-e0b124301a47/df0a6d0a-9a88-3e9d-a9a0-49c828401ec2.roa
Signing time:             Tue 14 Jul 2026 09:19:09 +0000
ROA not before:           Tue 14 Jul 2026 09:19:09 +0000
ROA not after:            Mon 12 Oct 2026 09:19:09 +0000
asID:                     13335
IP address blocks:        23.133.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4fc413a-87f9-4ec4-bbba-e0b124301a47/f4fc413a-87f9-4ec4-bbba-e0b124301a47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4fc413a-87f9-4ec4-bbba-e0b124301a47/f4fc413a-87f9-4ec4-bbba-e0b124301a47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4fc413a-87f9-4ec4-bbba-e0b124301a47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:9e:37:1d:01:fb:ee:db:16:c3:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4fc413a-87f9-4ec4-bbba-e0b124301a47
        Validity
            Not Before: Jul 14 09:19:09 2026 GMT
            Not After : Oct 12 09:19:09 2026 GMT
        Subject: CN=5f565023-95d7-4163-a987-08a854630d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:03:71:dd:e8:f7:79:8d:e7:47:5d:0c:28:11:
                    f8:8b:c7:a2:ba:64:1d:c5:1f:c1:21:64:7c:07:e6:
                    1c:ee:57:6b:fe:05:b5:e2:b1:5d:89:a7:30:08:cd:
                    2b:cb:8c:49:81:04:e7:9a:93:50:23:1d:27:cd:cc:
                    0c:0d:f2:e2:33:3b:c8:a4:82:ba:3a:d5:3c:a3:0a:
                    1a:2c:b4:6f:10:67:9f:d4:a3:29:32:9e:94:eb:f2:
                    99:f2:6a:41:d9:a2:87:c0:a2:91:ee:d1:a6:34:f6:
                    43:90:69:94:4e:f9:6d:25:14:c8:e7:0f:d9:77:64:
                    92:11:8a:0f:77:58:c2:61:bf:cb:82:6a:35:a0:74:
                    3e:a4:1e:f5:6d:2b:c0:72:ed:e8:fa:01:47:19:4b:
                    2a:b0:a8:1c:61:ac:2b:e4:50:97:ed:ca:17:ed:43:
                    b6:f7:fb:31:75:d7:f4:71:2e:fb:07:0b:64:c7:0c:
                    82:51:b7:1e:2e:db:9e:c8:8f:e7:e3:4b:e4:9f:a3:
                    84:b2:b5:e1:5d:91:fa:ee:fc:04:db:a5:c4:36:79:
                    19:c3:1d:0e:d1:42:f0:77:cd:cb:04:d7:9a:34:00:
                    f5:c7:92:d1:2d:70:c6:bf:33:ab:06:27:42:6d:a0:
                    6d:62:3e:3a:f3:1a:63:38:29:2d:89:af:36:4d:a6:
                    d3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:97:E3:B0:98:29:CA:A6:FB:CD:12:84:40:03:36:04:DE:7B:24:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4fc413a-87f9-4ec4-bbba-e0b124301a47/df0a6d0a-9a88-3e9d-a9a0-49c828401ec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4fc413a-87f9-4ec4-bbba-e0b124301a47/f4fc413a-87f9-4ec4-bbba-e0b124301a47.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D4:74:EB:4F:AA:52:CE:ED:CD:7D:51:13:08:A3:84:9F:8F:C4:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4fc413a-87f9-4ec4-bbba-e0b124301a47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:4f:b4:99:b5:dc:89:34:68:93:ae:88:ef:2d:bb:3f:ab:b0:
         ae:36:05:ab:69:45:cf:54:72:d3:f1:b3:3d:7a:ae:1e:99:af:
         68:ea:cd:31:15:f9:6a:ff:0a:72:59:91:2b:8d:52:e8:b8:d8:
         c1:94:9e:87:4f:cf:c2:3d:5b:4b:17:d6:91:b7:5f:ec:99:0a:
         e0:2d:2f:44:b6:94:1e:d7:0d:72:64:01:60:fa:35:af:25:b1:
         66:24:b5:86:e5:e3:0f:11:c8:0a:a4:5b:67:80:64:13:4c:66:
         a0:e6:23:c5:89:25:cb:44:0f:a5:40:fb:44:7b:cd:84:ac:10:
         39:5b:48:6f:63:d5:2f:43:df:91:ee:5f:69:01:a7:23:d8:a4:
         ba:b2:27:dc:7c:6a:4a:a4:43:07:dc:43:3b:e5:11:35:30:27:
         0a:bd:72:52:d7:a2:cc:93:ed:eb:f8:57:52:eb:f6:72:8d:da:
         6a:a9:ce:dc:2b:a4:f9:c9:35:b4:84:54:d7:9e:62:b1:5f:4f:
         ca:b4:0b:e7:ef:aa:16:24:6b:3d:f1:14:07:54:d6:10:c8:8e:
         a6:12:56:ee:06:19:d4:57:53:0b:99:1f:61:01:b1:29:e0:e7:
         2a:6e:57:e1:93:ef:95:89:f5:61:a4:2c:c5:50:77:25:68:5a:
         cd:5a:3b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:48 2026 by rpki-client