Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/143a0d57-0f9f-393b-bc63-7c750f27a196.roa
File:                     143a0d57-0f9f-393b-bc63-7c750f27a196.roa (raw, json)
Hash identifier:          C1BUa9kyRPzRaYwQQX5JiJFhy5LhbTmoWPHk7YJhsjQ=
Subject key identifier:   E7:A2:FA:AF:73:8B:93:67:2E:34:D4:07:CA:F1:25:67:E5:15:2A:DB
Certificate issuer:       /CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef
Certificate serial:       010D0C9F4328584EB2B1B2C60BBB0263D4DB3100
Authority key identifier: 62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/143a0d57-0f9f-393b-bc63-7c750f27a196.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     399861
IP address blocks:        23.133.196.0/24 maxlen: 24
                          2602:f705::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:b2:c6:0b:bb:02:63:d4:db:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06dd74e6-7e65-42d4-a49a-07e0cc18c1ef
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=e9ed3f34-c184-4175-90f3-0fda9ab40e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:05:fb:af:b1:8b:f1:94:a2:9d:c5:11:7b:
                    65:f2:dd:6b:6a:22:0d:1c:ba:2c:a7:4a:c3:ca:5c:
                    54:30:b5:70:5e:8f:16:30:5c:6c:da:0e:9a:39:69:
                    2a:cb:b7:ed:36:ae:d8:96:f6:ca:18:47:a3:1d:7b:
                    99:d6:38:02:2f:09:8a:a7:1b:a7:17:0d:71:df:08:
                    5b:cc:cb:22:5b:c2:3f:91:0f:83:25:3f:91:d4:95:
                    65:12:a9:56:ef:3f:0d:ca:a2:07:3f:93:c9:e6:23:
                    27:1d:f5:d3:df:12:fa:87:eb:36:14:2b:21:4b:6d:
                    92:a9:cf:aa:05:cf:bf:de:da:11:d5:be:a0:2e:ae:
                    f1:c5:38:3c:44:6c:22:3b:30:0d:c1:b5:58:1a:0c:
                    c6:d0:57:da:df:ca:86:a0:09:ca:d2:9e:97:2a:83:
                    79:44:63:2a:e3:6b:84:56:50:fb:20:49:cf:9c:38:
                    08:f8:14:26:2d:df:26:20:7a:ad:d9:01:93:85:7c:
                    88:c8:8d:92:3c:33:6e:90:0f:28:a2:6f:57:88:ec:
                    88:0f:46:61:54:c3:e3:c5:73:87:e1:0a:34:06:bd:
                    31:37:6e:12:00:f6:3b:7b:4e:9f:42:bc:5d:2d:25:
                    a0:b4:c9:5b:b5:6a:8a:85:f0:fe:5e:3a:86:8d:11:
                    c5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A2:FA:AF:73:8B:93:67:2E:34:D4:07:CA:F1:25:67:E5:15:2A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/143a0d57-0f9f-393b-bc63-7c750f27a196.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.crl

            X509v3 Authority Key Identifier:
                keyid:62:2D:77:C8:66:2E:94:99:61:71:7C:42:F2:43:68:41:F1:6A:4F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/06dd74e6-7e65-42d4-a49a-07e0cc18c1ef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.196.0/24
                IPv6:
                  2602:f705::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:ad:45:ef:6e:02:de:ad:ad:30:a1:fa:45:8c:7d:cb:06:e9:
         e8:e0:75:28:c4:d0:e5:62:43:0a:a8:ae:c9:fd:f5:ee:90:f9:
         11:a1:19:f9:ee:15:68:63:a7:35:db:c2:fa:72:d9:7b:7e:37:
         99:a8:de:15:41:8b:98:81:a1:e0:ea:40:be:3f:19:17:37:b5:
         e7:e0:af:16:97:b4:b9:4c:8d:d0:b0:96:91:f2:95:ca:23:35:
         50:cb:67:af:22:c1:12:07:49:ed:84:a5:a6:25:ae:9e:55:84:
         f9:22:80:dc:56:4e:4b:c1:dd:10:52:88:1b:c5:8a:7d:3e:d7:
         aa:5c:17:6a:9f:83:f0:da:85:82:21:30:10:12:bb:68:46:7a:
         c7:82:9a:b5:ec:fc:7b:0b:a5:b8:27:15:30:69:93:05:2e:62:
         0a:a5:c2:2a:b5:c0:b0:50:a7:e7:bc:f5:a9:de:4a:26:bf:4c:
         59:e2:fb:5d:b7:be:c7:a6:29:ac:4e:ea:e9:53:87:03:d6:7a:
         d7:fb:e7:04:8a:71:e3:72:67:a5:17:81:d1:54:56:3d:7e:6c:
         9a:fd:15:8a:5a:11:ad:81:88:21:bc:66:de:d1:f5:a6:23:dd:
         57:d4:da:e9:66:1f:1f:4e:73:7a:3f:11:ed:42:82:1a:b2:29:
         d8:03:df:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 16:16:25 2026 by rpki-client