Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/721b03ba-33c5-3c7c-a1f2-b51479808611.roa
File:                     721b03ba-33c5-3c7c-a1f2-b51479808611.roa (raw, json)
Hash identifier:          /IJzJJ1lONUDZnVxD6WIZef8ZNZZPKbUggb+1r792rU=
Subject key identifier:   23:D6:B9:AA:FD:40:4C:65:FF:08:62:D2:CE:41:1A:D4:D9:5F:E5:6F
Certificate issuer:       /CN=3dce7e6f-4588-4d9b-bb90-80f074656851
Certificate serial:       010D0C9F4328584EABB6F18588A06E3BA124DCE0
Authority key identifier: 25:30:E9:06:73:90:6B:71:57:31:7C:E3:F6:3E:89:EE:94:D0:7F:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/721b03ba-33c5-3c7c-a1f2-b51479808611.roa
Signing time:             Thu 30 Jul 2026 13:00:12 +0000
ROA not before:           Thu 30 Jul 2026 13:00:12 +0000
ROA not after:            Wed 28 Oct 2026 13:00:12 +0000
asID:                     15012
IP address blocks:        23.133.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/3dce7e6f-4588-4d9b-bb90-80f074656851.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/3dce7e6f-4588-4d9b-bb90-80f074656851.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ab:b6:f1:85:88:a0:6e:3b:a1:24:dc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dce7e6f-4588-4d9b-bb90-80f074656851
        Validity
            Not Before: Jul 30 13:00:12 2026 GMT
            Not After : Oct 28 13:00:12 2026 GMT
        Subject: CN=71734369-e0d0-4c67-b483-812e15ef7464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7e:38:b8:d5:99:55:35:1d:c1:00:ab:36:24:
                    43:98:f7:65:2c:f2:d7:cd:67:87:ad:7d:8b:b1:72:
                    75:2b:3d:8a:d7:d8:66:1a:b2:65:23:82:b9:a5:7f:
                    4e:8a:3a:5d:b5:fe:b8:73:90:55:ab:be:8e:84:5a:
                    8b:70:e5:2e:5b:e3:2f:63:c4:af:2d:76:77:2e:75:
                    98:d7:2b:9c:08:00:1d:b7:ba:0e:7a:3f:7e:fa:16:
                    1d:70:09:0c:c5:f8:fb:ed:0a:08:fc:ff:00:92:3a:
                    6d:54:ae:e5:59:33:7c:e9:ea:1a:28:1b:c6:49:5b:
                    e8:c4:eb:5e:25:9f:6d:09:e5:9a:fa:95:6d:83:2d:
                    fb:ea:f1:c2:95:c4:66:ca:c0:30:c0:fa:40:73:23:
                    1c:64:95:c7:97:98:5e:be:58:d8:96:26:a8:7b:9c:
                    d8:19:a1:95:14:2d:61:10:f8:0e:25:49:42:d3:8b:
                    7a:fc:95:9f:6a:75:5f:0b:08:bc:21:7e:22:76:8e:
                    b1:13:95:86:4c:20:f3:8b:eb:b9:3f:ea:77:81:3a:
                    19:bc:07:0d:80:8f:c2:23:34:91:99:a6:26:aa:aa:
                    d7:da:36:9b:13:ef:f0:18:ee:06:0a:ae:f3:14:72:
                    28:8d:d4:49:8c:34:40:9f:c3:b2:cc:c0:4f:4c:8c:
                    90:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D6:B9:AA:FD:40:4C:65:FF:08:62:D2:CE:41:1A:D4:D9:5F:E5:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/721b03ba-33c5-3c7c-a1f2-b51479808611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851/3dce7e6f-4588-4d9b-bb90-80f074656851.crl

            X509v3 Authority Key Identifier:
                keyid:25:30:E9:06:73:90:6B:71:57:31:7C:E3:F6:3E:89:EE:94:D0:7F:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3dce7e6f-4588-4d9b-bb90-80f074656851.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:5f:50:ba:8f:f0:f1:36:ac:96:62:37:8d:d8:05:5c:ac:c1:
         5d:ab:c1:80:8a:00:16:be:ee:bb:47:0d:12:59:9c:64:35:35:
         12:ec:d7:36:09:06:e4:5c:29:a5:a0:d1:91:a9:8b:e4:03:da:
         33:20:37:29:4d:a3:fc:bd:6f:18:d0:5b:fc:e7:f1:67:ad:89:
         79:65:2c:c2:14:85:bd:10:7e:9e:f1:3e:c3:e8:86:4d:b2:a2:
         10:a7:a2:a5:67:c5:02:fb:e7:39:46:82:1c:9a:33:8d:ec:4a:
         f6:cd:e6:16:6d:dc:0c:e8:ba:95:d6:ce:ac:83:98:8b:19:f0:
         a6:31:86:e8:3f:4e:ca:ba:47:78:93:96:cc:b5:e0:20:53:92:
         fa:64:96:6a:a7:26:91:05:df:7a:e6:a2:93:29:ab:ce:cc:3c:
         4e:88:02:90:98:97:49:2d:6c:6e:90:c7:ed:9f:5f:9f:a5:70:
         77:b4:19:90:ff:34:d4:ba:7b:25:8c:fc:0a:a8:9c:b8:dc:d4:
         e1:f3:da:fa:43:34:13:26:1e:23:2d:38:9f:cc:9c:c7:53:9a:
         6b:06:ad:fd:22:48:0a:6b:ad:a3:c3:0c:45:a0:56:00:7d:fb:
         1d:44:dc:a3:c7:93:99:c9:d2:fe:d0:fe:bb:0a:32:93:c0:c5:
         11:0c:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:59:48 2026 by rpki-client