Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/d6ca0cd0-1cc5-38a0-b4e9-b396012ff871.roa
File:                     d6ca0cd0-1cc5-38a0-b4e9-b396012ff871.roa (raw, json)
Hash identifier:          sJT3e3gJivWO5k1RTuHQFG2a/3JSaiU1cZD+yVijVjI=
Subject key identifier:   F8:D0:17:00:3E:25:19:8B:3C:D0:69:BE:88:D9:23:EA:2C:1D:A7:DD
Certificate issuer:       /CN=51ff4ddd-c38d-4309-8f4d-95441dc765f5
Certificate serial:       010D0C9F4328584EA78753E54CB10CF249B14F30
Authority key identifier: 81:CE:EA:0C:5D:1D:C7:A4:62:10:D6:39:93:37:B0:C4:29:98:2C:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/d6ca0cd0-1cc5-38a0-b4e9-b396012ff871.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399861
IP address blocks:        23.131.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/51ff4ddd-c38d-4309-8f4d-95441dc765f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/51ff4ddd-c38d-4309-8f4d-95441dc765f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:53:e5:4c:b1:0c:f2:49:b1:4f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ff4ddd-c38d-4309-8f4d-95441dc765f5
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b1ac41bd-ce60-471a-9756-532c0cf6bb3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ac:c4:da:e9:f2:74:8f:10:07:79:25:17:47:
                    3b:91:1e:77:9e:1f:c4:85:23:21:0c:d5:ba:0e:51:
                    15:8d:90:47:2b:2c:44:03:a3:43:e5:d7:51:5d:27:
                    80:ff:8b:58:f1:70:22:da:1f:7c:24:83:2d:7e:27:
                    15:65:9b:24:fb:39:73:04:5c:a3:a0:3b:82:a9:6d:
                    13:18:c8:0b:35:01:60:6b:30:9a:aa:a6:85:af:e0:
                    70:84:89:f2:ef:fe:d6:91:a2:58:c6:cb:23:d3:17:
                    20:58:85:be:82:cf:cd:d2:ad:32:15:58:05:6c:13:
                    5a:0f:75:10:57:c1:eb:e4:ba:7b:84:a9:20:3c:aa:
                    96:39:89:03:2d:79:c9:5d:b6:18:ea:82:e2:33:3e:
                    5f:8e:3f:73:2a:be:0f:a4:db:9b:f0:e2:54:ea:ac:
                    64:11:27:d0:8d:1b:e1:49:dc:8c:12:33:da:a4:e7:
                    52:03:a4:03:4f:c4:ab:5c:9f:d2:e8:b4:b8:67:f8:
                    de:02:27:f5:29:f9:5a:8e:48:09:15:c8:d1:d7:4a:
                    b4:03:f9:64:99:28:98:ff:87:15:23:df:9e:7d:0f:
                    9d:03:71:bb:5d:90:4c:a1:53:83:f9:a1:4f:c0:41:
                    82:e1:f4:3c:97:8c:df:5e:1e:61:44:e1:c9:50:9c:
                    59:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D0:17:00:3E:25:19:8B:3C:D0:69:BE:88:D9:23:EA:2C:1D:A7:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/d6ca0cd0-1cc5-38a0-b4e9-b396012ff871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/51ff4ddd-c38d-4309-8f4d-95441dc765f5.crl

            X509v3 Authority Key Identifier:
                keyid:81:CE:EA:0C:5D:1D:C7:A4:62:10:D6:39:93:37:B0:C4:29:98:2C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:ed:88:7c:37:56:0a:31:ec:68:a5:21:c2:82:9d:71:d5:a0:
         7c:30:76:23:db:71:cb:82:c4:9b:ce:2f:ab:ef:48:f7:9a:19:
         cd:07:6b:1c:63:fc:c7:68:6a:54:35:50:4a:f1:dc:b7:52:d3:
         5b:79:4d:c5:f8:fa:46:87:26:15:ad:72:20:b7:9a:fe:eb:04:
         6f:b2:34:89:3a:cf:2a:ac:e2:3d:65:f6:b4:53:af:7c:b3:72:
         41:8b:63:78:f0:bf:79:6d:54:3a:70:56:11:4a:25:e1:35:63:
         09:0b:8d:c6:0d:54:5d:ee:75:9e:69:d1:ef:e2:03:00:da:a2:
         bc:d9:d9:c3:25:c9:2c:64:0d:12:40:c1:15:56:c1:ea:43:48:
         64:9e:17:16:3e:13:e0:3f:0a:fe:03:67:02:0c:61:e1:60:e5:
         3f:23:25:3d:13:49:59:54:27:bb:f7:6a:f3:5e:ef:53:5f:a7:
         cc:ca:32:36:9f:4f:c6:44:1c:f6:c7:0b:d6:ec:6b:38:09:50:
         a6:6c:d6:4b:9b:60:78:7f:61:93:07:64:cf:94:de:b1:33:b4:
         39:30:12:bb:ec:20:1d:0d:ce:10:e7:61:61:e0:87:aa:92:57:
         6e:d6:dd:04:ed:87:4e:67:1a:dc:e5:bb:6f:56:4a:f8:3f:ae:
         63:67:7b:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 05:14:33 2026 by rpki-client