Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/c73cd6ff-e1c8-3af7-864b-d86ab45b3e84.roa
File:                     c73cd6ff-e1c8-3af7-864b-d86ab45b3e84.roa (raw, json)
Hash identifier:          OPtsYNqL8mvg5FWiY+kNtp71pzxqzV4zkMpd+52qP1g=
Subject key identifier:   70:A3:93:1D:84:29:97:14:11:74:03:38:AA:B8:54:88:CA:06:DA:BB
Certificate issuer:       /CN=8139fd38-b1a1-4ea2-b95d-7f36fe09dff6
Certificate serial:       010D0C9F4328584E104ECFBA90D61CD656AEC9C0
Authority key identifier: DF:36:92:D7:C0:A4:F1:C6:D1:82:25:BF:46:5C:6B:3D:26:AC:C4:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/c73cd6ff-e1c8-3af7-864b-d86ab45b3e84.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     401561
IP address blocks:        23.130.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4e:cf:ba:90:d6:1c:d6:56:ae:c9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8139fd38-b1a1-4ea2-b95d-7f36fe09dff6
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=4d574ff4-8f50-4d11-b2b8-f05437eae047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9d:54:15:cf:e7:33:4a:51:0c:bb:7e:be:6d:
                    c3:86:27:a5:a6:97:d9:ed:86:cd:b1:2c:36:e7:50:
                    34:41:b6:30:6b:c1:48:48:9e:d7:78:33:94:9e:a6:
                    6a:5f:98:46:06:3a:59:bf:c8:f1:3b:80:76:16:78:
                    c4:61:7c:8e:27:02:b5:fe:74:9a:5b:d3:7e:a2:36:
                    79:ed:76:aa:bf:a2:bc:ea:77:c1:cb:5b:b8:f4:a6:
                    2e:be:8b:89:31:e2:d6:2e:0f:e7:50:99:e1:8c:e2:
                    3d:e1:59:9d:b7:7e:0a:d2:ca:ed:e3:ca:a5:0b:d8:
                    ec:1d:30:fa:5f:34:59:36:0c:14:67:31:65:a9:84:
                    8c:8d:8a:ec:56:35:e1:f6:e9:15:70:e4:b9:8e:28:
                    55:5b:78:c1:43:42:03:48:aa:23:1b:6a:04:ef:41:
                    da:a9:16:b6:5b:6e:22:17:58:e4:cb:c8:72:48:39:
                    88:b8:bd:97:86:81:48:a4:18:79:6e:14:a3:45:ed:
                    60:a0:fb:e5:d9:c5:91:98:5c:f5:19:f1:38:82:c6:
                    16:eb:70:cf:ad:de:0d:7b:f6:21:a6:00:3f:d0:74:
                    8f:dd:73:d2:a6:25:86:fe:06:b8:8a:d0:3d:c0:60:
                    48:9e:c6:e8:8f:25:e4:90:8e:68:83:5b:97:42:fe:
                    d4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A3:93:1D:84:29:97:14:11:74:03:38:AA:B8:54:88:CA:06:DA:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/c73cd6ff-e1c8-3af7-864b-d86ab45b3e84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.crl

            X509v3 Authority Key Identifier:
                keyid:DF:36:92:D7:C0:A4:F1:C6:D1:82:25:BF:46:5C:6B:3D:26:AC:C4:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8139fd38-b1a1-4ea2-b95d-7f36fe09dff6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:65:43:42:4a:f9:7d:e6:df:ab:b9:a5:d4:b4:c7:86:8f:83:
         aa:7d:ee:2a:6a:b4:29:ff:37:49:e3:a6:55:3d:2b:9f:c6:1a:
         fb:2f:be:4e:e3:09:70:72:92:27:3e:30:7a:82:a0:66:ab:ec:
         8f:1e:c8:0e:e6:fd:d0:63:db:b2:e8:67:c0:68:17:a1:19:ca:
         4b:1e:cd:e4:6e:59:ee:33:b2:ca:ff:84:60:25:2f:8d:7e:2b:
         16:0d:af:2b:2b:52:a4:cf:6b:30:58:aa:9a:33:ea:e0:f1:57:
         29:f8:4f:36:52:08:0c:7e:25:5b:1c:ed:9a:50:56:7b:a4:2c:
         6b:ea:98:c0:ef:77:d8:8c:a4:b9:74:43:c9:2e:84:b8:32:0a:
         69:bd:e8:6d:a2:d4:ea:6a:88:4f:c0:7f:19:12:6c:a0:e1:eb:
         67:4c:78:27:3c:1b:3d:2c:f3:3c:4c:d2:7c:a6:82:bc:ca:cb:
         3f:42:f3:c2:48:62:8f:93:16:e6:42:bc:7e:28:92:2f:ec:37:
         dc:f6:ef:74:3f:15:08:29:0f:15:c2:94:60:1b:41:68:f6:6e:
         76:6c:aa:df:3f:db:3a:d5:c5:f7:c4:3d:91:98:12:39:f1:16:
         8f:8b:c7:ee:05:2d:3e:a3:5a:a7:b7:2c:00:ad:8e:3c:1f:b4:
         e9:b5:75:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 18:31:59 2026 by rpki-client