Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87764ab6-6bef-4cac-8229-126c25c80e9a/1e23557c-10c2-3b99-9bc0-3c741bd9cc8a.roa
File:                     1e23557c-10c2-3b99-9bc0-3c741bd9cc8a.roa (raw, json)
Hash identifier:          tKlVYzfbens1MvMThPZlX3mNllfsARmsNVNJ8PyQCs4=
Subject key identifier:   86:47:A8:7E:ED:DA:01:43:DA:98:66:70:73:74:30:93:81:2B:CC:8E
Certificate issuer:       /CN=87764ab6-6bef-4cac-8229-126c25c80e9a
Certificate serial:       010D0C9F4328584D6AAA7D1278DF9AA8F9C34200
Authority key identifier: 5D:EB:70:B0:3C:09:E5:1C:56:A7:53:BA:58:7F:30:B5:93:50:28:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87764ab6-6bef-4cac-8229-126c25c80e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87764ab6-6bef-4cac-8229-126c25c80e9a/1e23557c-10c2-3b99-9bc0-3c741bd9cc8a.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     174
IP address blocks:        23.135.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87764ab6-6bef-4cac-8229-126c25c80e9a/87764ab6-6bef-4cac-8229-126c25c80e9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87764ab6-6bef-4cac-8229-126c25c80e9a/87764ab6-6bef-4cac-8229-126c25c80e9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87764ab6-6bef-4cac-8229-126c25c80e9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:7d:12:78:df:9a:a8:f9:c3:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87764ab6-6bef-4cac-8229-126c25c80e9a
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=49e49afc-f4dd-4f0b-a75a-f2ec0c43494c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8f:8c:19:68:e9:ca:e3:f9:06:a0:c0:8e:fa:
                    75:55:f4:0a:fd:bb:dd:2a:b5:09:78:ba:f5:21:82:
                    e6:7f:0d:e7:41:6d:e3:8d:ba:ce:9d:06:7d:7b:06:
                    67:28:82:d2:66:8d:ed:67:3c:97:ed:75:8e:b9:a8:
                    fa:b1:12:2b:f3:19:15:c1:42:49:c2:48:0c:66:9f:
                    a6:40:e1:a2:c6:d7:86:93:b9:2a:71:86:6b:9c:0d:
                    66:f2:88:21:f2:52:e7:ad:36:6b:0e:e3:7e:76:d8:
                    2c:0a:eb:6b:68:d7:7f:64:c3:05:10:27:f1:e3:47:
                    e9:16:44:95:a0:50:d1:d9:07:e0:b6:0e:61:41:89:
                    a8:d9:1b:88:04:90:12:94:62:31:f1:3c:3d:54:2b:
                    cc:57:86:30:07:e3:33:a8:3c:e8:47:c8:76:41:d3:
                    15:fd:1d:53:75:d8:78:55:14:3d:63:8d:8b:68:8b:
                    ea:3b:15:c2:95:ef:49:e7:82:23:54:15:45:ea:ac:
                    90:9c:b0:44:08:21:64:21:c3:76:1a:15:b7:8a:88:
                    85:8c:5c:49:c1:2d:84:ca:26:cd:cd:e0:62:83:ae:
                    41:36:18:82:31:8c:f0:c5:d6:38:02:cf:48:91:85:
                    53:4b:1f:46:f3:b8:97:4f:9f:d1:d4:0e:69:86:ad:
                    24:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:47:A8:7E:ED:DA:01:43:DA:98:66:70:73:74:30:93:81:2B:CC:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87764ab6-6bef-4cac-8229-126c25c80e9a/1e23557c-10c2-3b99-9bc0-3c741bd9cc8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87764ab6-6bef-4cac-8229-126c25c80e9a/87764ab6-6bef-4cac-8229-126c25c80e9a.crl

            X509v3 Authority Key Identifier:
                keyid:5D:EB:70:B0:3C:09:E5:1C:56:A7:53:BA:58:7F:30:B5:93:50:28:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/87764ab6-6bef-4cac-8229-126c25c80e9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:45:20:c0:83:33:f3:c7:fd:15:9d:6a:5e:2f:09:d7:f3:39:
         12:1a:d6:e4:f9:b4:ce:e9:a2:27:9f:3a:7a:8c:b9:e7:b7:39:
         21:a9:65:04:5a:32:ed:ac:a3:59:99:fe:51:01:03:b2:28:1b:
         70:fe:02:c1:98:56:6a:24:2a:5d:90:7e:ba:e0:d5:a2:3f:04:
         a3:0c:0b:7e:45:ee:d7:c3:4f:71:56:3f:5b:f1:15:b2:32:76:
         25:e9:d4:ec:84:1c:6f:73:a2:24:41:c7:58:e0:5a:a8:7e:e0:
         f8:74:44:2a:b3:d1:3f:92:15:40:43:b2:ad:c8:4f:19:46:1b:
         1d:cb:bd:fd:86:bb:f0:b7:7a:42:5f:02:83:8f:c9:59:93:b5:
         9d:72:79:c2:89:54:36:45:55:fd:6a:7a:0a:dd:4e:ff:6e:d3:
         e1:bb:cd:0f:0a:4f:ae:fc:dc:6d:73:a7:56:1c:43:45:91:1b:
         40:0c:a5:59:53:75:f2:d1:7f:96:54:ae:6d:b6:b8:41:93:bb:
         a2:56:fc:76:df:17:8d:1a:83:fa:51:04:a0:f5:b0:9c:c5:5f:
         6a:b8:8c:78:22:5d:aa:7f:96:a8:f6:84:f2:92:88:77:bb:c4:
         99:ef:e2:71:3e:93:ff:73:be:09:bf:da:da:71:12:1e:e7:b6:
         e5:ca:84:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 06:48:48 2026 by rpki-client