Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5/a76cef73-8d84-320c-80d4-c259fca41903.roa
File:                     a76cef73-8d84-320c-80d4-c259fca41903.roa (raw, json)
Hash identifier:          SL9ZX5o5RwL32hsizfLYYd16VuQGtUcNULbCRY8J+l8=
Subject key identifier:   A1:0C:D5:CD:4C:2B:7A:8E:A6:CF:D3:D5:9D:08:9C:33:38:40:DE:18
Certificate issuer:       /CN=c7f28602-ca8c-4d41-8405-9ee13915b8a5
Certificate serial:       010D0C9F4328584E3E5F3DCA067D49E03F39E480
Authority key identifier: A1:9A:97:C9:16:64:74:01:8E:7A:DF:EB:3C:A8:FC:DB:BD:64:A8:71
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5/a76cef73-8d84-320c-80d4-c259fca41903.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     10804
IP address blocks:        23.174.216.0/24 maxlen: 24
                          2607:a3c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5/c7f28602-ca8c-4d41-8405-9ee13915b8a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5/c7f28602-ca8c-4d41-8405-9ee13915b8a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:3d:ca:06:7d:49:e0:3f:39:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f28602-ca8c-4d41-8405-9ee13915b8a5
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=23962564-a3f8-432d-82a0-2dcb24ae95fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1a:41:02:37:19:7e:53:1a:26:f3:85:2f:6d:
                    78:34:0b:40:27:dd:71:71:81:b3:e4:28:a1:c5:e1:
                    49:e3:b6:4f:1b:39:00:b1:a0:9a:16:a2:34:3e:96:
                    aa:e6:bd:3d:8c:e9:5f:c4:ab:85:b1:c9:f4:42:c3:
                    78:20:7c:3f:bd:aa:7f:98:ba:23:f5:93:16:43:52:
                    ae:a4:d6:a8:95:ba:6d:39:5f:f7:a3:8a:00:a6:bc:
                    5a:5f:10:70:63:fb:a4:e1:15:b6:07:a5:3e:f7:89:
                    24:b9:38:21:37:08:b2:26:31:d9:10:ae:9b:be:15:
                    83:62:8e:c8:81:3b:29:ba:3e:8a:3b:1a:0d:af:06:
                    d2:66:f4:8e:0e:86:21:5b:b5:3d:b2:a6:f6:bd:95:
                    a7:c7:c3:9e:d0:f1:03:70:38:e9:61:0d:80:80:55:
                    6f:b3:19:62:e2:42:4a:c1:80:ca:fa:d1:99:41:b4:
                    87:ac:67:4c:0b:cf:c0:df:b6:b2:ff:9e:55:df:2f:
                    09:18:a0:d3:4b:90:78:e4:ae:66:60:b8:9e:9f:23:
                    44:dc:1f:01:15:2c:cc:d7:68:71:cb:1f:9d:39:bf:
                    28:2a:32:06:8e:3d:bc:89:31:c6:2e:0f:0d:85:04:
                    29:1f:9f:74:39:f8:05:c0:2a:65:07:5f:54:65:c5:
                    98:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:0C:D5:CD:4C:2B:7A:8E:A6:CF:D3:D5:9D:08:9C:33:38:40:DE:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5/a76cef73-8d84-320c-80d4-c259fca41903.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5/c7f28602-ca8c-4d41-8405-9ee13915b8a5.crl

            X509v3 Authority Key Identifier:
                keyid:A1:9A:97:C9:16:64:74:01:8E:7A:DF:EB:3C:A8:FC:DB:BD:64:A8:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7f28602-ca8c-4d41-8405-9ee13915b8a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.174.216.0/24
                IPv6:
                  2607:a3c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:00:26:b2:ce:51:0c:e6:e5:bb:c9:00:f7:81:56:f6:93:73:
         7a:9b:32:81:2b:a1:c0:3b:09:b4:7b:7b:ff:fa:70:0b:f1:01:
         4e:1f:73:d7:95:ee:be:29:15:1d:3f:7e:c3:86:eb:22:c8:64:
         3a:7c:6c:a5:29:38:8b:9d:72:98:fb:c3:7c:fc:33:b4:ff:66:
         ec:29:dd:00:58:0d:17:a6:22:b2:17:65:d6:3d:e9:95:29:7b:
         e6:85:81:a2:8d:60:a4:23:d2:da:0e:9f:d0:d7:9d:fe:ca:d1:
         20:22:e9:a6:c0:2e:2c:75:59:34:ae:5e:8b:89:63:59:84:c8:
         1b:73:e7:eb:8a:61:42:66:8d:55:24:eb:3f:42:d4:29:a1:45:
         d8:b2:d1:34:6c:b7:ca:e2:b9:6e:d2:5f:8c:c0:c6:34:04:bf:
         7d:03:c3:11:b2:82:db:2f:bb:4f:d7:f8:e5:ce:bc:8c:49:36:
         fc:02:50:a7:72:08:a0:8b:81:ea:85:c1:d6:04:a2:ae:bd:60:
         2c:e8:9d:46:5a:7d:0f:5e:f4:50:2c:5a:06:f4:2f:83:64:8b:
         b8:0c:5c:1c:a7:1d:c9:e9:be:7f:06:9e:1e:13:9f:aa:2f:ae:
         47:6f:ae:72:10:80:e5:7e:7e:01:da:e2:9d:c4:ff:6c:22:a2:
         0d:23:2f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:04:11 2026 by rpki-client