Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa
File:                     663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa (raw, json)
Hash identifier:          Vne1k6UYI7RMq6kYsxzNuBGKV9WEdAvhs5+eYzTTP+I=
Subject key identifier:   E2:E6:A2:7D:C4:EC:A2:24:0A:CF:16:70:BB:62:49:A1:58:1D:E0:D2
Certificate issuer:       /CN=d884379a-447d-445c-b465-3fe894aa66ec
Certificate serial:       010D0C9F4328584D571F97CC16B9BA1E68B00080
Authority key identifier: 09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa
Signing time:             Mon 30 Mar 2026 13:00:30 +0000
ROA not before:           Mon 30 Mar 2026 13:00:30 +0000
ROA not after:            Sun 28 Jun 2026 13:00:30 +0000
asID:                     40712
IP address blocks:        23.134.244.0/24 maxlen: 24
                          2602:f6e2::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:57:1f:97:cc:16:b9:ba:1e:68:b0:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d884379a-447d-445c-b465-3fe894aa66ec
        Validity
            Not Before: Mar 30 13:00:30 2026 GMT
            Not After : Jun 28 13:00:30 2026 GMT
        Subject: CN=07c8b047-003b-4fc9-b235-ef906e555c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f0:8f:6d:46:eb:1b:10:61:da:fb:3b:76:0f:
                    82:41:db:07:c7:a3:14:1a:ec:e6:69:de:b5:98:65:
                    41:22:60:51:66:46:71:32:6d:59:b6:c7:c8:bd:b3:
                    68:ac:f7:dc:d8:7e:42:e6:ec:c9:3b:ed:d5:b7:be:
                    78:c2:56:36:cc:77:00:05:b3:f7:27:67:f5:a4:a0:
                    76:b7:61:c4:12:47:dd:9c:86:86:d2:0c:a2:82:46:
                    ef:c7:e0:1c:4d:d7:cc:c7:d9:3d:8a:c0:d8:97:a4:
                    6b:4a:e3:a9:77:82:53:04:73:81:0b:c2:77:0f:e4:
                    7c:d9:09:cb:13:31:d9:25:bc:bc:ce:50:53:5a:4d:
                    a5:8d:02:66:8c:fc:f3:ca:0c:51:95:fe:b1:e5:d6:
                    79:82:d9:24:c8:4d:f7:08:f7:a3:5d:55:82:fb:75:
                    65:ab:b5:55:31:fd:06:fe:d5:1d:f3:9b:90:e5:c6:
                    95:53:68:bd:22:d7:82:70:4b:82:41:d4:11:5c:c2:
                    2d:30:21:97:50:dd:b9:a0:37:2f:6f:35:16:83:c5:
                    47:d7:bb:b0:42:12:25:11:f3:a8:2f:e8:34:1d:3a:
                    d4:35:74:cf:0a:bc:be:23:22:19:d7:53:cb:2b:90:
                    54:18:f8:30:8e:b9:72:39:6a:80:6f:73:75:7e:a7:
                    ae:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E6:A2:7D:C4:EC:A2:24:0A:CF:16:70:BB:62:49:A1:58:1D:E0:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl

            X509v3 Authority Key Identifier:
                keyid:09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.244.0/24
                IPv6:
                  2602:f6e2::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:1b:a4:1b:af:73:e9:dd:92:d6:50:47:9e:c6:a0:53:6c:93:
         ee:81:23:56:64:5e:5c:ce:ce:ff:13:cd:7d:be:f1:9f:ff:32:
         b0:44:5d:36:3d:d7:cb:ff:2f:79:e1:5b:b5:ee:44:67:0f:a6:
         86:41:12:15:2d:db:39:db:bd:f1:67:15:04:5f:33:82:b3:0b:
         80:a3:85:4a:b3:4a:cf:0d:88:1c:4e:3f:59:e9:72:74:a4:c7:
         cc:5d:a3:1d:52:97:24:ee:50:ff:ce:dd:46:fd:36:19:ac:db:
         4d:d6:31:4f:9f:b6:f5:9e:48:69:c9:90:8e:0b:59:02:54:32:
         33:7f:77:08:9f:79:4c:44:a1:49:57:25:e8:de:23:8c:e4:0a:
         63:76:ef:10:84:17:52:88:6a:6a:86:ab:55:d6:65:1a:44:22:
         af:b5:97:5d:09:db:78:4f:9d:0f:87:97:27:43:21:50:0e:cb:
         88:6c:91:48:f1:1d:34:20:35:ab:87:c4:66:12:58:db:9f:fe:
         eb:b8:5e:ac:f7:f0:b4:52:11:f7:c0:db:e8:ad:58:1e:f8:b0:
         38:e6:91:75:f3:71:6d:80:00:17:e0:1f:6b:c9:1e:2c:23:b1:
         f2:2f:5c:fa:0d:7a:82:d5:22:ed:11:f4:03:8b:55:f2:b6:90:
         bd:5b:66:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 20:41:14 2026 by rpki-client