Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3120a416-64c3-4854-8826-abbafbd0d437/1d12b4e6-4f60-3d08-a519-ac166cf1cdd4.roa
File:                     1d12b4e6-4f60-3d08-a519-ac166cf1cdd4.roa (raw, json)
Hash identifier:          i57CxtrblWHAo/vyCQtAXWyHHfo+AA6cVO6vVkpS7E0=
Subject key identifier:   4E:20:11:0A:35:D3:88:DC:51:72:E6:A8:5B:52:E6:38:4F:47:93:6A
Certificate issuer:       /CN=3120a416-64c3-4854-8826-abbafbd0d437
Certificate serial:       010D0C9F4328584D777832CB5CD711C267015600
Authority key identifier: BE:47:B1:DF:DD:C8:DA:D8:7C:DA:A8:60:77:62:D1:74:9B:51:F2:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3120a416-64c3-4854-8826-abbafbd0d437.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3120a416-64c3-4854-8826-abbafbd0d437/1d12b4e6-4f60-3d08-a519-ac166cf1cdd4.roa
Signing time:             Sat 11 Apr 2026 03:04:57 +0000
ROA not before:           Sat 11 Apr 2026 03:04:57 +0000
ROA not after:            Fri 10 Jul 2026 03:04:57 +0000
asID:                     398730
IP address blocks:        23.190.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3120a416-64c3-4854-8826-abbafbd0d437/3120a416-64c3-4854-8826-abbafbd0d437.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3120a416-64c3-4854-8826-abbafbd0d437/3120a416-64c3-4854-8826-abbafbd0d437.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3120a416-64c3-4854-8826-abbafbd0d437.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:77:78:32:cb:5c:d7:11:c2:67:01:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3120a416-64c3-4854-8826-abbafbd0d437
        Validity
            Not Before: Apr 11 03:04:57 2026 GMT
            Not After : Jul 10 03:04:57 2026 GMT
        Subject: CN=86941f66-11e4-450a-97ac-7b5ba3137fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7c:4e:6c:f3:d4:be:b8:5c:35:fa:77:06:46:
                    ea:4a:8a:6d:50:3f:c3:6e:01:fc:bb:15:6b:c1:8f:
                    a2:8f:56:97:b3:bc:24:84:7d:90:be:a0:fb:8b:6c:
                    fb:da:90:be:32:7d:85:30:94:6d:55:33:b3:c6:25:
                    b7:e1:ef:89:17:97:0a:c2:f7:3b:6d:6b:de:06:25:
                    6d:f1:0a:4b:d6:a6:72:d1:89:aa:27:b4:b9:47:38:
                    92:99:3f:e8:aa:81:f9:3f:6e:60:f3:c5:e7:ff:ce:
                    cf:78:0d:a3:b7:0b:5f:50:c4:8a:06:3d:d5:59:dc:
                    d4:be:25:af:e3:53:96:53:b1:c9:46:26:e7:63:ff:
                    7b:c4:e1:fa:1e:41:86:d8:1a:5d:6a:4e:4d:a3:46:
                    e7:59:4d:c6:47:cf:27:e9:2d:85:aa:1a:5f:a9:87:
                    1a:c2:3d:2a:d9:40:0c:fb:8e:37:73:33:8e:b2:b8:
                    5d:4e:24:9c:e9:23:66:5d:88:d9:9f:0a:5a:c9:be:
                    1f:4e:93:b9:ab:6c:85:76:6d:2d:bc:8b:ab:b2:51:
                    b4:fd:07:a1:ca:f6:7c:f5:e4:a1:a6:f5:e8:66:25:
                    b9:34:ab:4d:b5:1b:12:c8:f3:0f:9e:43:af:80:b1:
                    5a:4c:18:7b:4d:75:47:44:18:16:8f:67:76:4b:06:
                    aa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:20:11:0A:35:D3:88:DC:51:72:E6:A8:5B:52:E6:38:4F:47:93:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3120a416-64c3-4854-8826-abbafbd0d437/1d12b4e6-4f60-3d08-a519-ac166cf1cdd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3120a416-64c3-4854-8826-abbafbd0d437/3120a416-64c3-4854-8826-abbafbd0d437.crl

            X509v3 Authority Key Identifier:
                keyid:BE:47:B1:DF:DD:C8:DA:D8:7C:DA:A8:60:77:62:D1:74:9B:51:F2:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3120a416-64c3-4854-8826-abbafbd0d437.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:4d:9f:15:e2:a6:2c:a9:bc:20:55:75:99:07:ed:8b:31:03:
         a7:37:69:85:15:44:21:b5:51:44:19:07:3b:15:50:39:db:1a:
         04:65:56:4a:51:ae:4c:db:8d:13:65:dd:10:65:68:a2:78:81:
         a9:69:5b:08:82:55:9f:51:78:f3:f7:1c:a7:2d:ab:19:61:a1:
         58:8a:4a:c0:fd:1f:f8:b8:70:c0:de:54:10:37:e9:b3:6c:e0:
         81:2e:ce:a7:0f:e2:01:95:c3:6a:d4:02:d1:9e:ac:f2:5e:86:
         d3:d9:14:db:73:ec:b8:a3:d5:c6:a3:a1:14:59:20:b7:16:91:
         18:19:3d:d7:7e:64:58:fa:40:30:91:12:84:ac:93:35:49:d3:
         82:e2:7d:d7:ec:00:77:d8:d7:21:86:3d:e7:2e:9b:0b:ea:86:
         0b:52:91:84:fc:fe:9f:7c:aa:26:39:69:6a:2f:6b:cd:0e:d2:
         e9:67:05:61:78:1c:26:42:bf:c5:e1:d4:e2:b7:ae:72:29:4e:
         91:1a:00:fb:b8:81:99:71:a4:82:84:e9:b4:e0:ad:57:13:e2:
         6d:a2:f0:41:4e:54:41:c1:3a:65:ea:f4:b4:a4:d7:86:36:83:
         e9:73:09:61:a9:f0:2b:96:5b:0f:22:34:e2:79:5f:10:e3:ca:
         c8:e2:90:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:06:43 2026 by rpki-client