Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/c951fbca-1160-3a04-8f73-86bff993a39c.roa
File:                     c951fbca-1160-3a04-8f73-86bff993a39c.roa (raw, json)
Hash identifier:          SregBs9/D3ROijKR3lwfCTQiSGqDa0iIk1TFm8kKH4g=
Subject key identifier:   35:5A:8C:BE:6F:1F:19:66:5E:5B:D5:53:8C:3A:3C:47:34:AA:98:D4
Certificate issuer:       /CN=8c199b52-1ddd-4842-a068-427ed30c6151
Certificate serial:       010D0C9F4328584E4989D28228B1F32E38EE5D60
Authority key identifier: 83:D5:3C:3D:74:13:3C:E7:56:17:85:2A:D6:B6:51:DC:61:8A:F0:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/c951fbca-1160-3a04-8f73-86bff993a39c.roa
Signing time:             Thu 25 Jun 2026 09:00:13 +0000
ROA not before:           Thu 25 Jun 2026 09:00:13 +0000
ROA not after:            Wed 23 Sep 2026 09:00:13 +0000
asID:                     396263
IP address blocks:        23.149.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/8c199b52-1ddd-4842-a068-427ed30c6151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/8c199b52-1ddd-4842-a068-427ed30c6151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:49:89:d2:82:28:b1:f3:2e:38:ee:5d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c199b52-1ddd-4842-a068-427ed30c6151
        Validity
            Not Before: Jun 25 09:00:13 2026 GMT
            Not After : Sep 23 09:00:13 2026 GMT
        Subject: CN=0d854034-38f7-43cc-b252-0f8f60b6079d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c9:e3:4b:a4:99:ed:92:50:9a:b2:06:df:33:
                    b8:55:07:61:75:87:67:2b:25:76:f2:bc:5d:bc:56:
                    a5:c5:1d:9e:d9:52:79:81:48:3d:a9:d0:a1:97:7f:
                    2d:93:b0:a8:15:e2:41:d3:55:cf:bd:d9:10:75:9e:
                    b6:7a:cb:18:60:ac:d2:d6:b6:e1:8b:c3:e5:5b:bd:
                    e2:79:52:43:07:a3:1e:fa:da:f0:96:4a:37:2c:a0:
                    6e:60:01:79:3a:a5:5a:fa:fc:d9:6c:49:52:38:36:
                    c7:a6:32:14:1a:bf:49:27:7a:78:e3:66:a1:02:ec:
                    1b:17:43:54:38:91:2e:f5:3c:d9:be:ff:9f:4f:9e:
                    5a:dd:d0:9a:8f:da:da:80:b7:7f:53:d6:64:53:97:
                    f2:5f:b8:c5:c1:06:9c:fb:6d:6f:d5:de:b0:43:fb:
                    53:78:81:83:1f:a9:af:a0:0c:b0:91:de:c9:bc:54:
                    be:6c:f5:60:b6:8b:f6:4b:74:3a:67:f7:0c:a6:40:
                    34:b7:ac:07:d8:e9:a1:55:86:f4:7e:de:56:91:0e:
                    7b:f4:8b:ea:48:7e:92:c5:47:16:f9:16:7f:3a:a6:
                    d0:41:49:d2:ff:6a:2a:5d:82:48:06:36:b1:90:0e:
                    94:f2:56:8b:10:d1:7c:fa:34:0b:6c:e4:72:51:cc:
                    01:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5A:8C:BE:6F:1F:19:66:5E:5B:D5:53:8C:3A:3C:47:34:AA:98:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/c951fbca-1160-3a04-8f73-86bff993a39c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151/8c199b52-1ddd-4842-a068-427ed30c6151.crl

            X509v3 Authority Key Identifier:
                keyid:83:D5:3C:3D:74:13:3C:E7:56:17:85:2A:D6:B6:51:DC:61:8A:F0:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8c199b52-1ddd-4842-a068-427ed30c6151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:38:a0:ef:de:70:bb:99:b0:5f:17:92:7d:93:71:62:81:16:
         49:cb:ee:30:5f:ae:d1:db:ed:b9:97:4e:91:23:33:94:23:f5:
         fe:04:23:4a:13:8f:8e:78:78:49:74:86:6c:71:02:08:91:63:
         c0:e1:29:6f:ff:69:2c:83:aa:d3:3d:16:c7:fc:66:22:fa:86:
         5b:bf:c6:c3:5a:9c:05:a1:bc:5f:2f:4b:92:fb:46:fe:55:2c:
         45:8c:37:3f:c3:83:0e:91:c8:ee:b2:b9:d7:49:17:1a:a1:65:
         6c:7e:3e:36:95:08:47:3f:f5:fd:33:c6:94:5e:e4:7a:51:c8:
         75:b7:2e:88:8d:b8:23:0d:7f:a6:f5:34:fe:42:5c:21:af:db:
         07:0d:21:10:d7:82:53:ef:5d:a6:a2:d8:ab:57:b9:49:e9:af:
         6f:0c:36:23:e9:a2:e2:fa:f4:6e:36:15:20:a0:31:ed:a2:3d:
         36:05:77:46:a9:1b:6c:bf:d7:df:59:86:76:06:b0:d4:76:7c:
         41:64:ba:da:18:62:39:62:67:8a:b4:ef:28:78:46:c0:c1:f0:
         1c:80:a6:02:70:1e:cd:77:61:49:31:76:e8:cd:9e:98:2c:65:
         ee:51:1f:42:f5:29:4f:17:99:e6:4f:19:f1:06:ed:4a:e5:b7:
         f8:d5:d4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 05:26:03 2026 by rpki-client