Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b3319b60-b13b-4456-ba8f-8bd3105bedc7/b9049cc7-4a8b-36be-9cf8-75addec0581f.roa
File:                     b9049cc7-4a8b-36be-9cf8-75addec0581f.roa (raw, json)
Hash identifier:          6iz3CmsGuxCX/RfshbpRJKrV8Qg7GJbzTXzFoNxuOtc=
Subject key identifier:   4F:B0:AF:43:39:0B:AC:F5:71:EF:50:60:0D:71:3D:E2:21:D9:DA:B8
Certificate issuer:       /CN=b3319b60-b13b-4456-ba8f-8bd3105bedc7
Certificate serial:       010D0C9F4328584D7ADAF1F3EADD5562B39CC980
Authority key identifier: 21:74:D9:2A:68:5E:F3:AB:54:8B:30:73:31:0A:15:59:8A:6B:18:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b3319b60-b13b-4456-ba8f-8bd3105bedc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b3319b60-b13b-4456-ba8f-8bd3105bedc7/b9049cc7-4a8b-36be-9cf8-75addec0581f.roa
Signing time:             Sun 12 Apr 2026 08:11:20 +0000
ROA not before:           Sun 12 Apr 2026 08:11:20 +0000
ROA not after:            Sat 11 Jul 2026 02:57:59 +0000
asID:                     53572
IP address blocks:        23.158.168.0/24 maxlen: 24
                          23.158.184.0/24 maxlen: 24
                          2602:292::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b3319b60-b13b-4456-ba8f-8bd3105bedc7/b3319b60-b13b-4456-ba8f-8bd3105bedc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b3319b60-b13b-4456-ba8f-8bd3105bedc7/b3319b60-b13b-4456-ba8f-8bd3105bedc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b3319b60-b13b-4456-ba8f-8bd3105bedc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:da:f1:f3:ea:dd:55:62:b3:9c:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3319b60-b13b-4456-ba8f-8bd3105bedc7
        Validity
            Not Before: Apr 12 08:11:20 2026 GMT
            Not After : Jul 11 02:57:59 2026 GMT
        Subject: CN=d0034cff-2980-4a1f-b52c-e057f9fa774d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a3:93:ce:75:5e:51:0a:89:10:40:48:cf:54:
                    a6:7f:c9:92:c8:ea:65:15:48:88:36:20:36:7a:2e:
                    a5:81:2a:dc:18:e9:43:43:c9:b0:20:33:44:fb:50:
                    90:50:74:33:30:95:fd:33:45:50:9a:80:d3:30:5d:
                    e2:40:6d:5c:09:a3:1b:9c:54:28:68:57:77:36:72:
                    57:f5:32:ae:7b:90:d6:6b:f8:bf:39:d9:79:b0:12:
                    60:fd:d1:0b:de:78:13:e8:ba:7d:10:32:79:cf:1c:
                    0d:6c:a5:76:83:97:19:39:26:d8:8c:fc:fe:5a:e4:
                    68:90:e6:75:c1:05:76:fa:14:63:22:40:a3:9c:7b:
                    a6:e6:be:2b:c6:aa:b4:cf:07:be:42:52:58:4c:d6:
                    d6:34:5c:30:89:ae:29:8a:38:c8:72:7c:52:f1:86:
                    9e:5d:46:1d:be:50:d6:4a:33:47:ad:50:f5:46:24:
                    e0:64:29:b9:1c:f7:e8:e0:87:d2:36:35:fc:e2:12:
                    dc:59:d6:92:11:c9:59:7a:66:8f:1b:a4:66:e0:82:
                    b2:9d:e3:b3:18:16:43:c7:d3:73:02:48:a8:7e:d0:
                    85:04:bc:a6:ee:5b:67:33:f9:5c:be:e7:8d:f8:7b:
                    7f:e0:6d:04:d9:be:b7:66:01:fb:4d:68:e7:3b:1a:
                    1d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B0:AF:43:39:0B:AC:F5:71:EF:50:60:0D:71:3D:E2:21:D9:DA:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b3319b60-b13b-4456-ba8f-8bd3105bedc7/b9049cc7-4a8b-36be-9cf8-75addec0581f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b3319b60-b13b-4456-ba8f-8bd3105bedc7/b3319b60-b13b-4456-ba8f-8bd3105bedc7.crl

            X509v3 Authority Key Identifier:
                keyid:21:74:D9:2A:68:5E:F3:AB:54:8B:30:73:31:0A:15:59:8A:6B:18:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b3319b60-b13b-4456-ba8f-8bd3105bedc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.168.0/24
                  23.158.184.0/24
                IPv6:
                  2602:292::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:dc:f9:8d:7d:da:1b:e4:77:8e:88:43:43:ac:2d:51:79:a7:
         0f:9f:23:1b:a8:c9:6c:66:1f:2c:94:c2:7c:d8:df:cd:75:6d:
         57:9b:42:2f:d5:3b:6c:05:ac:61:15:24:f2:1d:48:fd:24:eb:
         36:79:9c:da:2f:d6:2e:40:73:8f:bf:53:45:00:a3:47:8f:2a:
         d5:98:cb:b9:4d:8d:d4:fe:fc:c7:fd:e1:92:b7:d7:31:61:51:
         58:e0:b2:00:29:df:d9:a6:65:6a:2a:f7:2e:f1:5b:cc:0c:7d:
         6e:8c:1e:ad:13:27:6d:98:51:02:e7:cb:cd:5c:72:d2:62:65:
         3d:44:2e:cb:98:c4:be:c9:f2:52:bb:85:1a:53:54:66:fc:bd:
         5e:ac:1e:06:b1:b9:74:79:b8:16:ee:cc:e0:bf:a6:21:26:b6:
         18:84:1d:67:64:5a:f0:20:40:ac:99:ff:d2:c7:2d:65:3b:37:
         39:81:ad:8e:54:ea:08:d2:4d:5a:eb:ae:25:f5:e0:56:d9:3f:
         92:3c:b9:74:de:33:a5:e0:77:72:54:89:4d:cb:13:9f:bc:c8:
         83:62:55:79:d1:5a:1d:5a:a4:c4:2e:f9:4c:7b:54:cf:c5:75:
         a0:f4:d6:e2:8e:79:ae:e5:44:41:6e:32:49:c4:e2:b9:4f:b5:
         76:10:57:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:06:44 2026 by rpki-client