Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/759818e9-91be-411b-80ff-c151bd0e221d/b3529615-bf90-30dc-97a5-476190a976c6.roa
File:                     b3529615-bf90-30dc-97a5-476190a976c6.roa (raw, json)
Hash identifier:          KHLmEs/3ZbJcUdK5ZVyoVHYqUz2w1jaME03dj0DKNeI=
Subject key identifier:   92:5E:9A:70:9A:58:3D:70:63:06:FC:3C:65:E7:FD:3E:E4:8A:AC:83
Certificate issuer:       /CN=759818e9-91be-411b-80ff-c151bd0e221d
Certificate serial:       010D0C9F4328584D60E5174A1CC74A34F1BADC00
Authority key identifier: 81:ED:43:E3:7D:EF:D2:4E:A7:11:7A:5C:18:3E:86:52:81:0A:44:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/759818e9-91be-411b-80ff-c151bd0e221d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/759818e9-91be-411b-80ff-c151bd0e221d/b3529615-bf90-30dc-97a5-476190a976c6.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     400802
IP address blocks:        23.137.92.0/24 maxlen: 24
                          2604:b20::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/759818e9-91be-411b-80ff-c151bd0e221d/759818e9-91be-411b-80ff-c151bd0e221d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/759818e9-91be-411b-80ff-c151bd0e221d/759818e9-91be-411b-80ff-c151bd0e221d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/759818e9-91be-411b-80ff-c151bd0e221d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e5:17:4a:1c:c7:4a:34:f1:ba:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759818e9-91be-411b-80ff-c151bd0e221d
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=d25522b4-6e96-4a8a-bb61-df46be71fdaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6c:1d:0f:8d:ab:2a:40:80:a2:f4:35:ef:b3:
                    f0:bc:60:0b:df:23:39:7e:7a:69:6a:a7:1e:1f:da:
                    5a:e6:bf:c3:e1:aa:82:32:3f:51:50:6d:b8:52:d0:
                    e1:e2:e1:93:77:97:d7:99:47:69:e9:bf:b9:97:8e:
                    2a:8a:aa:68:dd:e2:ac:b7:86:12:b7:8e:44:fb:64:
                    a7:a2:dd:e1:af:5a:9c:a4:8b:c1:14:19:e2:38:c6:
                    75:0f:82:c8:00:15:49:d0:d2:48:a5:ef:f7:69:c3:
                    b0:15:c9:89:7c:60:a3:de:54:8e:2b:78:e5:68:40:
                    c0:02:20:71:ab:2c:0e:2a:55:c0:55:e0:68:9b:86:
                    dd:45:d4:20:d9:f1:99:9c:b5:a6:24:08:85:68:ef:
                    74:56:a3:c0:fd:97:e1:1c:1c:fd:6c:ae:1a:58:f4:
                    49:42:bc:d3:ff:f3:05:69:8f:fe:53:1f:d1:fb:01:
                    d9:9a:9c:72:42:8f:ea:44:3f:bb:a1:06:7f:5b:d5:
                    0f:0b:15:6d:b7:4d:47:81:b3:0b:87:14:f8:50:4f:
                    78:52:18:a4:cd:7e:9b:06:8f:d7:20:16:66:f7:cb:
                    84:12:80:e5:f8:00:58:ba:98:5c:ff:ba:7b:d7:b1:
                    e1:e6:50:15:01:7d:08:a5:19:6e:c4:c9:6a:43:9d:
                    76:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5E:9A:70:9A:58:3D:70:63:06:FC:3C:65:E7:FD:3E:E4:8A:AC:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/759818e9-91be-411b-80ff-c151bd0e221d/b3529615-bf90-30dc-97a5-476190a976c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/759818e9-91be-411b-80ff-c151bd0e221d/759818e9-91be-411b-80ff-c151bd0e221d.crl

            X509v3 Authority Key Identifier:
                keyid:81:ED:43:E3:7D:EF:D2:4E:A7:11:7A:5C:18:3E:86:52:81:0A:44:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/759818e9-91be-411b-80ff-c151bd0e221d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.92.0/24
                IPv6:
                  2604:b20::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:a4:e6:e9:e4:32:6e:5a:1f:96:bf:f2:d5:fd:b2:a2:af:68:
         c6:cb:27:ad:60:c8:1e:df:08:80:8b:5b:11:e3:51:de:0f:9d:
         33:25:7a:28:71:3c:89:0a:74:f9:34:7f:6b:60:94:33:43:46:
         37:01:7b:b7:20:6c:47:e0:a3:2a:f6:16:69:51:ce:e6:32:15:
         c4:47:8e:b3:da:31:b2:aa:52:ea:13:59:6f:09:09:95:2e:fe:
         fd:5f:93:c8:d6:1a:75:92:53:3e:b1:4a:1d:3f:d9:55:61:ef:
         1f:fc:50:4a:2e:53:df:da:66:16:a3:b3:14:16:bc:c2:e1:e9:
         be:b9:42:5c:13:6d:b1:06:e8:99:89:33:96:2c:75:71:f1:6a:
         77:38:ce:dd:20:f6:91:c9:5c:5b:c7:90:55:06:6f:ee:2c:f5:
         56:e4:7f:c6:57:87:e2:74:6a:6a:3b:64:08:8e:88:cc:6c:e4:
         e7:14:19:6b:94:d0:82:c7:57:09:84:55:63:01:e0:82:fa:57:
         5e:e4:18:0a:de:e4:a4:ff:81:02:73:87:af:25:7c:4b:3b:0c:
         ca:83:c0:49:8e:ef:46:a6:6f:fa:55:7f:1a:33:2c:c7:a0:81:
         fa:69:5b:d9:ea:23:41:57:c2:34:97:d8:60:50:b9:a7:57:bb:
         b3:22:05:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:28:07 2026 by rpki-client