Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/22c02cfb-6281-3bcc-8ac7-bb79c89e919e.roa
File:                     22c02cfb-6281-3bcc-8ac7-bb79c89e919e.roa (raw, json)
Hash identifier:          RrnpWF+S555tliYVtP7QrpxHtm1sUSH6XrfjvU46ZzU=
Subject key identifier:   95:8A:78:CF:67:4D:FB:06:90:B5:33:FE:0E:46:38:6A:04:E0:35:96
Certificate issuer:       /CN=7c534b20-f6a2-45cc-b3f2-861233813f8e
Certificate serial:       010D0C9F4328584D4D5A4BCDF6F98BCEC04DB200
Authority key identifier: 42:1D:92:DA:79:7A:1F:E8:F1:48:1C:A1:46:B6:70:3E:FD:E3:ED:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/22c02cfb-6281-3bcc-8ac7-bb79c89e919e.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     36140
IP address blocks:        23.161.64.0/24 maxlen: 24
                          2620:58:c400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:4b:cd:f6:f9:8b:ce:c0:4d:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c534b20-f6a2-45cc-b3f2-861233813f8e
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=163e0d53-6a0e-41c4-b6c8-bf7d04f835ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bb:9d:02:23:11:a4:98:5a:72:dc:33:39:4c:
                    e9:4e:64:a4:eb:86:a1:d8:8d:cd:11:64:1c:63:b0:
                    18:a6:7c:c3:c0:8e:e9:5c:9b:da:86:de:0c:24:fa:
                    2f:b3:9a:bf:72:35:eb:c5:48:74:e5:76:8c:db:46:
                    e0:7e:b1:10:9c:ab:d7:27:69:dd:c7:df:3c:79:db:
                    af:52:a3:c0:d8:c9:f5:8d:60:86:b2:d6:08:63:99:
                    4d:9b:89:de:64:c1:bd:6d:77:f0:98:2a:c0:ef:44:
                    5a:94:a8:87:1f:8f:7c:0b:40:fd:ce:67:86:85:16:
                    4d:24:a3:42:92:53:8d:d6:af:47:d7:4d:82:c5:6b:
                    03:cc:b1:98:7c:7f:d5:1a:2a:07:23:9e:7d:16:6f:
                    02:3b:2c:07:ad:06:af:bf:d3:de:8c:fb:12:23:aa:
                    4c:a1:dc:08:af:42:21:ad:4e:11:49:ae:28:23:d0:
                    b8:cc:c3:5f:f4:c8:02:69:3f:b8:58:c4:b1:a5:06:
                    9f:68:a4:e8:72:6f:20:18:c5:2e:63:b6:04:8f:cc:
                    a0:ae:2e:61:a8:18:63:55:1c:ca:f8:94:b6:58:81:
                    bf:44:7a:58:91:16:3e:3b:f7:26:6d:f2:31:77:ab:
                    aa:90:c7:1a:d2:c7:14:69:fb:75:75:78:13:f2:79:
                    3b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8A:78:CF:67:4D:FB:06:90:B5:33:FE:0E:46:38:6A:04:E0:35:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/22c02cfb-6281-3bcc-8ac7-bb79c89e919e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.crl

            X509v3 Authority Key Identifier:
                keyid:42:1D:92:DA:79:7A:1F:E8:F1:48:1C:A1:46:B6:70:3E:FD:E3:ED:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.64.0/24
                IPv6:
                  2620:58:c400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:1f:4e:a6:08:9a:9d:49:1f:ff:be:ad:60:1d:d6:2e:54:e9:
         8f:94:d0:22:17:ef:74:cc:6e:3a:25:7e:60:1b:51:2a:3d:71:
         7c:9a:5a:d4:1f:54:30:02:5a:f3:b0:9f:8b:8c:68:8e:66:3a:
         a3:59:11:5c:3f:f7:95:36:2e:0b:a6:26:43:ba:9d:b2:cd:c6:
         a4:ab:db:2c:74:1e:4b:3c:df:41:f4:63:5b:f8:85:4d:75:9b:
         00:42:0d:70:2c:46:ef:67:b9:17:fd:06:4f:24:b3:e4:75:05:
         b0:23:89:85:19:9d:67:ec:53:51:9b:b2:4c:b4:e8:f9:4e:88:
         bd:ea:07:76:e9:c7:8b:f5:b8:87:b7:b0:a6:a9:4e:fd:88:2a:
         cb:20:dc:cb:a2:72:93:28:ba:c5:d7:2b:bd:87:50:a2:0d:d8:
         bf:37:ba:7c:4c:a6:02:c9:17:89:84:9d:13:78:b6:c2:c9:7a:
         4e:a1:90:ef:62:03:23:83:1b:c5:98:b9:04:fb:f4:83:a6:f7:
         27:53:26:ef:43:c1:47:17:87:16:79:5a:d0:8d:4d:75:ba:4e:
         58:70:12:c2:19:1b:5e:30:68:a1:f2:08:01:92:8a:53:04:4a:
         08:3c:ec:d8:b5:06:15:48:8a:c4:b9:7e:2b:8a:f9:79:7d:ec:
         94:da:02:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 09:30:38 2026 by rpki-client