Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/22c02cfb-6281-3bcc-8ac7-bb79c89e919e.roa
File:                     22c02cfb-6281-3bcc-8ac7-bb79c89e919e.roa (raw, json)
Hash identifier:          mFSW61QiBxpTcRNoY2vAi4CABURik3CdGJ80oSt4FOM=
Subject key identifier:   84:4E:2E:BE:9D:4F:C0:7F:43:56:97:EF:72:A7:95:A6:00:E8:D6:A3
Certificate issuer:       /CN=7c534b20-f6a2-45cc-b3f2-861233813f8e
Certificate serial:       010D0C9F4328584ED001D90E1B72ED059B658F00
Authority key identifier: 42:1D:92:DA:79:7A:1F:E8:F1:48:1C:A1:46:B6:70:3E:FD:E3:ED:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/22c02cfb-6281-3bcc-8ac7-bb79c89e919e.roa
Signing time:             Wed 12 Aug 2026 13:00:12 +0000
ROA not before:           Wed 12 Aug 2026 13:00:12 +0000
ROA not after:            Tue 10 Nov 2026 14:00:12 +0000
asID:                     36140
IP address blocks:        23.161.64.0/24 maxlen: 24
                          2620:58:c400::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d0:01:d9:0e:1b:72:ed:05:9b:65:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c534b20-f6a2-45cc-b3f2-861233813f8e
        Validity
            Not Before: Aug 12 13:00:12 2026 GMT
            Not After : Nov 10 14:00:12 2026 GMT
        Subject: CN=a8e53de4-7e79-4698-91cf-8807b0ed1063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bf:38:72:29:f1:8c:d8:c4:9e:97:f5:bd:af:
                    8f:c4:90:84:03:86:d1:a0:1d:eb:46:62:cc:23:e9:
                    70:b5:4b:10:ab:42:25:71:9c:d9:31:07:1e:32:f7:
                    14:ab:13:1e:c3:26:37:81:70:8e:b5:2f:ba:df:02:
                    43:64:d4:ff:35:dd:55:2e:76:e3:de:81:bb:be:1d:
                    07:b5:5f:f8:e9:d5:a3:19:8d:44:c9:fc:54:b7:ab:
                    d0:aa:68:dc:6f:58:1b:2c:14:79:2c:28:88:16:39:
                    f4:a0:e3:19:c0:a1:42:eb:a1:77:95:20:f8:11:a6:
                    1a:73:17:81:46:f2:2f:fd:2e:2a:c9:93:c6:f0:e2:
                    dd:e2:ce:2a:84:f9:e0:dc:76:eb:a5:7a:f3:d5:60:
                    c9:a2:61:d9:d2:5c:d8:d4:cb:6c:be:cd:6b:31:2c:
                    45:e6:64:70:7e:29:79:83:9f:9e:54:ab:2f:62:c1:
                    63:12:7b:f3:d2:2d:f9:cc:7d:54:d2:fd:d7:6e:5e:
                    be:a5:62:ce:a2:fd:b8:6b:23:d5:a6:d4:a3:b0:8a:
                    e1:47:b4:1f:f1:ef:35:a5:14:09:ba:4e:66:1d:04:
                    4c:12:b9:e9:d0:20:0e:58:99:57:40:e9:17:0b:cd:
                    d6:53:19:aa:04:84:3e:a4:a5:32:b9:a0:a5:47:5d:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4E:2E:BE:9D:4F:C0:7F:43:56:97:EF:72:A7:95:A6:00:E8:D6:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/22c02cfb-6281-3bcc-8ac7-bb79c89e919e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e/7c534b20-f6a2-45cc-b3f2-861233813f8e.crl

            X509v3 Authority Key Identifier:
                keyid:42:1D:92:DA:79:7A:1F:E8:F1:48:1C:A1:46:B6:70:3E:FD:E3:ED:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7c534b20-f6a2-45cc-b3f2-861233813f8e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.64.0/24
                IPv6:
                  2620:58:c400::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:4b:42:97:74:5c:c3:bf:cc:f9:ad:61:cc:46:9c:c4:9f:89:
         77:78:e8:be:eb:a2:f7:d0:be:82:e3:e5:0f:a4:a7:b7:02:37:
         54:27:98:08:f1:ba:4a:c7:a7:65:b4:9a:b9:e3:28:5d:76:b0:
         f5:14:63:95:60:f6:8a:a6:1f:24:e2:af:58:fe:2d:5e:9b:e0:
         c2:5c:ed:e9:36:1c:44:74:fe:ec:7f:d2:2e:a8:c1:fb:01:f2:
         aa:a5:77:7d:90:c5:9f:c0:cb:fc:07:7f:09:f2:30:91:74:ea:
         b4:76:c6:c6:37:e6:40:76:c1:cb:e2:04:2b:1b:79:8f:3a:06:
         22:62:94:92:f1:17:d7:f5:2c:f5:31:10:28:d1:89:74:62:92:
         31:b7:5f:6c:b9:54:05:13:01:53:39:0a:47:bf:ae:4e:6a:c6:
         a1:e7:2a:b4:30:ac:b7:f4:dd:1f:19:35:96:05:2f:9d:df:a6:
         d3:d0:67:5b:63:06:2b:be:f9:22:6f:b1:c2:ba:36:63:30:20:
         33:f0:ff:78:87:5d:a1:62:6c:16:72:29:38:ff:61:9f:4c:4f:
         f5:e1:1a:36:2d:fa:48:5f:33:44:62:e3:ca:c3:02:41:39:11:
         51:bc:1b:3d:f8:7e:fb:9a:05:c0:d3:df:ad:7c:1f:10:b1:cc:
         8a:ff:5a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:07:29 2026 by rpki-client