Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/7bb315fa-4a6c-3a41-adec-89f44f57038f.roa
File:                     7bb315fa-4a6c-3a41-adec-89f44f57038f.roa (raw, json)
Hash identifier:          MsKVntwAMUC8B9Q0lUf1lPYwUY8MoGviKlPCl6YEPyk=
Subject key identifier:   03:C3:92:76:23:E2:2E:85:67:AA:B5:F6:B5:A0:23:FF:01:04:F8:E3
Certificate issuer:       /CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1
Certificate serial:       010D0C9F4328584DBC4B8702668B52BAFBC883C0
Authority key identifier: 68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/7bb315fa-4a6c-3a41-adec-89f44f57038f.roa
Signing time:             Tue 05 May 2026 18:45:43 +0000
ROA not before:           Tue 05 May 2026 18:45:43 +0000
ROA not after:            Wed 29 Jul 2026 20:40:31 +0000
asID:                     46345
IP address blocks:        23.178.0.0/24 maxlen: 24
                          23.178.1.0/24 maxlen: 24
                          23.252.224.0/20 maxlen: 20
                          199.4.190.0/24 maxlen: 24
                          2606:7480::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bc:4b:87:02:66:8b:52:ba:fb:c8:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcc6c9d5-36d6-4923-a2ae-61e4acd094c1
        Validity
            Not Before: May  5 18:45:43 2026 GMT
            Not After : Jul 29 20:40:31 2026 GMT
        Subject: CN=c2e837ee-f22f-4109-be69-9efb92662817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:47:f3:a0:6e:eb:7c:51:fc:6e:63:14:8c:
                    a9:65:ff:29:c2:58:4d:68:ef:2c:cf:d9:ce:8f:0d:
                    43:22:3f:1d:5d:39:22:60:43:23:58:b4:b7:a9:10:
                    c4:b4:5d:78:f4:32:4e:87:2b:0d:b8:e2:55:82:91:
                    76:10:eb:03:df:47:2b:8d:ff:e0:ed:74:c2:00:8c:
                    1f:54:cc:c5:68:a2:7c:71:3c:26:c3:9e:4d:31:f1:
                    52:73:6c:56:6a:76:76:78:2e:15:e6:f8:ba:db:a2:
                    0f:e8:7d:85:ff:c6:19:4a:9f:d8:fc:13:43:15:18:
                    52:31:e6:f8:19:99:66:46:ff:9f:c8:85:a4:8d:6c:
                    fc:15:15:b8:85:1e:9a:4b:d8:2a:ce:22:18:e3:cb:
                    e1:c9:27:d5:e0:1c:99:82:ef:b8:3a:f6:d8:dd:ab:
                    dc:88:13:31:00:f8:78:8a:46:55:24:bf:8b:0f:65:
                    fd:3e:e7:82:05:84:7e:2c:45:8c:2d:5d:b2:44:d9:
                    ef:1d:a8:ad:57:db:30:c0:ac:53:15:1e:0c:aa:6a:
                    b2:78:9c:53:17:e9:b3:a4:8a:b1:f8:6f:94:ba:3f:
                    7a:e3:80:70:87:89:e5:72:53:ff:91:ba:3d:68:d9:
                    6f:1f:4a:79:f8:fa:fb:36:2a:8d:8b:7d:db:42:84:
                    fe:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C3:92:76:23:E2:2E:85:67:AA:B5:F6:B5:A0:23:FF:01:04:F8:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/7bb315fa-4a6c-3a41-adec-89f44f57038f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.crl

            X509v3 Authority Key Identifier:
                keyid:68:A6:0E:B8:19:17:FE:92:81:B0:1F:29:56:E3:1C:60:79:A9:17:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dcc6c9d5-36d6-4923-a2ae-61e4acd094c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.0.0/23
                  23.252.224.0/20
                  199.4.190.0/24
                IPv6:
                  2606:7480::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:af:28:cd:66:5a:d3:0f:d7:12:de:f9:ce:9e:fa:e3:1b:83:
         7e:5d:75:63:89:1f:c4:64:44:ac:a1:95:28:5e:2f:04:27:f8:
         98:4f:b2:f7:a5:95:db:2b:7b:f8:3e:ea:8d:4f:ec:a3:79:03:
         23:ec:38:23:79:fa:6b:63:f9:7e:9a:30:e3:3d:7b:8a:6b:92:
         ee:47:17:a8:93:09:c8:94:bc:76:22:c6:a9:86:79:b9:4d:d4:
         6c:08:f6:2c:bf:73:5b:85:89:cd:5a:85:51:85:70:31:7b:70:
         1a:1f:c3:f5:97:e5:15:17:7b:cb:b8:fc:c3:54:0a:c7:53:64:
         12:5f:4d:9b:a7:18:63:f7:50:59:40:90:83:e6:d2:d6:0b:b0:
         4d:34:c5:c2:69:e5:32:06:ba:b4:c0:5a:ee:1d:6d:98:98:b9:
         20:76:76:37:fc:f8:10:df:98:94:6f:b8:b3:31:4d:87:d9:00:
         87:69:6b:91:08:c2:aa:16:af:84:87:75:8b:a2:f4:c9:16:b2:
         43:bf:c4:54:28:c5:2e:95:de:e6:2b:3f:4e:8e:d0:83:32:be:
         8f:73:a5:19:d8:16:03:95:2b:8a:df:07:4c:f4:46:48:f6:a3:
         1a:ba:32:31:6d:9e:b5:ef:ff:62:23:55:a9:52:40:84:1d:b4:
         73:7a:67:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 00:53:02 2026 by rpki-client