Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa
File:                     9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa (raw, json)
Hash identifier:          mT/y3EPyxSO0gtZcDc7ma/hdRLolWsw55BuA6RFySEc=
Subject key identifier:   B1:C9:5C:C4:DE:07:F6:E2:A8:F4:90:D3:3F:50:C9:1A:AD:4F:54:4D
Certificate issuer:       /CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a
Certificate serial:       010D0C9F4328584D44FA3D2D822EC8CF4C5F8980
Authority key identifier: 8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     948
IP address blocks:        23.152.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:3d:2d:82:2e:c8:cf:4c:5f:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c36a2b8-42c3-42fa-835e-49b2612cc29a
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=95d289ac-953f-4a11-ae14-af97f72ba74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bc:0b:93:fd:d3:64:d5:69:46:ec:77:4e:8f:
                    71:45:0e:f5:63:e2:73:76:70:92:1a:cb:e1:81:59:
                    eb:c6:67:0d:ae:e9:3e:77:57:7e:0f:04:6f:51:ae:
                    4b:84:ba:1d:fe:ce:06:90:2b:25:e6:ba:77:4e:05:
                    32:88:b0:99:37:bc:82:88:bf:83:06:9f:53:93:8b:
                    ff:9b:94:d7:70:15:b9:92:47:55:30:cd:de:47:9b:
                    bb:76:a6:fa:06:bc:e2:71:5f:a3:93:7b:3e:0f:bb:
                    75:74:65:7c:9b:95:42:df:6a:31:ba:dc:9e:9b:50:
                    af:8d:f9:3b:a1:6b:a6:69:a1:c1:af:36:e2:21:75:
                    1f:b4:40:66:02:87:02:b2:2a:27:9e:29:e2:ea:74:
                    79:3a:0b:36:df:c8:2b:81:e4:e5:d8:18:59:7e:30:
                    b9:78:df:96:3c:1e:2a:c3:e7:b9:f0:34:f1:7e:35:
                    23:e4:fb:82:72:36:ef:0a:76:a1:32:6a:47:5a:ff:
                    f5:be:08:e0:07:e7:f3:39:f6:1b:b8:8c:c6:65:12:
                    ff:33:e8:17:96:f5:93:32:10:ba:33:9a:27:d1:8b:
                    d6:20:bc:d4:ff:cf:02:b9:3a:15:f4:9f:c3:78:08:
                    68:91:16:16:86:ca:a2:93:38:96:95:1c:e5:26:c6:
                    cc:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C9:5C:C4:DE:07:F6:E2:A8:F4:90:D3:3F:50:C9:1A:AD:4F:54:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/9fbd7817-7785-3e8e-b5d8-9a8b412a3f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a/8c36a2b8-42c3-42fa-835e-49b2612cc29a.crl

            X509v3 Authority Key Identifier:
                keyid:8A:4B:04:14:87:83:45:20:69:D3:E3:19:20:AF:ED:0B:62:19:3B:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8c36a2b8-42c3-42fa-835e-49b2612cc29a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:32:97:53:c1:34:09:4d:09:bf:57:a0:4e:7f:b9:27:67:fd:
         a8:72:5e:1a:50:53:66:f7:86:8e:7f:a3:36:78:9b:4a:07:93:
         1c:b4:46:eb:63:34:63:e5:21:34:02:11:f0:33:1e:91:c7:6d:
         52:c4:ba:96:d5:86:83:54:7b:e2:03:56:a0:27:85:db:6e:38:
         fc:fd:ee:fd:7b:28:4d:ef:ab:ee:da:6b:51:49:9b:2c:65:88:
         1a:cf:1f:c3:4a:49:23:0a:fb:32:e4:72:e7:3e:1c:6b:37:fa:
         b5:33:32:ab:71:44:9a:5d:c4:86:e0:f2:e9:0b:a0:0f:75:4c:
         8b:64:ed:ca:20:c7:9a:d6:45:96:9c:bd:4b:83:19:46:e1:fe:
         0f:b0:01:6b:16:bc:9a:0f:c1:88:ae:ef:57:4a:c2:ad:58:8c:
         28:29:0f:3c:71:b3:83:9e:17:5b:30:11:ed:72:78:5b:cc:a0:
         ce:1e:43:67:7f:5d:82:45:47:19:f9:1f:66:4a:0b:e1:50:95:
         4e:fa:2b:98:a5:89:fd:29:c7:4e:fe:cb:8e:10:dc:fc:7a:a4:
         0c:17:09:5d:16:79:b6:94:79:54:71:70:f8:a6:07:f9:48:27:
         d6:a9:db:94:23:3f:21:a1:f7:cc:23:d2:9f:82:7a:83:03:fa:
         75:aa:ff:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:37:18 2026 by rpki-client