Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89c1d277-7641-3c70-9cea-851fdd81b4f6.roa
File:                     89c1d277-7641-3c70-9cea-851fdd81b4f6.roa (raw, json)
Hash identifier:          i7gjbp/BYVs3BgTaGAHN8kAD9P4tLsLj1reu+XmyGXk=
Subject key identifier:   49:59:7C:ED:F5:7B:CF:75:47:08:31:87:0B:B9:37:28:21:D3:88:B3
Certificate issuer:       /CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
Certificate serial:       010D0C9F4328584E8C8A3E43A58C7E4373BCBE80
Authority key identifier: F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89c1d277-7641-3c70-9cea-851fdd81b4f6.roa
Signing time:             Sun 19 Jul 2026 09:00:11 +0000
ROA not before:           Sun 19 Jul 2026 09:00:11 +0000
ROA not after:            Sat 17 Oct 2026 09:00:11 +0000
asID:                     12243
IP address blocks:        23.172.0.0/24 maxlen: 24
                          23.176.16.0/24 maxlen: 24
                          158.51.76.0/23 maxlen: 23
                          158.51.76.0/24 maxlen: 24
                          158.51.77.0/24 maxlen: 24
                          198.98.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8c:8a:3e:43:a5:8c:7e:43:73:bc:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa363d52-209b-47ac-aa24-f8c86d11fcb9
        Validity
            Not Before: Jul 19 09:00:11 2026 GMT
            Not After : Oct 17 09:00:11 2026 GMT
        Subject: CN=47090f6c-c686-4535-9d49-036ef9cc0129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:79:b2:3b:37:4c:f0:6c:c0:b5:09:cd:33:6b:
                    6f:ef:08:75:7e:46:bd:30:08:5e:b6:de:62:72:02:
                    8a:bf:00:3e:5c:bd:dc:f6:5d:de:7f:36:8f:3e:f5:
                    73:ef:7a:40:b5:80:73:9a:68:44:11:42:34:fd:b1:
                    a4:fc:57:ed:6f:ba:72:7e:04:9a:39:f1:c9:2b:3f:
                    f6:a3:16:82:51:8a:fb:ce:04:c6:c9:84:8f:4f:01:
                    57:ab:b3:ad:13:90:d1:2f:6a:f2:22:4f:4c:93:c1:
                    17:ad:39:0b:e7:ad:82:a3:bd:d3:2c:8d:0a:9e:49:
                    17:e3:d0:a8:21:a3:cc:26:b0:b9:32:aa:bc:8a:11:
                    1c:7c:82:ee:87:3b:ee:91:d2:29:cf:8e:e1:40:e4:
                    ca:2e:ad:b8:0f:d6:b5:f7:1e:b4:a9:6e:b4:c6:ca:
                    0d:52:f9:54:eb:77:53:1d:6b:69:f2:a5:6b:d4:a3:
                    e8:c7:7d:d0:4e:7d:4d:00:72:74:2c:ba:c1:52:92:
                    95:3a:cd:c3:89:6a:60:c1:c6:ed:d5:17:cf:2a:e2:
                    db:5b:0c:c9:f4:03:f6:1c:6d:86:5f:e0:98:7c:8f:
                    f0:9a:04:dc:07:f1:af:c7:c6:12:bf:21:ed:ba:1c:
                    98:c8:b0:9c:3d:60:e0:8f:4b:fb:d7:46:9a:6b:29:
                    ca:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:59:7C:ED:F5:7B:CF:75:47:08:31:87:0B:B9:37:28:21:D3:88:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/89c1d277-7641-3c70-9cea-851fdd81b4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9/aa363d52-209b-47ac-aa24-f8c86d11fcb9.crl

            X509v3 Authority Key Identifier:
                keyid:F2:BC:8C:E9:CC:0C:09:4F:50:2B:F4:AA:DE:CF:CE:3D:BA:40:58:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aa363d52-209b-47ac-aa24-f8c86d11fcb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.0.0/24
                  23.176.16.0/24
                  158.51.76.0/23
                  198.98.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:0c:52:c2:00:26:39:ab:3d:e8:0d:f6:b1:f1:ed:9d:9f:a9:
         ef:45:2a:24:95:18:13:99:a4:82:0e:e8:e3:a1:d1:f6:60:36:
         be:ea:ef:28:7c:59:cd:b1:68:b7:d2:88:ca:a8:17:5a:24:e6:
         58:6e:4b:1b:71:5b:1b:e8:6a:36:97:7d:56:eb:25:61:cd:e0:
         62:a1:a7:d6:94:c2:14:b4:db:8e:f0:ef:91:45:9b:6b:91:35:
         74:99:3c:48:65:27:20:55:49:ee:54:58:ba:9a:9e:1f:61:f4:
         cf:9a:ce:e1:00:c4:0d:45:8d:1c:6a:9a:6b:2b:6a:57:72:e6:
         35:5c:ea:86:0e:33:b1:8d:3e:3d:b6:7e:72:e0:19:72:25:2d:
         fb:e2:12:1b:1f:a9:82:db:13:9d:c5:6e:9d:99:6a:0f:39:26:
         b9:c0:04:f0:cc:83:ca:32:54:9e:30:c1:99:01:f4:06:98:da:
         66:1c:22:0c:3f:05:5d:3d:9c:34:d2:8f:9c:ba:ea:2b:fa:80:
         d1:04:8a:77:36:cf:f6:20:fc:68:0d:a1:ff:c0:ac:5f:04:7a:
         a2:1e:61:b7:ba:9d:1c:78:9b:86:06:e6:d8:76:b5:c6:2f:68:
         26:8e:86:52:e5:7d:64:4e:6e:fa:d8:28:1c:bb:d0:07:ac:48:
         fa:27:19:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:27:48 2026 by rpki-client