Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/31ba5fe3-d54b-3ed2-bf30-19cd5abed0dc.roa
File:                     31ba5fe3-d54b-3ed2-bf30-19cd5abed0dc.roa (raw, json)
Hash identifier:          /UL35VOVEzV7Jboar+euOFFK0lV/RFJzmcFM5XeK3vY=
Subject key identifier:   EE:42:A6:1E:0E:5A:A9:61:1D:36:03:6B:42:8B:09:55:1A:3E:8B:26
Certificate issuer:       /CN=f7798abb-711d-4f10-bc46-bceed055e1fa
Certificate serial:       010D0C9F4328584D237A2ED1FE99268121700610
Authority key identifier: CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/31ba5fe3-d54b-3ed2-bf30-19cd5abed0dc.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     22295
IP address blocks:        23.137.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:2e:d1:fe:99:26:81:21:70:06:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7798abb-711d-4f10-bc46-bceed055e1fa
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=1dc15266-54c6-4c7b-a397-3d917b1a482e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:67:17:e4:9e:cd:54:7e:37:20:c0:b2:ad:72:
                    b7:93:39:4e:8c:59:82:39:48:c1:9e:cb:d1:41:73:
                    48:3f:7b:c9:45:01:fe:4a:3d:e6:88:cc:1d:0f:71:
                    48:a1:b2:e2:34:31:09:6e:b5:b4:22:30:10:42:6c:
                    3f:7e:ae:85:3b:97:7c:3e:d2:54:34:5e:85:c0:fc:
                    51:0f:2c:1c:ff:51:24:1d:d0:36:73:17:35:50:dc:
                    4f:da:45:5b:df:e4:da:0b:fb:24:f1:d9:21:b1:c9:
                    90:ec:4b:d0:60:55:15:83:3d:50:bf:eb:69:27:7d:
                    61:7f:a5:a6:34:a1:6b:40:0b:2e:a1:ae:00:45:4b:
                    f1:35:8d:cf:4e:94:b5:3e:7e:bc:08:fb:d8:5a:1d:
                    e0:4f:08:3f:f0:5a:29:48:ff:f4:08:cf:92:0c:2e:
                    9a:af:ce:0b:d6:c4:9a:35:fa:12:c3:35:8d:3d:11:
                    17:57:f6:19:1f:ac:9f:b2:d3:98:22:5b:b5:0e:6e:
                    56:96:22:08:a7:9c:b0:6c:86:2f:b8:e1:bd:59:d3:
                    98:0c:01:76:96:34:c1:a8:fe:6e:55:a8:91:77:43:
                    86:1a:15:74:ea:05:c1:f2:40:80:5b:c4:13:8e:d9:
                    79:cc:d0:94:11:62:42:96:e0:21:76:d1:01:4b:08:
                    24:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:42:A6:1E:0E:5A:A9:61:1D:36:03:6B:42:8B:09:55:1A:3E:8B:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/31ba5fe3-d54b-3ed2-bf30-19cd5abed0dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa/f7798abb-711d-4f10-bc46-bceed055e1fa.crl

            X509v3 Authority Key Identifier:
                keyid:CC:90:3D:D7:AA:39:05:EC:E7:35:08:AC:CB:45:F4:6E:65:BC:1D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f7798abb-711d-4f10-bc46-bceed055e1fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.137.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:da:e4:90:26:38:f5:27:17:2b:77:f2:c3:46:c6:53:fa:14:
         a9:f9:b1:8c:84:6b:40:94:ec:e5:7a:08:01:4a:41:c3:97:e7:
         b3:31:a0:d6:4d:74:6f:5d:c1:95:1b:55:a4:7d:67:59:f3:4e:
         56:42:95:60:6d:92:9c:2c:63:0b:e8:46:27:52:8b:77:48:aa:
         f4:59:c9:1c:14:3d:d5:e0:1d:9d:da:3c:c2:ef:67:9d:88:81:
         3a:c8:19:ee:fe:05:7a:fd:83:c9:92:58:92:b0:7b:07:a3:68:
         ae:8b:c1:02:57:cb:24:5f:a5:b3:91:46:95:c7:b1:35:2d:d7:
         18:b8:c1:c3:80:bf:07:a5:c9:a4:90:13:25:8c:24:e5:19:f1:
         cf:f6:07:52:11:6a:c7:90:44:ca:67:bf:bb:8d:44:58:dd:07:
         08:25:05:e1:2e:fa:a1:9a:76:0b:07:32:88:1b:ad:2b:5e:c0:
         34:85:05:15:c1:a3:53:b1:da:4f:0f:fc:db:07:49:2c:51:b4:
         a4:70:a6:92:55:16:c1:80:8a:47:ab:7a:43:0f:84:f5:c9:bf:
         8a:45:da:f5:34:e7:32:f1:f1:09:cf:58:90:6a:a2:c0:87:3f:
         5e:fb:06:5f:77:ae:74:55:bb:a6:65:70:ed:f2:d4:f2:1f:43:
         39:7e:f4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:22:08 2026 by rpki-client