Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/47aa8ea8-8831-35f5-aa64-f1a11d76ed6d.roa
File:                     47aa8ea8-8831-35f5-aa64-f1a11d76ed6d.roa (raw, json)
Hash identifier:          +EdwH3lP2ZY+Bt63N4Yq1BiduXAS/YwEcKzHsM/mxp8=
Subject key identifier:   79:3B:A7:1F:AD:D4:D7:CE:D7:D1:69:9E:2E:DE:FE:B1:87:92:34:4E
Certificate issuer:       /CN=23658315-b56f-46db-89d2-184000d7f7e1
Certificate serial:       010D0C9F4328584D40CA496E92C6526087845D80
Authority key identifier: E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/47aa8ea8-8831-35f5-aa64-f1a11d76ed6d.roa
Signing time:             Sun 22 Mar 2026 13:00:41 +0000
ROA not before:           Sun 22 Mar 2026 13:00:41 +0000
ROA not after:            Sat 20 Jun 2026 13:00:41 +0000
asID:                     14007
IP address blocks:        192.234.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:40:ca:49:6e:92:c6:52:60:87:84:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23658315-b56f-46db-89d2-184000d7f7e1
        Validity
            Not Before: Mar 22 13:00:41 2026 GMT
            Not After : Jun 20 13:00:41 2026 GMT
        Subject: CN=47ff9f73-66b2-4853-b221-5187e4292c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:15:2e:3c:01:a3:d8:c7:d7:39:82:ab:05:
                    ee:91:45:f6:31:37:6c:c0:2d:03:ee:96:c2:02:5c:
                    c4:2c:ab:d7:39:af:b8:58:38:d3:b4:b2:03:8b:41:
                    3f:36:fb:41:1c:20:57:10:4e:c8:2b:87:76:79:73:
                    f3:92:6b:57:0b:01:d1:9a:cd:ba:f9:04:fb:10:aa:
                    02:38:40:01:d1:d3:ea:c7:07:28:58:15:b2:1f:40:
                    09:9e:0f:54:61:49:f6:fa:24:90:65:24:17:8e:9e:
                    38:ce:a3:84:58:44:32:a5:8b:49:ef:ea:8a:78:33:
                    ef:34:cb:2b:82:c4:69:2b:95:52:27:fe:67:09:e4:
                    42:e9:ab:1e:e8:ce:f4:19:ad:17:b9:a3:3e:90:ab:
                    74:97:4f:54:b1:c4:ee:f2:29:74:69:94:ba:de:b4:
                    87:42:4d:ea:ca:8f:14:2c:58:78:91:57:ec:31:68:
                    09:76:39:4e:a9:1e:75:b4:f4:ed:b8:50:cf:9f:13:
                    c5:c0:c3:5f:6b:35:31:66:8c:01:0d:c3:a9:c8:bd:
                    dc:e5:5e:d2:64:ed:dc:3a:8b:bc:c9:90:cd:fe:a7:
                    41:af:1b:cc:1d:b8:51:42:71:43:51:10:ae:80:d3:
                    5a:b1:ee:b0:09:e4:48:f8:ee:58:72:97:eb:ef:2f:
                    b4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3B:A7:1F:AD:D4:D7:CE:D7:D1:69:9E:2E:DE:FE:B1:87:92:34:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/47aa8ea8-8831-35f5-aa64-f1a11d76ed6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1/23658315-b56f-46db-89d2-184000d7f7e1.crl

            X509v3 Authority Key Identifier:
                keyid:E5:87:CC:6D:8E:ED:D7:82:E5:1D:8D:4E:59:77:6B:36:63:34:77:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23658315-b56f-46db-89d2-184000d7f7e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:bc:39:22:f3:68:e0:bd:c7:50:4d:f5:b1:f8:34:03:71:af:
         9f:30:49:f5:31:d1:7e:2a:b2:0d:f6:73:3b:6a:fb:5b:49:25:
         84:a1:bf:b3:f3:8a:bc:f8:04:a7:6a:a9:02:28:96:27:ea:6e:
         86:af:5e:23:cf:b8:29:d3:83:f4:45:aa:32:72:62:4b:2b:e3:
         93:3a:e2:19:05:4d:ae:0e:70:6a:43:86:85:5c:0f:ef:45:fb:
         de:28:6e:4f:3c:b3:70:7d:42:43:bb:da:ea:d4:15:71:68:ea:
         18:7e:df:18:15:c1:b6:ec:cd:69:ac:74:ca:c0:c9:0a:d9:df:
         17:2a:3f:35:01:2a:c8:25:15:9e:67:f4:55:71:7a:1e:a8:4e:
         c7:af:bb:e5:e2:7d:a1:bd:41:9d:33:78:1c:03:9c:3d:99:19:
         0f:7c:75:f9:f8:71:b6:37:58:e3:b2:94:52:44:39:f2:dd:d3:
         df:eb:99:44:62:30:a9:46:62:68:f5:76:a2:10:83:1c:63:de:
         6b:25:9c:5e:5f:58:3d:9c:cc:0b:61:b3:ee:c4:80:18:cd:d4:
         72:a6:e4:ff:c6:a4:6d:81:08:11:0b:7c:47:7a:94:49:d6:0d:
         70:3a:05:42:4c:53:1b:37:e1:ea:2d:af:a8:16:52:ac:f4:60:
         db:82:49:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:39:29 2026 by rpki-client