Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ba68ace-a9cc-344a-98a1-d9552fab4136.roa
File:                     6ba68ace-a9cc-344a-98a1-d9552fab4136.roa (raw, json)
Hash identifier:          SjGEtHTJFpV3cEsr4MND9CoSnf5z7ftS4pbm6cWGC5M=
Subject key identifier:   6E:02:83:26:FA:FB:29:69:6F:27:64:DF:B6:8E:9E:FF:26:5C:AE:9B
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584DBFD059855311414105F9EDD0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ba68ace-a9cc-344a-98a1-d9552fab4136.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     989
IP address blocks:        8.30.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:59:85:53:11:41:41:05:f9:ed:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=93cd8909-a897-4d56-9698-cfb46591d292
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:be:40:ad:bc:2d:4f:2b:43:de:ba:8d:9b:c0:
                    2b:c4:72:26:0d:21:b7:5f:55:b2:9c:29:92:17:9f:
                    21:32:00:31:ce:f7:ec:d2:d3:9e:dc:5a:4b:d7:34:
                    e9:79:d5:09:ac:b0:3f:c5:06:d2:e1:18:5f:a1:93:
                    44:21:62:76:c3:1d:41:bd:fd:87:c4:07:18:fa:49:
                    4f:7d:e1:27:c8:0f:06:3a:26:4d:5c:b8:49:41:77:
                    b5:83:60:4a:c2:c9:66:28:8c:97:73:7c:22:cc:5c:
                    55:20:c0:83:d7:05:0e:ee:18:3c:2f:50:69:f9:42:
                    45:79:aa:c7:3a:69:fe:ce:e8:dc:7f:9f:a8:4a:ca:
                    fc:be:9a:36:dc:17:8c:f8:f7:b9:81:b6:e0:d1:2e:
                    95:bd:8a:50:39:1b:ff:9a:d3:34:be:ce:ae:3b:c4:
                    14:a8:09:4a:27:f3:27:84:5a:bd:85:25:28:07:14:
                    26:b3:c0:3a:59:30:75:4e:38:4e:1b:66:f6:5e:ec:
                    85:d1:9d:ae:45:d7:85:92:d2:c2:9e:dc:58:88:85:
                    01:13:fa:0d:2b:02:38:b7:87:15:1b:5f:ab:ed:28:
                    d7:35:67:08:19:8c:00:a7:fb:52:4a:9a:b7:d3:de:
                    59:92:5e:e6:43:c5:7c:fe:12:21:5b:3b:fa:cf:6e:
                    ae:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:02:83:26:FA:FB:29:69:6F:27:64:DF:B6:8E:9E:FF:26:5C:AE:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6ba68ace-a9cc-344a-98a1-d9552fab4136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.30.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:88:5e:72:b5:e6:a7:e2:19:e5:e0:c1:a9:d1:a9:cb:f9:71:
         8e:c6:4e:ae:0d:70:84:97:aa:92:83:e0:3b:3b:d9:44:50:7e:
         ca:5c:ce:7c:a9:cb:fb:a7:29:fc:93:55:cf:9d:ba:0f:b6:38:
         fc:45:1c:fc:4c:a6:e8:c0:cb:92:fa:5c:37:6d:61:65:49:07:
         a0:54:1d:48:6e:5a:f7:77:a1:17:43:78:38:8f:00:b9:ec:a8:
         09:be:2b:a0:69:5f:b6:09:b5:cb:58:fe:f8:3a:9c:8f:65:83:
         84:fb:db:38:1d:5a:f3:19:df:ed:b4:3a:e0:af:fe:42:0c:b5:
         b1:2a:7f:90:7c:fa:5f:3e:9d:73:c4:65:1d:42:7e:a6:dc:ab:
         5a:6b:1f:b8:a9:f1:53:55:cf:d9:29:90:5c:6e:51:64:4d:17:
         1b:97:31:2a:6e:aa:10:3d:d0:14:fb:6d:3c:a1:2e:dd:12:b8:
         72:fd:af:f1:15:af:60:17:5e:5f:47:67:dc:a5:74:16:95:c9:
         d8:e0:02:4c:16:5e:ec:4f:22:07:92:3b:0a:65:84:92:15:18:
         fa:a4:78:ec:cf:63:11:6f:9c:cf:d9:bc:49:2a:4a:99:56:b0:
         c7:17:32:4a:8d:2f:9e:53:d5:ce:72:33:f5:80:b2:d6:98:11:
         6a:a4:54:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:22:03 2026 by rpki-client