Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/e0deb7f3-5f98-34f2-ab2a-0d2554e19fe6.roa
File:                     e0deb7f3-5f98-34f2-ab2a-0d2554e19fe6.roa (raw, json)
Hash identifier:          UvEDrm6YROSbc/NyEaLXZqm0pBvC/m2qNULtFdqShFA=
Subject key identifier:   AD:B5:99:90:BE:82:26:B7:DE:EF:D0:79:53:E7:F1:7A:7B:88:51:71
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584D237A23A91FD8DEEA3593F270
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/e0deb7f3-5f98-34f2-ab2a-0d2554e19fe6.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     26496
IP address blocks:        23.229.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:23:a9:1f:d8:de:ea:35:93:f2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=6651a270-0002-4d67-8052-7832b549fa2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:16:8a:af:dc:1f:b6:72:b0:39:9a:96:ca:99:
                    38:a0:51:1b:8c:7b:f4:d9:34:25:96:a3:db:7d:45:
                    e6:cc:a7:72:4a:c7:f3:74:7c:0e:7f:7f:2a:3b:0f:
                    dd:9b:ac:75:4a:fa:f0:2c:3d:74:0a:5f:ff:ef:f8:
                    5b:77:8d:1a:5b:12:90:98:f5:e0:96:d3:72:5f:d6:
                    5c:c1:6c:90:c7:2b:15:7f:5a:8f:d2:42:1a:12:8b:
                    07:21:b6:ee:38:4a:d0:ea:28:51:43:4a:8e:43:91:
                    50:e0:2c:71:8d:2b:39:8c:8e:5d:25:aa:f3:cc:3f:
                    fc:c8:69:87:38:b3:e9:e5:ca:8c:de:b0:3b:86:56:
                    77:b5:68:58:30:a2:b4:51:1a:bb:65:a7:1f:19:39:
                    ec:44:dc:e3:94:4e:41:3d:22:d4:6b:5f:5d:4a:83:
                    ca:38:c6:8e:cb:7c:16:9b:2e:3b:e7:d0:da:22:35:
                    23:d2:8f:09:e7:30:16:f4:d4:18:b2:fc:48:06:1a:
                    1f:98:85:a5:19:09:9d:32:59:e6:59:ac:ad:41:d9:
                    c7:0a:9c:4f:a8:48:c5:1d:6f:3b:f6:f6:cd:22:ad:
                    4b:bd:72:d7:42:5b:e9:62:f2:8f:43:d7:bb:0f:cd:
                    dd:f9:d3:91:e6:7a:ba:39:26:4d:bb:f2:8b:5f:cb:
                    69:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B5:99:90:BE:82:26:B7:DE:EF:D0:79:53:E7:F1:7A:7B:88:51:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/e0deb7f3-5f98-34f2-ab2a-0d2554e19fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.229.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:2e:46:b6:55:58:ea:c6:b2:f7:d3:50:34:da:1f:de:95:64:
         a2:ce:2b:72:fd:80:db:93:74:70:55:fe:f8:96:cd:1f:c8:8b:
         49:af:ca:6b:c4:33:40:61:7b:08:1a:ff:05:60:5f:e3:00:79:
         b1:3d:fd:84:2f:c9:4b:94:67:91:52:73:7e:c9:ae:08:3d:9a:
         69:8a:41:b5:f8:9d:8a:69:d3:66:fa:42:08:20:57:15:de:ac:
         73:68:24:33:9f:9e:a0:cf:f5:a5:9f:78:d4:a9:c3:7d:ae:1a:
         68:c7:a7:2b:f7:4b:d5:0d:ac:fd:9b:26:7b:cd:08:50:b1:12:
         01:3b:12:9d:74:25:db:d5:24:0d:ce:b1:a3:5a:c8:da:83:6b:
         41:c0:ae:b6:c8:79:b0:e7:ac:09:e7:cf:3f:3c:c2:c7:83:04:
         5c:e6:0d:cb:7b:21:9a:c6:0d:75:90:cd:6e:bb:c9:70:90:e1:
         e8:1a:ae:e5:f3:cf:60:24:19:81:2c:86:b7:37:03:19:e1:58:
         53:7a:e5:bf:19:8a:0b:c1:1a:e0:67:5a:1b:c6:9b:0a:eb:d3:
         9e:21:8b:58:95:ba:59:71:aa:e3:04:69:28:ef:18:0d:93:de:
         dc:82:00:f4:b5:1a:bc:e8:9e:56:34:74:cb:5f:0a:f8:ab:50:
         f9:6b:fe:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:28:08 2026 by rpki-client