Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/955de586-eec7-3157-9211-1b5f81078f4a.roa
File:                     955de586-eec7-3157-9211-1b5f81078f4a.roa (raw, json)
Hash identifier:          wbD9F3GgPY2gNVd1+qYnmnYuzcsYAde5TWkOdjrwGrY=
Subject key identifier:   0C:13:1B:85:35:1E:93:33:62:28:89:7D:EA:F0:C1:CC:A3:C1:2D:7D
Certificate issuer:       /CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
Certificate serial:       010D0C9F4328584DA80D0F2270878A2B8833A900
Authority key identifier: C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/955de586-eec7-3157-9211-1b5f81078f4a.roa
Signing time:             Tue 28 Apr 2026 12:43:41 +0000
ROA not before:           Tue 28 Apr 2026 12:43:41 +0000
ROA not after:            Mon 27 Jul 2026 12:43:41 +0000
asID:                     395909
IP address blocks:        23.175.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:0d:0f:22:70:87:8a:2b:88:33:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17ec2da5-54fe-4d7a-8b06-15887477c2e8
        Validity
            Not Before: Apr 28 12:43:41 2026 GMT
            Not After : Jul 27 12:43:41 2026 GMT
        Subject: CN=fc88651e-8666-447e-a2f7-5659c2fbcb1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:27:59:b1:c2:27:d0:b9:dc:df:8f:2e:c3:50:
                    3c:46:bb:e0:63:9d:51:3c:d8:fe:cd:22:4e:d7:77:
                    35:87:73:83:5f:7e:8c:bd:eb:1b:fc:2c:e9:27:eb:
                    6b:e5:b0:15:bd:83:46:63:f7:4c:55:a3:50:e0:ce:
                    93:3f:c9:96:88:3a:d0:54:b7:2f:be:7b:0f:23:21:
                    18:f0:01:5e:e4:46:d3:e8:87:07:e8:dd:f2:0c:34:
                    b0:bc:a9:79:8e:48:92:e4:28:c7:f1:96:dc:77:87:
                    05:55:7d:f1:da:e6:c3:2c:8e:fa:74:e4:0d:d7:59:
                    fc:99:59:c5:a9:2b:fb:07:a9:75:8a:4a:92:d0:a8:
                    c4:6b:38:fb:98:f4:3b:8f:78:df:8c:c8:79:11:b4:
                    4c:99:81:35:10:90:c4:29:64:4a:c4:01:fa:6d:a3:
                    e1:20:85:70:fb:21:1f:10:16:f9:1b:00:7c:03:33:
                    45:5c:12:92:d3:4b:26:46:19:5f:9d:c1:6e:45:98:
                    d8:22:35:c9:f4:d5:53:f2:b0:cc:db:34:98:c4:b6:
                    b0:e6:0e:10:1a:39:c5:eb:8a:aa:d2:2b:a6:a6:b5:
                    b1:25:17:c8:f3:ef:f8:8b:06:12:b1:3e:80:57:05:
                    c9:86:a9:bd:3b:f6:0f:ff:42:15:14:15:d4:da:9f:
                    c8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:13:1B:85:35:1E:93:33:62:28:89:7D:EA:F0:C1:CC:A3:C1:2D:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/955de586-eec7-3157-9211-1b5f81078f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8/17ec2da5-54fe-4d7a-8b06-15887477c2e8.crl

            X509v3 Authority Key Identifier:
                keyid:C8:F3:C2:F6:2B:52:7E:F2:5D:F1:27:12:9F:FE:EC:CC:EC:0E:88:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/17ec2da5-54fe-4d7a-8b06-15887477c2e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:64:33:65:18:08:ab:22:f9:ad:1e:46:8e:a6:8f:08:bf:d7:
         e2:90:59:c7:52:3c:80:0b:fd:4e:da:54:bf:01:54:9c:86:0a:
         0c:ab:bd:d0:8b:65:58:98:ae:e2:08:de:54:1e:10:7a:a8:f5:
         6d:d0:0e:05:2d:d3:16:78:3a:fc:9d:30:68:c1:53:b2:15:5c:
         d4:58:2d:d4:6e:6b:ad:9f:57:65:2a:0f:9e:51:73:b5:0c:03:
         aa:ce:fd:8f:7c:3d:17:b4:09:3f:2a:18:3a:ac:d0:0b:ad:86:
         96:85:e6:c4:8a:e3:5f:e8:bf:47:b5:78:d4:94:9e:eb:b4:fe:
         8a:18:4e:c1:a3:a9:d6:7c:e9:42:6f:b2:47:29:4c:b7:c7:71:
         85:b1:39:c6:85:74:46:17:cc:e2:8d:b6:e3:bc:a8:45:36:69:
         e3:1d:f6:43:56:3d:3e:c3:30:99:9e:01:74:45:cd:29:e1:9d:
         32:7d:c3:0a:97:6e:57:df:9d:5d:2e:d0:b6:1e:88:11:67:b0:
         25:5b:5f:2e:82:94:61:3d:58:55:7a:d8:f8:72:1e:e2:15:17:
         82:3c:5d:aa:39:72:b4:05:cf:a2:80:da:60:42:41:ef:b4:55:
         8a:6f:1a:3d:28:13:41:70:9e:82:34:2b:35:0d:71:97:b6:8a:
         6f:15:be:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:25:49 2026 by rpki-client