Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa
File:                     b9390863-5768-389d-9641-597ee1febed8.roa (raw, json)
Hash identifier:          mQ/nQ3f7093IsNCeyvQ21W7bCjRCeZVMtC18tXiRnhg=
Subject key identifier:   99:EA:FB:32:08:E5:0E:7C:E3:67:CA:30:E0:A1:02:DE:7C:84:EE:94
Certificate issuer:       /CN=285991ba-0db5-48fe-92ff-d202c357d86d
Certificate serial:       010D0C9F4328584DA81580F6C5923DC74F72FE80
Authority key identifier: 86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa
Signing time:             Tue 28 Apr 2026 13:00:30 +0000
ROA not before:           Tue 28 Apr 2026 13:00:30 +0000
ROA not after:            Mon 27 Jul 2026 13:00:30 +0000
asID:                     31998
IP address blocks:        23.164.80.0/24 maxlen: 32
                          104.224.60.0/22 maxlen: 32
                          206.168.176.0/22 maxlen: 32
                          208.70.12.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a8:15:80:f6:c5:92:3d:c7:4f:72:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285991ba-0db5-48fe-92ff-d202c357d86d
        Validity
            Not Before: Apr 28 13:00:30 2026 GMT
            Not After : Jul 27 13:00:30 2026 GMT
        Subject: CN=7f635342-278a-4ab7-8e36-181f8dbc6640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4d:2b:c2:47:05:3a:53:9d:03:98:db:a7:d5:
                    28:9b:c1:a9:0f:34:04:bc:c6:1e:69:94:08:c8:36:
                    7c:5b:b2:f4:63:20:56:c6:3d:96:f7:3b:88:a3:58:
                    ee:f6:37:21:8d:33:f7:40:c7:04:72:91:3b:fd:40:
                    59:75:ab:bf:80:90:71:d3:9e:11:8a:59:0e:55:41:
                    13:7d:9e:8d:ed:9d:2a:b9:36:b4:cd:e4:1c:f1:a7:
                    9d:ef:57:49:39:9d:77:db:08:cc:49:f2:3b:dc:75:
                    e9:3e:b2:bb:a3:56:e9:c2:71:43:03:b6:6b:7e:b0:
                    93:16:82:77:be:4e:a4:48:7d:f8:a9:c1:a3:fe:39:
                    74:a2:22:02:82:70:f2:65:c9:8a:c4:cc:02:a7:ba:
                    28:a2:5d:1e:c3:8c:f6:1c:b0:e8:60:2b:74:89:70:
                    0f:60:de:e2:a4:91:59:c0:f3:57:fa:74:e5:20:4a:
                    72:67:1a:de:a1:5d:f7:d5:73:99:16:e2:45:33:83:
                    a7:2e:08:ba:86:05:0d:62:ac:04:9a:3a:4f:8a:94:
                    8a:44:d2:d7:cf:c5:a4:1a:2a:ee:43:a6:22:93:80:
                    dc:fb:a6:02:ef:da:11:ab:d5:ab:15:b8:da:f4:e6:
                    bd:18:6a:d4:ec:f3:de:5f:92:01:ce:e7:6a:1a:7a:
                    4a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EA:FB:32:08:E5:0E:7C:E3:67:CA:30:E0:A1:02:DE:7C:84:EE:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/b9390863-5768-389d-9641-597ee1febed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d/285991ba-0db5-48fe-92ff-d202c357d86d.crl

            X509v3 Authority Key Identifier:
                keyid:86:69:8E:49:CA:3C:6A:83:04:D5:1A:23:C4:61:62:AF:AC:01:42:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/285991ba-0db5-48fe-92ff-d202c357d86d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.80.0/24
                  104.224.60.0/22
                  206.168.176.0/22
                  208.70.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:32:9f:f8:f5:c4:0d:ba:2c:26:e2:29:77:60:8f:31:7a:fa:
         22:72:75:da:ff:4a:5a:02:2b:7a:f7:55:ce:17:37:23:1b:fb:
         12:cb:cb:6d:49:26:78:f0:8e:d1:1a:59:39:58:ce:52:be:55:
         19:ed:70:64:d9:9c:84:74:b3:91:13:ee:34:1f:2f:e6:fc:36:
         76:e4:3a:92:b6:12:62:59:8b:c3:cc:a4:d9:bd:70:45:ef:4c:
         44:41:87:cf:17:b6:88:08:1c:c1:0e:bd:7b:07:ac:15:90:a2:
         e4:f5:e6:0a:e1:c4:d0:a1:1a:20:78:6c:96:87:6e:d7:8f:50:
         da:1e:76:31:fa:3d:04:0f:bd:a3:09:c4:9a:01:4c:2d:9c:d7:
         9b:7f:f2:4f:c1:ec:ee:b6:68:5b:82:22:ad:b5:49:88:9a:e7:
         73:26:38:13:46:54:4e:3a:6d:fb:be:6c:77:97:09:c4:1e:33:
         a3:25:63:c6:39:da:66:af:dd:61:f0:ee:43:cf:3a:f7:62:6a:
         d3:6e:7a:fa:d0:42:bd:ca:f4:65:58:7e:2f:46:c7:04:a6:fe:
         a2:dd:bb:2e:dd:1c:8d:f4:6b:4b:88:4f:7c:91:3f:b7:b3:5a:
         8d:cd:7c:cc:44:4b:f0:c2:74:60:50:71:ee:9f:cc:d3:e8:4b:
         c2:c0:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:46:57 2026 by rpki-client