Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8173a82e-409b-318c-b3f2-9691e512a24c.roa
File:                     8173a82e-409b-318c-b3f2-9691e512a24c.roa (raw, json)
Hash identifier:          38oQhDdd9zf/S12sErp7lY3TAYgqVISxH6ODWSN74+Y=
Subject key identifier:   10:F7:29:80:AA:E9:6B:46:BB:67:3A:99:DD:15:0B:42:9D:97:64:CD
Certificate issuer:       /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial:       010D0C9F4328584DBFD07CDE17EC78C5F3B3A540
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8173a82e-409b-318c-b3f2-9691e512a24c.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     11870
IP address blocks:        167.23.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:7c:de:17:ec:78:c5:f3:b3:a5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=26c23212-1fde-45e3-bd4a-026063a79342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fa:9f:27:cd:f2:90:e4:e3:91:11:24:ff:31:
                    b8:58:ff:d3:54:0a:8c:78:ac:f7:ed:06:17:4e:c2:
                    14:53:5a:2f:27:6d:8d:9d:cb:91:00:ea:8e:4b:52:
                    f6:dd:73:85:d1:f4:f4:53:b1:07:5a:d3:7a:a8:b8:
                    6a:01:9e:2e:0b:98:8b:cc:af:16:dc:8a:32:11:95:
                    18:b7:5b:4b:a2:0e:2e:38:f9:c6:1d:28:0d:75:6d:
                    68:28:60:8b:e4:3f:47:cd:9f:70:5b:09:6a:b1:17:
                    56:40:79:4e:5e:31:23:8d:86:fa:c3:ea:58:df:fe:
                    78:e6:91:f6:2b:44:6f:ba:ca:8e:47:3d:db:d7:62:
                    d7:fa:5c:a3:00:a1:df:3a:52:87:4c:40:1e:c5:fd:
                    50:64:05:9e:8e:3c:99:15:dd:fa:82:97:be:81:e6:
                    08:9d:0f:07:d8:cf:e9:ed:c9:e3:d5:15:0a:7d:7f:
                    d1:f8:54:89:a3:0d:a1:38:b6:87:c7:cd:d9:8a:7e:
                    3e:f5:ac:49:5e:b3:e5:f3:81:3a:7d:9a:b3:19:63:
                    28:de:24:e9:94:a6:09:28:60:f9:7b:e2:45:a4:28:
                    f3:69:c9:3c:16:e6:76:1a:7f:84:fb:f1:02:8f:bb:
                    b7:3b:bd:d4:e7:61:7b:74:71:62:81:8a:59:5c:15:
                    76:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F7:29:80:AA:E9:6B:46:BB:67:3A:99:DD:15:0B:42:9D:97:64:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8173a82e-409b-318c-b3f2-9691e512a24c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl

            X509v3 Authority Key Identifier:
                keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.23.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:01:84:8e:c6:82:92:95:5b:8c:4f:d9:74:53:ed:81:0b:a9:
         c6:b6:35:c9:94:30:c3:75:a5:60:17:e9:95:bc:bc:eb:a8:3c:
         12:8a:ef:01:e6:df:2d:3a:ba:12:00:2d:1e:e9:a2:52:ae:0e:
         c6:6b:4c:4d:08:b6:dd:b4:ac:d8:92:b7:14:46:42:2f:87:4b:
         70:d2:cb:20:2c:6a:cd:3a:0f:90:02:89:c1:2e:c1:dc:fb:41:
         ae:49:48:f9:db:9c:2b:0d:fb:97:de:75:b6:59:3e:c6:60:a9:
         24:f9:f3:74:d7:69:d2:80:a7:60:48:a2:1e:53:65:6a:be:33:
         2f:cb:b4:20:1b:b0:21:2e:50:71:a3:44:33:d4:c8:ff:eb:cf:
         58:a7:87:75:21:ea:59:19:be:f1:c2:03:90:62:a0:90:bb:c5:
         0d:ef:2b:94:89:de:92:7b:ab:b0:0e:bc:53:fe:f4:68:9d:cb:
         eb:86:6f:81:d5:ac:fe:b3:ed:a5:63:95:99:cf:d7:78:2a:16:
         5d:77:e6:a1:f8:6f:6f:ea:66:5e:9b:83:1e:78:97:aa:57:31:
         53:5f:98:af:53:d2:b9:2a:cf:28:6f:10:11:b1:da:8e:e0:9a:
         d0:a5:89:8a:cf:ad:60:90:73:09:99:e7:cd:97:41:51:be:7c:
         c4:d3:19:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:14:05 2026 by rpki-client