Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/a7210f78-a226-35a8-a9ae-d70caff61f75.roa
File:                     a7210f78-a226-35a8-a9ae-d70caff61f75.roa (raw, json)
Hash identifier:          vS5YQkQUnA37+8lzJpwn8v7zDv6Q6IVtOSuSZhDqzEQ=
Subject key identifier:   17:89:0A:DB:94:FA:5D:B9:CE:79:1B:0F:2B:CB:E1:D3:64:75:DF:0B
Certificate issuer:       /CN=1e6b1e4c-be11-4e48-a0ee-190ac58209a6
Certificate serial:       010D0C9F4328584D95EFF3EB2894AA018B394500
Authority key identifier: D0:82:5E:7A:13:B9:A3:5F:2A:3B:B6:C3:D7:42:91:8D:C4:EB:3D:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/a7210f78-a226-35a8-a9ae-d70caff61f75.roa
Signing time:             Wed 22 Apr 2026 01:00:23 +0000
ROA not before:           Wed 22 Apr 2026 01:00:23 +0000
ROA not after:            Tue 21 Jul 2026 01:00:23 +0000
asID:                     40739
IP address blocks:        23.135.184.0/24 maxlen: 24
                          192.55.85.0/24 maxlen: 24
                          206.168.60.0/22 maxlen: 24
                          2620:33:a000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:95:ef:f3:eb:28:94:aa:01:8b:39:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6b1e4c-be11-4e48-a0ee-190ac58209a6
        Validity
            Not Before: Apr 22 01:00:23 2026 GMT
            Not After : Jul 21 01:00:23 2026 GMT
        Subject: CN=6e205dcd-0cc0-4f14-83a6-087c2bed1cc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:43:d4:11:3a:83:95:7a:0e:b4:6f:42:0a:35:
                    4d:16:d8:b7:72:4d:aa:4d:63:78:aa:94:ad:82:db:
                    a2:83:57:12:6f:cc:40:c3:e1:11:e9:1d:e4:94:1c:
                    3a:31:15:18:a4:d1:39:c2:01:36:a7:1d:4e:8f:84:
                    1d:29:e3:81:66:3b:91:73:f0:6d:7a:6d:53:31:6c:
                    ad:d7:ed:8e:e9:34:92:d4:f0:eb:e8:db:05:86:63:
                    77:37:4c:6d:ef:31:4d:bc:1e:7f:0a:92:80:fc:82:
                    74:a2:c2:17:b0:0a:73:23:6b:ac:cb:cf:8e:08:bf:
                    42:1e:74:89:47:55:35:fc:02:b0:35:f4:95:ea:52:
                    36:1f:6d:73:37:5d:d1:d8:95:83:6a:3e:07:f5:52:
                    f5:0c:54:57:9a:86:b1:28:b3:70:90:87:fc:0a:3b:
                    f6:1f:c9:ce:62:70:64:3b:7a:2a:98:b7:a9:04:55:
                    f0:4e:c5:42:80:1d:20:38:89:e7:39:09:ce:fa:35:
                    5f:c9:f9:bb:b7:d3:7b:a9:a5:e3:df:79:43:23:83:
                    79:82:55:28:a8:c7:0c:55:b5:ed:d4:40:16:2c:87:
                    50:e1:23:e2:81:d5:4c:f2:a5:c9:48:c4:d2:fe:c1:
                    d8:ef:3b:f7:04:b7:e5:14:30:9e:f8:23:0c:8a:95:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:89:0A:DB:94:FA:5D:B9:CE:79:1B:0F:2B:CB:E1:D3:64:75:DF:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/a7210f78-a226-35a8-a9ae-d70caff61f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.crl

            X509v3 Authority Key Identifier:
                keyid:D0:82:5E:7A:13:B9:A3:5F:2A:3B:B6:C3:D7:42:91:8D:C4:EB:3D:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.184.0/24
                  192.55.85.0/24
                  206.168.60.0/22
                IPv6:
                  2620:33:a000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:52:be:fa:db:a6:38:b2:40:6b:ff:33:5a:53:89:95:11:2a:
         af:d5:2d:ae:08:db:2a:50:9b:c9:07:48:87:a1:ad:06:e2:f8:
         74:6c:01:51:f4:49:05:5d:80:fb:28:1a:19:3a:ef:76:4c:5a:
         23:f8:b7:2a:25:07:ce:dc:5e:2d:f2:76:9e:17:2c:fe:dc:21:
         a7:0e:20:93:5e:24:79:74:c9:3c:62:53:3c:c6:6c:9b:f0:e4:
         6b:84:c3:d5:90:d5:6e:46:3e:e0:be:e8:25:d8:0e:6a:87:90:
         a3:37:f1:49:0a:d1:01:27:1f:d8:9d:64:7e:18:52:1f:12:77:
         cf:f6:5b:3a:88:58:c3:97:f0:19:23:88:ec:59:21:5a:77:65:
         af:a7:b2:d0:1d:0e:65:d9:fc:64:01:05:2b:af:31:45:46:fa:
         ff:25:8f:7f:7c:c2:27:bf:c7:17:3a:4b:33:36:f8:01:06:68:
         22:2c:ac:be:26:6f:88:1c:8f:1a:9f:55:f6:a0:bc:b8:be:4e:
         67:e4:73:c8:13:a3:ec:0a:36:e2:2a:96:3c:06:eb:36:e5:1a:
         64:cd:c1:e8:fb:18:65:b0:db:6a:8d:18:ad:46:79:12:11:8c:
         3b:65:be:a9:b5:0d:f8:a0:45:d9:b4:2b:6c:32:d8:5a:bb:50:
         61:47:26:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:53:59 2026 by rpki-client