Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa
File:                     bf924dbd-34bc-3c73-9911-e6e933405f1e.roa (raw, json)
Hash identifier:          jaVice0bOq29uFFrBzr+eP2hXyt+0g4r8BUdaDjJjL8=
Subject key identifier:   92:0C:51:77:F8:A9:6F:A1:72:21:7E:EB:31:6E:9A:FE:13:3E:0C:FC
Certificate issuer:       /CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
Certificate serial:       010D0C9F4328584E5FDF600E58A99B95A4467C00
Authority key identifier: 09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     26904
IP address blocks:        23.247.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:60:0e:58:a9:9b:95:a4:46:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee720de-c322-4bb5-b8cd-c7a3f23b92d7
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=88f182e3-02c1-4bac-aa32-60fb4b34cdb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:36:1a:0d:ff:4f:ab:91:a8:78:25:7b:12:50:
                    3d:4e:6d:82:c1:6a:ed:ac:4c:62:ac:86:78:17:70:
                    0b:99:26:c9:24:2f:8c:13:77:51:7c:a0:18:6e:23:
                    1e:f7:bb:09:01:0a:e0:b3:c0:f1:99:ae:69:ed:29:
                    c7:a8:02:5c:13:41:1c:c7:5b:6a:12:96:36:f8:24:
                    b6:ca:7e:4c:f0:0a:15:cb:f1:56:27:27:fd:61:c7:
                    af:e3:c4:ae:5c:e2:73:f9:a0:4d:16:af:55:a0:3a:
                    1a:64:40:a3:8c:80:fd:ea:8d:bc:39:00:6f:78:33:
                    5c:6e:de:22:d6:d0:94:93:ca:e3:26:61:57:ed:3e:
                    bf:a1:7a:48:2f:8a:aa:26:9f:bb:96:43:02:c5:29:
                    15:00:50:b7:0b:cd:d6:22:99:35:57:42:b3:09:9e:
                    30:8a:38:a3:08:60:1e:34:a3:7c:cf:54:d1:00:41:
                    17:48:47:45:b5:16:ef:63:ab:be:09:a7:31:d5:72:
                    38:c3:46:56:b5:58:2c:15:b0:2c:a5:7c:e4:08:26:
                    50:39:c9:a5:95:06:bd:5e:4c:c0:2e:d4:05:06:b2:
                    65:80:2e:43:b3:5f:f8:8e:68:c4:63:3b:47:87:5c:
                    7c:5a:97:39:f2:71:16:1a:44:c3:98:44:a6:51:b4:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0C:51:77:F8:A9:6F:A1:72:21:7E:EB:31:6E:9A:FE:13:3E:0C:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/bf924dbd-34bc-3c73-9911-e6e933405f1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.crl

            X509v3 Authority Key Identifier:
                keyid:09:E5:A6:15:6F:8C:9D:40:E2:35:5F:CF:DA:0D:F5:05:3E:52:6F:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3ee720de-c322-4bb5-b8cd-c7a3f23b92d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.170.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:80:80:d5:00:e3:c1:0a:18:62:57:11:a7:b5:62:20:aa:17:
         b3:3a:9f:2c:d4:e1:ac:ce:ab:9c:95:31:4f:f9:fb:e5:ba:d7:
         e9:4e:06:69:d1:a7:ee:aa:36:c1:f8:ca:11:eb:8d:b5:04:60:
         73:71:98:f4:b4:09:05:e1:ee:04:15:e6:bd:96:9c:77:8e:94:
         e1:3a:4f:80:33:4c:65:54:84:c7:ca:16:9d:da:f3:1a:64:ef:
         5b:9c:d3:80:54:ed:12:19:ea:71:8b:16:6c:c8:c9:4e:e3:0f:
         65:ed:da:0a:b7:e3:19:78:a0:66:11:b0:80:c4:37:26:21:cf:
         73:84:fe:f3:4b:d1:6c:04:e5:29:11:3a:da:6f:45:43:29:04:
         dc:89:90:e1:f7:f9:44:c5:e9:0f:a9:12:21:ef:ab:65:cf:01:
         7b:bb:3c:86:8e:e6:56:e0:36:a4:70:84:41:76:40:59:44:f6:
         9a:9f:94:ad:36:1b:fe:84:7a:5b:7e:95:33:24:0a:b6:3e:64:
         a4:27:b8:0e:73:df:19:e7:68:bc:ca:3c:97:e8:00:15:57:2b:
         2e:2e:8b:d7:3b:3a:8a:0b:c8:58:58:4d:19:85:83:d2:3f:2f:
         d7:a1:f2:10:6a:ef:04:84:99:d3:59:7a:a4:d4:20:02:8a:b2:
         21:93:ea:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:44:15 2026 by rpki-client