Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa
File:                     4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa (raw, json)
Hash identifier:          Y4l/iFJYL/ED0kELlFIc3uTixDuYyy3FHzkuEdRqnxw=
Subject key identifier:   E4:B0:B8:50:00:43:DD:43:9E:24:C4:5E:51:61:01:47:64:D4:D6:FA
Certificate issuer:       /CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491
Certificate serial:       010D0C9F4328584E815F9689960595569E98EB00
Authority key identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa
Signing time:             Wed 15 Jul 2026 09:00:13 +0000
ROA not before:           Wed 15 Jul 2026 09:00:13 +0000
ROA not after:            Tue 13 Oct 2026 09:00:13 +0000
asID:                     395332
IP address blocks:        23.146.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:5f:96:89:96:05:95:56:9e:98:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491
        Validity
            Not Before: Jul 15 09:00:13 2026 GMT
            Not After : Oct 13 09:00:13 2026 GMT
        Subject: CN=67ed7a07-7b5d-4659-953c-a5b997391994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e2:21:62:1d:99:6d:1e:5c:c8:44:38:c9:79:
                    c6:6d:c2:5e:60:ce:46:32:70:07:c3:40:71:a0:99:
                    f5:31:e8:48:05:1f:98:36:61:18:fb:36:4c:28:b6:
                    8d:92:e0:8f:ed:6d:1d:60:ea:0c:61:61:74:06:7f:
                    95:0d:9e:84:19:42:90:62:5c:eb:29:5f:78:34:d0:
                    2c:9c:71:05:da:ad:59:3d:1d:8e:f7:4a:ab:09:15:
                    10:f6:6b:30:70:c0:d8:e8:86:e8:92:1f:cf:c3:9a:
                    18:3a:81:e4:ff:01:3a:33:24:24:fa:98:6a:80:01:
                    b2:36:95:1e:5e:95:8d:e6:f0:84:77:a0:6d:ce:54:
                    61:71:34:26:15:96:14:de:27:30:a6:ed:e7:dd:5e:
                    e9:fe:56:29:2e:51:45:17:84:2f:08:43:10:ad:42:
                    40:ff:d9:a0:a6:c1:85:cf:5b:48:3f:bf:e9:a4:df:
                    71:d1:9d:6c:81:20:e0:e9:9b:9e:9f:6e:b7:4b:11:
                    17:b0:7f:7c:39:f6:aa:eb:84:79:e9:21:96:3c:ce:
                    28:d8:d4:bb:68:27:f5:57:00:78:ef:67:fe:73:da:
                    e9:a5:ef:90:a2:52:07:56:ed:8b:65:11:62:b9:c0:
                    b6:f6:a3:c2:bf:9f:7d:c5:de:7c:56:d0:f6:56:eb:
                    21:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B0:B8:50:00:43:DD:43:9E:24:C4:5E:51:61:01:47:64:D4:D6:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl

            X509v3 Authority Key Identifier:
                keyid:E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:a0:82:33:30:75:2d:cc:92:80:9f:96:a4:86:01:05:20:5f:
         66:84:6e:d8:13:18:2d:b9:99:3a:6f:ec:e2:ee:95:1a:d3:8c:
         c2:e3:f5:30:60:e8:d4:64:39:1f:64:16:3a:f7:6f:bc:3d:8c:
         a4:a9:21:1f:3e:c4:51:24:4d:9e:63:1f:60:4f:34:37:b9:b2:
         d8:d7:49:f2:1e:ab:64:03:e0:48:07:1c:32:dc:cd:1a:83:6a:
         fa:82:16:df:b0:26:b7:fe:71:97:a6:34:b1:e8:db:23:88:5e:
         ed:ff:a5:45:bc:04:09:d4:99:61:b3:ba:87:9c:2c:09:14:f8:
         07:33:91:88:88:e8:fe:8c:ba:c7:c0:32:72:db:3b:2e:b7:07:
         9f:5a:81:95:ec:3f:50:5c:12:b4:a9:22:c6:01:15:b7:6a:bb:
         06:ae:f5:ad:4c:75:25:a1:eb:39:f7:d2:3b:cc:7a:66:57:81:
         05:f4:6a:d5:4b:3c:2e:9e:ce:67:1c:70:50:2e:a4:7b:13:0d:
         9f:ab:85:84:13:93:31:77:f3:b2:a9:c9:95:ee:50:48:eb:80:
         2a:07:47:68:01:cb:0d:8c:af:99:8d:a7:ea:22:f0:c9:c7:74:
         b7:75:9d:ba:fd:e7:d9:42:a2:fe:69:23:28:47:1a:80:56:0a:
         90:3c:26:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:10:51 2026 by rpki-client