Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/81245cee-cdb6-3240-b06f-beea9153778f.roa
File:                     81245cee-cdb6-3240-b06f-beea9153778f.roa (raw, json)
Hash identifier:          Nk8rjZuwF9GiN2IWy7guPRKSQqCQqY+3Kdr6ffnLLN8=
Subject key identifier:   08:29:E8:B4:23:42:5F:59:C2:7B:55:AF:CC:57:88:C0:FB:D5:54:7F
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584DB1DACFD59077D3580CC11020
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/81245cee-cdb6-3240-b06f-beea9153778f.roa
Signing time:             Sat 02 May 2026 01:00:24 +0000
ROA not before:           Sat 02 May 2026 01:00:24 +0000
ROA not after:            Fri 31 Jul 2026 01:00:24 +0000
asID:                     12083
IP address blocks:        23.28.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b1:da:cf:d5:90:77:d3:58:0c:c1:10:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: May  2 01:00:24 2026 GMT
            Not After : Jul 31 01:00:24 2026 GMT
        Subject: CN=8f7cd112-b2f3-4d13-87ab-e298aef4f865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d4:b5:47:01:6b:17:a9:8f:ee:13:1b:07:57:
                    ab:1f:5c:2d:d6:6f:89:e5:4c:f3:d9:88:7f:e8:6a:
                    ca:37:8a:81:57:f0:1e:89:62:7a:0e:19:e2:8b:9c:
                    03:f5:a9:60:9c:25:29:fc:19:cb:8c:52:a5:19:af:
                    16:b9:d9:ed:ef:bf:47:cf:2a:42:27:9d:d9:fa:fa:
                    62:61:c6:2b:1d:33:f2:52:56:59:a3:d3:b9:03:c7:
                    20:7c:54:46:2e:6d:bb:93:bb:1b:99:a3:78:ae:f2:
                    01:5c:82:90:a8:5a:1e:ed:66:c1:18:59:1d:09:ea:
                    cf:e9:f8:a1:a3:14:e2:a4:8f:8a:46:f6:ce:54:9c:
                    f8:44:c0:82:36:ea:82:91:39:57:63:ba:4a:bb:98:
                    ff:f4:c1:cc:cf:da:57:0e:d3:0d:c5:7c:b3:c4:dc:
                    fa:aa:91:25:07:c2:72:9d:7a:3a:ca:25:2f:5e:d7:
                    b4:76:6c:29:62:8c:40:7d:6c:3c:12:05:6c:67:f2:
                    77:e5:68:3e:16:21:21:8f:56:1a:93:75:85:2e:c3:
                    cf:8a:03:b9:e9:ac:1b:e9:1b:ac:ba:1f:12:1b:06:
                    02:61:6f:e1:33:68:b7:bf:bd:fe:51:9b:37:a9:cd:
                    52:04:97:0d:14:d3:44:0b:f5:3b:4a:39:4c:bd:83:
                    e4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:29:E8:B4:23:42:5F:59:C2:7B:55:AF:CC:57:88:C0:FB:D5:54:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/81245cee-cdb6-3240-b06f-beea9153778f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.28.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c0:00:91:4c:f4:54:cb:58:d9:05:e1:f3:e9:dc:f6:cb:fe:
         a1:ad:33:37:56:29:79:9d:2c:50:82:f1:2b:04:46:af:ef:b6:
         73:77:e7:81:6b:eb:9e:1f:a2:af:3a:bf:38:c7:7e:75:97:bf:
         6d:eb:ad:f8:70:ef:d8:31:87:fc:46:be:a0:e6:98:22:2d:34:
         fa:d4:b2:b3:84:f7:f7:b9:ca:dd:b2:6a:37:b7:e3:29:e7:54:
         e8:2d:27:f2:ca:ae:db:87:5e:23:44:46:e3:09:3b:5b:e3:56:
         7d:6a:c7:03:31:2f:3a:2a:15:61:2d:74:6d:79:b2:76:66:d3:
         88:0d:3b:0a:6b:f8:a4:6f:53:5a:36:16:ed:89:99:ee:bc:ec:
         8e:1d:7a:14:76:75:e6:41:c2:8d:08:70:1f:c3:de:c4:b9:32:
         3f:ef:57:f0:e0:16:07:e2:cc:d7:fc:b7:2b:e2:d2:63:ee:74:
         cd:fb:31:f6:5d:7a:22:96:6f:50:86:ea:66:b5:4c:2c:11:2c:
         51:05:5d:e7:8e:3d:fb:73:50:21:c8:30:70:d6:3d:eb:14:ed:
         de:19:d6:9b:e3:f2:24:29:88:8c:72:be:19:13:2d:ae:25:04:
         64:26:e9:23:fc:67:b2:14:ad:34:d7:4b:2c:eb:d4:a9:d0:fc:
         20:c9:79:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:56 2026 by rpki-client