Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa
File:                     d16055ca-dc7f-3352-833b-ee9a136e1952.roa (raw, json)
Hash identifier:          RcTaLRZYJIN6EWjD6BwZ2tpz7ff5/4ibkaGgM1ptzVo=
Subject key identifier:   79:26:72:62:92:B7:6B:DA:36:39:17:A3:E3:C7:DF:09:B2:2A:CE:E0
Certificate issuer:       /CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
Certificate serial:       010D0C9F4328584DCDC5AC1FF4EEF22ACA250800
Authority key identifier: EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     23347
IP address blocks:        23.156.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:ac:1f:f4:ee:f2:2a:ca:25:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7910a08-9cef-446d-8b36-1ad473d3fb84
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=8f45d02f-930a-4daf-b490-b2a0bede8015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ea:80:98:10:4f:67:69:fe:ca:7f:f8:42:11:
                    3e:88:70:c8:7a:84:34:35:e6:cc:04:ba:72:64:6b:
                    da:66:79:2e:b9:80:c8:74:9a:64:54:74:0f:48:72:
                    08:4d:17:c8:89:80:87:2b:44:70:32:fa:77:eb:04:
                    e6:a9:b7:cb:fe:9c:98:fd:34:e4:a9:04:c4:28:24:
                    ee:c5:9a:1b:ef:2c:9c:1b:45:cc:b3:9c:47:b9:51:
                    fa:1b:6f:07:8a:cd:f4:b4:4c:ed:de:d5:30:28:a7:
                    17:45:ca:57:0f:a7:26:02:22:3a:33:c1:6f:92:95:
                    87:ee:e6:da:ae:58:34:d6:22:f9:01:9a:38:da:af:
                    49:19:d8:c3:77:91:19:74:ff:6d:d9:08:db:89:9a:
                    15:77:ae:50:79:af:d8:08:08:80:a8:ad:31:c5:99:
                    86:23:30:98:5d:ae:a0:53:18:be:98:97:2e:a3:9f:
                    14:40:2c:31:e3:06:15:ac:81:3a:ca:5a:35:18:bc:
                    36:27:45:32:82:dc:38:7d:3b:d8:40:6d:61:82:c3:
                    86:e8:0f:34:60:f7:e3:8c:19:18:fc:be:ec:e7:ac:
                    fb:88:b9:34:ba:36:4a:72:b7:15:58:57:c7:ba:bd:
                    b1:37:2a:17:c0:eb:49:ff:0b:b3:79:d5:ac:dd:57:
                    c7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:26:72:62:92:B7:6B:DA:36:39:17:A3:E3:C7:DF:09:B2:2A:CE:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/d16055ca-dc7f-3352-833b-ee9a136e1952.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84/c7910a08-9cef-446d-8b36-1ad473d3fb84.crl

            X509v3 Authority Key Identifier:
                keyid:EB:A6:60:A0:D3:2B:C7:47:9C:AE:D1:E2:0D:85:EB:46:93:B2:AA:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c7910a08-9cef-446d-8b36-1ad473d3fb84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:43:23:7e:a2:b3:92:ae:59:1e:96:9e:4c:ee:45:eb:c2:f0:
         e7:35:93:a4:a1:99:15:ce:d3:6f:68:09:10:0f:09:6d:0b:75:
         4a:00:85:47:7a:50:64:51:d0:ac:97:44:ac:13:ea:9f:66:12:
         95:b8:c8:de:be:52:09:ea:7a:40:c5:cf:c1:ef:46:d7:eb:97:
         29:17:7a:d6:a8:6a:71:14:64:55:81:3b:e1:18:6a:cb:7c:ea:
         c9:fb:70:3b:72:b7:46:92:70:cf:64:6b:7d:c2:38:81:bc:59:
         4d:53:5d:b0:11:f3:9b:75:64:8b:3f:c0:b4:0d:82:c9:99:9c:
         84:c7:4c:86:db:b7:61:1e:b6:40:f1:09:2b:a9:09:4b:98:e6:
         c3:bf:ce:15:a1:0c:46:38:54:f3:2c:ef:94:3f:4a:26:d8:c8:
         aa:c8:4a:23:67:f8:d1:4f:44:ed:db:08:51:41:d6:bf:37:66:
         e5:e1:5d:5a:76:b7:26:93:91:d5:69:0a:ca:fe:fb:ba:a3:85:
         f1:ba:2c:93:4a:b7:59:e5:85:0e:b3:3c:67:d8:b9:a9:67:f1:
         1d:eb:6e:0a:85:51:88:a8:74:e3:08:f2:c6:d2:9d:bf:7d:4c:
         de:49:4c:ae:53:02:cf:49:c9:9f:bf:ea:b9:d1:6a:69:a1:4e:
         f1:af:65:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:23:08 2026 by rpki-client