Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/2f5c6178-be65-33b2-b1a2-5f0214904d11.roa
File:                     2f5c6178-be65-33b2-b1a2-5f0214904d11.roa (raw, json)
Hash identifier:          t/us3o/paQ5UAsTKigLqYCgmNU+5FiTs0kgtyVELtDo=
Subject key identifier:   48:34:6C:8A:25:AC:41:73:4F:4E:DC:50:05:F7:A6:37:42:F2:2E:84
Certificate issuer:       /CN=ea152a71-38ff-47de-9174-fc40dc152c36
Certificate serial:       010D0C9F4328584E51C4B9C42854D86BC63DA300
Authority key identifier: E2:10:F0:A4:43:06:CD:E3:2A:AD:0D:9B:4C:CB:4C:4E:B8:24:B0:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/2f5c6178-be65-33b2-b1a2-5f0214904d11.roa
Signing time:             Sun 28 Jun 2026 07:45:22 +0000
ROA not before:           Sun 28 Jun 2026 07:45:22 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     400741
IP address blocks:        23.143.120.0/24 maxlen: 24
                          131.143.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/ea152a71-38ff-47de-9174-fc40dc152c36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/ea152a71-38ff-47de-9174-fc40dc152c36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:c4:b9:c4:28:54:d8:6b:c6:3d:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea152a71-38ff-47de-9174-fc40dc152c36
        Validity
            Not Before: Jun 28 07:45:22 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=307e4b94-2d4a-4bbe-af78-ca762d5a6d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6d:44:7e:ca:5f:05:74:17:d6:a6:65:27:ee:
                    8a:e8:60:dd:73:58:b8:fb:f3:f8:c9:33:22:c4:d5:
                    30:44:3c:ed:0d:74:97:0f:35:ec:f9:86:88:ef:d7:
                    87:db:8f:be:86:b1:38:2d:fb:f4:aa:bf:57:9b:41:
                    97:74:42:8d:c9:5c:18:7e:e2:4e:57:20:1b:eb:db:
                    14:6b:85:cc:bc:1f:f6:42:5a:b0:34:ca:36:dc:35:
                    ea:bf:49:6e:8f:6d:19:85:53:35:47:b4:02:60:0a:
                    a5:01:4c:f9:85:50:0c:c8:e3:80:4e:be:bb:d3:a2:
                    49:31:5a:9b:76:f3:a1:17:a5:cf:de:b5:3e:09:c0:
                    98:8f:d1:41:b8:05:2e:31:ed:ff:49:8f:08:59:61:
                    5b:80:7f:15:5c:52:46:d2:7c:eb:b6:dd:d7:f6:5e:
                    d4:20:93:02:be:ec:43:09:6e:43:79:6b:c2:32:90:
                    37:0c:d8:7a:22:e1:c6:26:4b:a0:a6:66:dd:5a:11:
                    3e:3f:66:33:c9:c3:e1:5c:46:c2:61:47:aa:bd:2a:
                    cf:42:e5:1b:75:e4:89:8e:8c:9e:fe:85:b6:17:2d:
                    61:25:0d:98:c6:6a:71:46:d2:18:65:8e:39:ce:b5:
                    b1:0d:8b:81:b4:a2:bc:e5:b9:a4:1f:40:6a:7d:09:
                    29:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:34:6C:8A:25:AC:41:73:4F:4E:DC:50:05:F7:A6:37:42:F2:2E:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/2f5c6178-be65-33b2-b1a2-5f0214904d11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36/ea152a71-38ff-47de-9174-fc40dc152c36.crl

            X509v3 Authority Key Identifier:
                keyid:E2:10:F0:A4:43:06:CD:E3:2A:AD:0D:9B:4C:CB:4C:4E:B8:24:B0:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ea152a71-38ff-47de-9174-fc40dc152c36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.120.0/24
                  131.143.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:a3:e4:16:3b:d3:92:73:53:e0:78:f8:1d:31:59:e5:27:76:
         f5:a9:12:62:8f:10:a4:10:b2:36:77:85:c4:f7:7b:f6:39:15:
         18:f7:c9:ee:44:18:13:0a:27:13:ff:cf:5c:68:9c:21:aa:55:
         83:ef:c5:4c:7b:e2:68:6c:80:a3:98:d4:32:89:8a:de:fa:7a:
         c1:98:d8:de:3f:6d:3a:d8:78:bf:4e:65:6c:00:f3:cb:35:d8:
         ef:d6:7c:a5:32:ee:5a:69:20:28:06:51:b1:8a:f3:79:d5:17:
         58:a7:54:fe:f1:74:e1:73:b8:26:06:4f:93:c5:03:c2:1e:43:
         4e:b5:14:8e:cc:96:34:65:d1:0b:d5:36:e9:fd:8b:64:36:01:
         85:c6:03:e3:7f:27:b2:0b:59:c7:84:31:36:21:1e:3f:a8:aa:
         23:9a:d3:c6:36:f5:a1:5b:1a:2c:17:e3:ce:c5:a5:27:c7:c7:
         bf:45:94:ae:07:cc:6c:f3:4b:af:48:16:f2:52:e8:b4:96:11:
         14:6f:f0:37:0b:fb:7d:4e:85:52:09:0a:4d:b0:e9:5f:9a:07:
         3d:d1:0c:9c:57:08:97:a2:c0:f5:22:26:b2:3b:fe:7d:cf:39:
         97:c9:91:d2:8c:c9:1e:81:fb:e0:3d:9f:2b:e1:73:0f:c2:c4:
         c1:50:ba:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:37:25 2026 by rpki-client