Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/8ce9ca07-31f0-394b-a18d-14bc822f4e82.roa
File:                     8ce9ca07-31f0-394b-a18d-14bc822f4e82.roa (raw, json)
Hash identifier:          sNIuroL0aAKATrXquo9lgtoTU0QP7Lm8+lyhBblNVA4=
Subject key identifier:   90:42:AC:B4:37:48:49:09:CD:01:01:1E:F8:20:C5:B8:90:B9:29:03
Certificate issuer:       /CN=efa71532-ea1b-4e27-a2a7-c90b9db119b6
Certificate serial:       010D0C9F4328584DBFD07A7C412909FFD5799C80
Authority key identifier: 22:FD:47:70:56:07:EE:50:24:C9:66:5B:15:C9:83:C3:22:3D:E1:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/8ce9ca07-31f0-394b-a18d-14bc822f4e82.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     19568
IP address blocks:        23.170.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:7a:7c:41:29:09:ff:d5:79:9c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efa71532-ea1b-4e27-a2a7-c90b9db119b6
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=99de8c90-0fd4-4bee-a2d1-78426e369664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:97:84:f6:b1:5a:b1:25:e4:d7:ed:49:8d:2f:
                    07:70:f6:d2:c6:fa:4d:ac:0f:60:36:0f:46:47:44:
                    66:a0:8c:99:6e:c1:f9:16:c6:36:7e:12:c1:b2:8f:
                    25:17:0f:e2:5f:42:fc:5f:77:c0:3d:6c:bd:3b:61:
                    0e:ce:8f:6e:9b:b9:16:9c:21:ce:e7:5f:5b:97:89:
                    21:6d:4d:19:8c:a1:1a:d0:f3:6d:be:af:8e:08:37:
                    aa:09:e8:fe:66:22:0e:3b:10:ee:ab:2a:5f:84:f1:
                    b2:5b:7f:75:05:e6:2e:12:77:9e:27:f3:7a:e8:a7:
                    e5:4a:75:1c:9d:8a:ef:4e:e1:52:58:ee:57:6b:0e:
                    d6:72:ae:09:0c:03:a3:9e:e2:5b:33:e4:72:ab:0b:
                    d0:ec:59:eb:ab:f8:9e:4b:3c:1b:88:e5:bf:0e:18:
                    2c:64:53:5a:c7:33:df:ec:48:19:63:ea:b4:d7:7d:
                    d6:63:26:0c:12:ab:af:7c:c7:1b:ea:23:c0:85:de:
                    55:32:e3:c9:d0:f8:b9:55:66:76:4d:ec:22:62:9c:
                    d8:26:9c:05:e7:68:2e:2d:89:8a:29:6d:4f:7b:10:
                    dc:8e:d9:2f:14:7b:fa:9e:2b:67:70:00:cc:94:16:
                    d8:d3:b7:07:1c:a5:ab:1b:a3:b4:d6:88:6d:58:2d:
                    1a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:42:AC:B4:37:48:49:09:CD:01:01:1E:F8:20:C5:B8:90:B9:29:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/8ce9ca07-31f0-394b-a18d-14bc822f4e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6/efa71532-ea1b-4e27-a2a7-c90b9db119b6.crl

            X509v3 Authority Key Identifier:
                keyid:22:FD:47:70:56:07:EE:50:24:C9:66:5B:15:C9:83:C3:22:3D:E1:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/efa71532-ea1b-4e27-a2a7-c90b9db119b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:0d:7e:90:b8:fe:3a:92:dd:49:c5:5a:d0:d5:58:b9:9a:44:
         ea:28:d6:d5:e3:74:e1:89:fa:fb:5d:5b:a7:b9:a3:c8:7e:2f:
         4e:62:d3:70:89:5a:a2:2f:53:87:23:34:c5:ed:82:ac:f7:5e:
         a4:88:ca:32:f6:db:aa:43:d2:1b:93:06:97:57:f4:b6:b9:fc:
         90:cc:f1:c0:6f:08:7e:44:ae:b7:83:d3:c1:3d:ec:ce:a9:a0:
         40:d8:1a:d7:c4:98:1e:d5:fd:71:9e:3f:f8:3b:ab:9b:dd:1b:
         49:76:c9:aa:7d:1d:07:b5:30:73:54:69:ec:30:81:92:d1:fd:
         1a:60:69:0a:7a:d5:89:3f:51:bf:91:56:12:3e:5a:b8:ed:c8:
         cc:db:09:19:fd:b7:12:d6:89:0f:64:99:42:56:7c:86:7e:1a:
         4c:57:e3:dc:41:ee:da:3c:20:22:b5:41:f5:17:c3:d9:28:6c:
         4c:93:56:ba:d6:b0:64:39:d4:c3:e4:10:0c:ae:39:0e:be:49:
         4f:e6:ff:0e:dd:5f:b8:51:18:e2:49:f8:5b:f5:8b:d8:b9:13:
         c8:77:e4:ba:20:6c:63:13:fd:02:48:2c:62:0d:d7:9a:90:8f:
         d0:36:3c:d6:3d:28:fd:70:e9:70:7e:54:be:36:b8:a6:49:da:
         43:cc:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:12:26 2026 by rpki-client