Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385/1fb53b31-9777-3a1c-96a9-3cc5b4aa2a44.roa
File:                     1fb53b31-9777-3a1c-96a9-3cc5b4aa2a44.roa (raw, json)
Hash identifier:          GcRHPKMKQvHPUe26WOCWJDrW4PpZBBq+x++2loCraF4=
Subject key identifier:   BC:31:2B:A1:D2:B2:27:40:94:CB:65:F3:F8:6B:D0:E5:1A:B3:FC:EE
Certificate issuer:       /CN=513b9f91-8392-4631-810f-da15bbfd7385
Certificate serial:       010D0C9F4328584E7D548175210BD2455EB50C80
Authority key identifier: 8C:03:C8:1E:EB:54:6A:29:B9:BD:99:AA:F0:97:08:28:1F:C7:1E:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385/1fb53b31-9777-3a1c-96a9-3cc5b4aa2a44.roa
Signing time:             Mon 13 Jul 2026 22:14:49 +0000
ROA not before:           Mon 13 Jul 2026 22:14:49 +0000
ROA not after:            Sun 11 Oct 2026 22:14:49 +0000
asID:                     401617
IP address blocks:        23.132.252.0/24 maxlen: 24
                          2602:f72f::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385/513b9f91-8392-4631-810f-da15bbfd7385.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385/513b9f91-8392-4631-810f-da15bbfd7385.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7d:54:81:75:21:0b:d2:45:5e:b5:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513b9f91-8392-4631-810f-da15bbfd7385
        Validity
            Not Before: Jul 13 22:14:49 2026 GMT
            Not After : Oct 11 22:14:49 2026 GMT
        Subject: CN=0bcd9f68-6a5b-4b14-8457-711cff6e838e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:43:a1:64:45:80:b6:47:a1:70:77:a0:3b:83:
                    f5:14:48:96:04:6a:ec:54:52:3b:53:81:01:ef:d9:
                    76:4e:be:88:c1:7f:de:88:0a:e9:97:62:24:e1:6d:
                    ce:34:92:da:44:0d:23:1b:69:5f:14:be:51:d8:ef:
                    1c:40:b1:d6:62:b4:56:8b:e1:03:dd:2c:1e:5e:1c:
                    ec:c1:ec:91:96:d9:4d:52:1d:b8:ce:f4:31:68:2a:
                    3a:d0:a8:f9:20:27:09:06:cd:35:3c:a4:06:d6:81:
                    47:44:34:06:ce:88:e3:29:e0:e5:14:a9:35:cc:dc:
                    61:4c:23:84:4a:92:fa:ad:aa:1b:34:87:31:d6:6e:
                    16:cd:d7:ae:ec:81:42:81:02:1a:f3:ca:7b:da:e4:
                    fd:1a:1a:0c:de:4b:25:d9:62:ab:c0:a3:87:66:ef:
                    45:9a:0a:89:4a:ef:72:70:cc:af:5f:34:07:f7:75:
                    66:ae:73:d2:c9:6e:46:cb:fa:58:33:4f:69:94:54:
                    2e:d1:d4:d6:35:de:68:01:3e:06:df:e0:7e:c1:d1:
                    cc:0a:c1:5a:60:a4:62:30:da:2a:b1:ea:98:06:f0:
                    9e:da:4f:0e:31:e8:e9:6b:60:a5:10:34:f3:76:db:
                    22:f8:c2:0c:f0:d4:72:60:60:95:6b:be:be:1d:5b:
                    b1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:31:2B:A1:D2:B2:27:40:94:CB:65:F3:F8:6B:D0:E5:1A:B3:FC:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385/1fb53b31-9777-3a1c-96a9-3cc5b4aa2a44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385/513b9f91-8392-4631-810f-da15bbfd7385.crl

            X509v3 Authority Key Identifier:
                keyid:8C:03:C8:1E:EB:54:6A:29:B9:BD:99:AA:F0:97:08:28:1F:C7:1E:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.252.0/24
                IPv6:
                  2602:f72f::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:fe:68:41:2b:8d:74:93:53:50:2e:1b:60:2f:25:7c:89:c2:
         c7:b0:e7:5f:4a:dd:d1:11:7a:d2:5f:38:19:93:02:a7:69:cb:
         02:c8:f4:c2:1f:49:8f:f6:6e:14:0b:6e:97:49:cf:1c:37:1e:
         bc:ca:10:7c:48:10:2b:00:c4:f0:de:e1:60:ca:9c:bf:b2:0f:
         ce:e4:ac:3c:a8:e3:32:44:20:44:89:1f:64:c2:9a:21:33:49:
         0c:c3:fc:56:11:60:27:24:67:27:26:8e:d6:fb:37:95:15:fc:
         93:ad:7c:a7:4b:c4:f9:05:88:8c:9f:e1:cc:fd:17:e5:0e:c5:
         a0:ee:c2:e3:0e:46:15:0f:0c:b5:71:cf:a6:df:2e:88:2a:43:
         0a:23:68:a5:6d:68:91:ba:8d:48:9b:64:8f:2c:37:a2:7e:b1:
         5e:a2:7f:ac:62:ec:66:c9:f0:76:a1:d9:a0:53:c8:06:47:71:
         63:34:58:a1:76:52:3d:ce:be:e9:39:7b:50:a1:f8:62:88:e2:
         4d:de:18:bd:c5:44:b3:aa:ef:38:b1:80:db:ac:bd:93:30:86:
         a8:a0:25:ab:48:3f:21:c7:2a:c3:80:7c:36:09:be:f3:80:48:
         fe:6e:7e:ef:28:87:ba:2c:81:a0:71:47:84:61:b3:72:10:07:
         f9:f7:69:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:23 2026 by rpki-client