Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ab2e1e11-8f31-3499-914c-b50bfd222cbb.roa
File:                     ab2e1e11-8f31-3499-914c-b50bfd222cbb.roa (raw, json)
Hash identifier:          rj2NyyuSbfFkTg8l2/uURdmbHNjXTl/jxWutuOIQ8SA=
Subject key identifier:   CA:DD:66:9A:7E:67:C5:23:14:8E:56:86:0F:54:79:D2:1C:E3:0F:6C
Certificate issuer:       /CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
Certificate serial:       010D0C9F4328584D2BDA39F8535DAFBDEE4A2880
Authority key identifier: 26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ab2e1e11-8f31-3499-914c-b50bfd222cbb.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     18771
IP address blocks:        23.190.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:39:f8:53:5d:af:bd:ee:4a:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=1e83c1b9-472c-4c6f-a1d1-c8559e5c7f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:17:73:54:67:6d:94:af:93:7e:dd:91:2b:b3:
                    7b:5e:e7:12:91:25:ea:b9:c9:e3:0d:7f:dc:42:c8:
                    8f:44:6f:ac:fc:45:98:6a:e8:06:e3:41:38:24:07:
                    8f:db:03:06:cb:45:43:1f:d1:1d:19:dd:01:32:5d:
                    41:f7:b2:58:c5:d5:ff:fa:5f:15:b2:35:d9:6d:db:
                    a8:33:a3:88:5c:86:ed:35:fe:a6:4a:a4:d2:e1:99:
                    73:9b:e1:3e:dc:7e:e5:6e:cc:41:2c:db:88:8d:dc:
                    b7:8a:b9:ae:26:cf:a3:e8:85:55:68:64:95:6c:a9:
                    2b:b8:cc:b9:7a:ef:b8:74:1a:6c:f8:42:07:7c:b1:
                    b4:b8:1d:af:c4:d8:ce:ab:89:14:04:ec:1b:27:b3:
                    18:0d:70:0f:5e:f0:c3:3e:24:33:54:c4:1d:d5:c6:
                    7b:1c:85:24:f6:34:3b:d9:4e:b4:5b:54:cf:29:65:
                    05:a2:7b:46:03:b8:8a:01:3c:83:e5:71:1a:79:88:
                    27:62:64:22:36:15:99:bc:7b:c4:19:ea:5e:1c:59:
                    89:37:21:89:ee:41:09:9c:55:37:82:c2:24:e3:2f:
                    52:4a:6d:10:71:02:24:2e:0a:8f:93:b0:65:9b:cc:
                    cc:07:2a:a3:ff:9d:da:b3:01:d1:77:35:56:9d:3a:
                    7d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DD:66:9A:7E:67:C5:23:14:8E:56:86:0F:54:79:D2:1C:E3:0F:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/ab2e1e11-8f31-3499-914c-b50bfd222cbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.crl

            X509v3 Authority Key Identifier:
                keyid:26:40:8A:FD:16:DB:87:11:C6:D9:C6:70:65:4A:9E:DC:F2:BB:93:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e6346f2-66fb-4ac9-8b0c-1f8bbbfc8593.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:f1:a7:b7:57:10:ca:ea:e2:aa:6f:ae:0f:12:ff:33:58:27:
         a5:19:0d:3f:d7:92:4a:95:f9:48:af:50:4b:5d:67:85:67:1e:
         3b:0c:3e:37:74:13:91:9f:5a:6c:18:1c:3c:a3:98:82:c4:02:
         78:85:d7:38:7a:20:8b:32:67:17:d7:1e:4f:da:79:d8:86:4e:
         e3:79:3c:79:a8:ba:8d:7a:b7:1b:38:45:9c:24:53:8d:f0:da:
         e8:ad:f4:cd:0a:8e:74:bb:67:73:d0:1f:ee:29:60:9f:92:71:
         6b:45:41:27:af:8b:30:ec:02:39:a7:bb:f0:c3:11:5d:1d:f2:
         ad:2a:43:5f:1e:f5:ad:dd:b4:64:c4:2d:21:8c:8d:60:4c:83:
         1e:68:52:27:ea:ec:da:d7:91:ca:c4:54:5d:b0:d5:6e:07:bd:
         ab:2a:d5:5c:ce:64:cb:88:e8:16:85:b6:d6:d7:70:17:e8:28:
         d2:1f:c5:c6:56:1d:50:ca:8f:40:47:c0:e0:29:2d:c6:ba:0e:
         b0:0b:4c:46:be:54:62:e2:97:71:3e:6b:92:b3:d7:78:18:f7:
         8f:85:b6:3a:ad:6e:fe:5f:c5:f7:78:3a:65:be:31:b7:d2:3d:
         42:47:36:19:ae:3d:88:bb:60:39:1e:da:93:d5:c8:7d:c4:b9:
         cf:14:cd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:17:09 2026 by rpki-client