Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ddead2ae-0d5f-3d5f-919f-0562beae14ce.roa
File:                     ddead2ae-0d5f-3d5f-919f-0562beae14ce.roa (raw, json)
Hash identifier:          x3T3JtyI2NF7F5H4fvIHRjaLfH1GBFvZ9lpOg7uI9Uk=
Subject key identifier:   01:D3:66:0F:E9:0E:3A:C7:BE:3B:A7:78:C4:28:AF:CD:0A:7D:C2:78
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584D47C4D89948AC4216A6435A40
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ddead2ae-0d5f-3d5f-919f-0562beae14ce.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     23473
IP address blocks:        173.230.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c4:d8:99:48:ac:42:16:a6:43:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=ff98b9aa-3eae-4166-96e3-2cc24e6eb8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:e9:64:64:01:c8:86:ed:f2:b2:22:76:8f:
                    e9:9d:3f:6e:9e:98:9e:b2:33:87:36:52:08:53:eb:
                    bc:95:24:4f:03:2a:af:c4:3b:3e:a6:59:a7:38:4e:
                    2a:7b:3c:d5:3e:b7:14:af:82:80:90:0e:54:00:87:
                    67:e2:ed:0e:b1:b3:56:ed:fe:05:55:cb:4b:f1:ca:
                    d7:83:2b:dc:88:fb:2e:b2:24:0e:0d:42:80:b8:25:
                    91:a5:06:78:66:51:34:31:d2:fd:1f:1f:31:a0:99:
                    9e:1b:af:2a:6f:09:84:47:87:73:74:a4:4c:09:48:
                    ac:7b:e5:26:cf:9d:59:63:c9:2e:92:b1:45:4b:5d:
                    0b:f1:a4:5d:00:bb:78:61:31:04:98:e4:93:ba:cb:
                    3e:e9:ee:34:90:b6:84:82:eb:16:9f:56:ed:84:65:
                    f4:48:95:fb:95:b2:2f:4d:c9:f4:ef:5e:59:26:16:
                    43:b0:43:c2:05:52:f6:00:de:64:ab:e4:e9:6d:da:
                    8b:8f:80:9b:1b:9f:19:3d:95:5e:bc:f2:d9:71:d1:
                    16:c2:aa:ff:45:e7:3b:45:a6:23:df:bd:5c:87:a8:
                    cb:48:da:ea:e5:59:87:24:13:9f:3e:3f:5e:af:88:
                    2d:44:c0:79:7f:8f:21:0c:db:30:30:59:17:9d:b7:
                    5b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D3:66:0F:E9:0E:3A:C7:BE:3B:A7:78:C4:28:AF:CD:0A:7D:C2:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/ddead2ae-0d5f-3d5f-919f-0562beae14ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.230.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:13:d6:0b:7a:63:14:1a:bc:5c:c6:f8:26:e7:69:05:37:45:
         8d:d1:ea:76:13:bb:e8:60:56:b2:f1:f4:b8:92:21:c7:51:a1:
         67:51:a0:66:42:58:07:28:e6:8f:2b:45:ae:a0:2d:92:03:04:
         b9:1c:7c:58:6f:36:49:d4:53:8a:78:6a:01:1f:74:18:36:2a:
         9d:c5:72:ca:c7:06:9e:4d:f1:0a:fd:ec:38:af:72:47:df:06:
         c6:12:39:69:e9:56:a5:59:ea:4b:bc:6a:b7:d2:aa:8a:cc:3a:
         5b:04:2d:67:5b:85:5a:45:61:78:d2:30:d2:19:11:5c:06:55:
         06:60:17:97:3b:ff:e0:6a:c0:47:22:fe:01:37:6b:33:bc:c2:
         8b:de:e2:df:43:d3:a4:c0:9e:84:bc:64:1e:07:6e:bb:76:96:
         83:e9:08:95:d7:24:1e:0e:43:c9:c4:dc:bb:1d:51:e2:30:e7:
         4b:76:46:08:79:99:4a:dd:a2:4a:1a:9b:be:8c:35:c7:d8:49:
         fe:43:ba:44:25:2b:13:48:01:13:ff:c0:f8:a9:de:61:4d:db:
         7d:55:f8:98:b0:2a:63:c7:f5:37:3a:e2:47:82:5b:72:06:fd:
         4e:11:94:2d:a6:dc:ce:d8:32:be:f2:1e:5f:74:44:6f:6d:a1:
         56:c8:60:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:01 2026 by rpki-client