Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa
File:                     a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa (raw, json)
Hash identifier:          nmFyjeXHO28mede5cIGMsd43mN3dcpWJnjiCGoKyOVM=
Subject key identifier:   2D:7C:55:22:AA:0F:AE:02:7A:5F:14:DE:A7:D1:E4:7A:8A:E9:9D:79
Certificate issuer:       /CN=d2799306-5973-45b1-8828-5797abf141e5
Certificate serial:       010D0C9F4328584E5084A20DD8290F1394FB6980
Authority key identifier: D9:EA:50:F4:19:DA:80:D5:B1:CC:8F:F6:F5:66:C3:46:D6:6F:64:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     32281
IP address blocks:        23.159.224.0/24 maxlen: 24
                          2602:fe31::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/d2799306-5973-45b1-8828-5797abf141e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/d2799306-5973-45b1-8828-5797abf141e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:a2:0d:d8:29:0f:13:94:fb:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2799306-5973-45b1-8828-5797abf141e5
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=f4df9679-95c5-47b3-b414-f7c489a76e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f9:26:80:38:5f:c0:84:c8:4c:00:cf:d4:bc:
                    0b:9b:f7:01:ab:c6:f9:c6:56:32:9b:c4:30:52:c0:
                    6d:c2:4a:8f:0d:5a:38:31:0f:45:a7:46:a8:a7:25:
                    a8:2d:01:10:89:0a:b1:7e:24:fd:66:14:36:ad:cb:
                    80:8d:e8:68:9d:a8:32:0b:0a:fd:29:4c:c0:f5:da:
                    35:49:28:6f:97:e1:81:40:61:25:cc:90:d8:71:25:
                    00:4a:28:c7:79:ee:9d:71:70:28:3e:e5:da:74:ed:
                    41:c3:d3:bb:e3:d7:48:40:d1:0c:c9:20:eb:73:5d:
                    58:63:2f:01:83:9c:59:02:ae:24:42:4d:9b:82:c0:
                    41:83:05:bd:25:54:57:60:b2:24:c8:94:47:7b:1b:
                    cc:63:5d:2c:54:5d:14:43:76:2b:84:37:85:d4:3f:
                    10:df:9c:83:99:4b:7b:b4:7c:58:43:6a:94:b0:fb:
                    1d:f8:ca:00:b4:5e:27:7b:f7:96:f1:78:af:b4:11:
                    ca:f7:35:4f:2b:fb:61:70:26:ca:e6:25:b4:ba:1b:
                    67:1e:6c:14:9a:36:61:eb:c1:07:ff:3c:03:b3:d4:
                    d3:67:22:60:98:bc:45:d4:68:33:a7:51:41:c7:b0:
                    82:89:1c:c4:a4:c3:6e:f0:ef:f7:a4:21:ca:d9:e3:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:7C:55:22:AA:0F:AE:02:7A:5F:14:DE:A7:D1:E4:7A:8A:E9:9D:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/a0bd1fcb-27a2-3946-8e13-1d16f1b3c711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5/d2799306-5973-45b1-8828-5797abf141e5.crl

            X509v3 Authority Key Identifier:
                keyid:D9:EA:50:F4:19:DA:80:D5:B1:CC:8F:F6:F5:66:C3:46:D6:6F:64:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d2799306-5973-45b1-8828-5797abf141e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.224.0/24
                IPv6:
                  2602:fe31::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:8e:98:b9:31:25:9f:dd:10:fc:68:f3:ca:ca:50:90:33:6f:
         69:2f:48:21:4b:47:99:26:26:98:e2:12:aa:23:5f:06:cf:06:
         8b:9b:a8:ab:c6:95:1f:b0:14:e5:05:63:05:d2:44:79:37:f0:
         d3:2b:19:6c:60:50:1f:18:fc:28:b3:44:ac:a8:b2:28:7b:12:
         c1:88:24:ec:d7:7e:44:b1:ec:12:31:c7:d5:29:ea:be:a2:99:
         2d:21:2b:0a:4b:c9:e2:64:0f:6d:4f:a8:17:f1:a5:64:9b:8d:
         15:10:2c:af:5f:10:4f:35:1b:10:47:2d:1e:47:fe:46:bf:53:
         ca:39:e6:71:1a:c2:1d:65:de:1b:f7:c7:8f:01:b3:5f:b6:18:
         3b:ca:29:40:61:8d:92:8b:b6:8e:81:f5:24:b2:38:24:8f:cf:
         47:93:1f:58:ad:4e:53:22:b2:19:a4:eb:cb:8c:2f:67:e5:b6:
         7a:80:c7:16:73:b7:d7:33:af:05:2b:11:9b:af:59:8c:0b:ca:
         2a:de:b5:20:72:41:fa:2b:78:e7:30:52:43:fd:32:6f:2f:6b:
         b9:8f:d5:f5:e9:94:3d:50:e6:18:1a:92:25:8d:16:6e:cf:fb:
         c7:4f:97:ff:82:ab:47:24:b9:c2:74:00:1c:c7:72:bd:8e:e8:
         ad:7f:4a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:38:58 2026 by rpki-client