Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/42f8e1d1-c94e-3b17-892c-0a735d44591a.roa
File:                     42f8e1d1-c94e-3b17-892c-0a735d44591a.roa (raw, json)
Hash identifier:          3Xz/uy4vXSkxYzT1dHdxsjTNxDOn4Dsily4furbEtvk=
Subject key identifier:   01:D0:34:D0:C9:1C:AA:DD:43:4A:41:EA:D0:83:61:04:D0:F8:ED:29
Certificate issuer:       /CN=e7f2d196-f493-41ef-a906-7b0786815678
Certificate serial:       010D0C9F4328584D2BDA1E5E0B456A62B04CAD00
Authority key identifier: 77:73:63:4D:ED:24:E8:B5:C5:4C:EC:19:3E:76:F1:D6:FA:73:FB:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/42f8e1d1-c94e-3b17-892c-0a735d44591a.roa
Signing time:             Sun 15 Mar 2026 01:00:32 +0000
ROA not before:           Sun 15 Mar 2026 01:00:32 +0000
ROA not after:            Sat 13 Jun 2026 01:00:32 +0000
asID:                     400545
IP address blocks:        23.136.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/e7f2d196-f493-41ef-a906-7b0786815678.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/e7f2d196-f493-41ef-a906-7b0786815678.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2b:da:1e:5e:0b:45:6a:62:b0:4c:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f2d196-f493-41ef-a906-7b0786815678
        Validity
            Not Before: Mar 15 01:00:32 2026 GMT
            Not After : Jun 13 01:00:32 2026 GMT
        Subject: CN=9ea9171a-189f-417e-99c8-9d353898c0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:f8:b4:8e:95:4a:82:e0:9a:fd:13:93:4d:22:
                    7d:a5:e8:99:34:3a:d1:b4:1d:ef:0f:93:80:ac:e4:
                    31:9f:9b:62:c3:4d:52:b8:eb:be:97:e4:9d:f6:ed:
                    b7:e5:d8:7e:b7:e6:fb:70:b0:9a:81:a2:99:b2:33:
                    f4:b1:75:4c:ca:a4:29:c3:18:00:83:f3:f4:08:68:
                    16:0e:de:ed:06:82:f1:72:0f:a5:58:bc:92:7a:de:
                    f2:ab:6d:c3:0c:1c:7f:0d:e8:43:80:c4:80:ef:1c:
                    2d:bc:3d:4c:ba:2b:d6:41:0a:c0:4f:39:94:15:ea:
                    0b:21:cd:c2:b8:af:d6:2a:f8:8b:13:35:ff:1e:56:
                    88:e4:96:59:d4:dc:19:a8:2d:0c:11:3c:5a:d9:ff:
                    12:07:68:81:d3:72:69:62:ff:d0:ea:eb:8f:00:56:
                    25:00:a7:1f:8b:cf:55:da:d8:23:17:b3:da:a6:f0:
                    16:08:15:db:b9:da:8c:e0:5c:57:b5:7e:03:9f:f5:
                    8a:7a:88:60:bc:1d:d1:12:be:ed:ae:3f:76:08:51:
                    60:3a:0e:1b:f9:06:8b:a0:85:6e:43:c3:84:96:26:
                    05:b2:e9:0b:8f:7a:26:17:96:fc:a8:ca:29:e8:84:
                    ca:fa:6f:a4:9c:f5:17:9d:bb:05:08:b5:ff:86:01:
                    c9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:D0:34:D0:C9:1C:AA:DD:43:4A:41:EA:D0:83:61:04:D0:F8:ED:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/42f8e1d1-c94e-3b17-892c-0a735d44591a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/e7f2d196-f493-41ef-a906-7b0786815678.crl

            X509v3 Authority Key Identifier:
                keyid:77:73:63:4D:ED:24:E8:B5:C5:4C:EC:19:3E:76:F1:D6:FA:73:FB:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9a:70:a8:0c:0c:01:7a:49:da:56:ab:1d:e9:f5:9a:39:f8:
         69:cb:90:65:26:2b:18:95:9e:0c:97:17:e2:f8:09:93:18:2e:
         d0:9f:71:63:cb:4d:a3:4b:84:9b:7e:1b:26:68:59:7e:6b:a1:
         9f:15:fa:2d:68:13:ac:5f:9e:49:3c:2c:23:c5:76:2d:97:ed:
         73:bb:7f:87:15:36:28:da:ac:dc:a4:9e:15:b7:3f:23:03:fe:
         1c:7b:ca:82:04:6b:ce:63:4b:1c:98:39:cc:21:61:71:9c:91:
         9b:12:ce:06:b6:1c:60:28:eb:4e:80:9b:30:7c:23:48:55:cc:
         4e:13:d7:41:da:a5:79:1a:f1:3c:64:6e:b2:58:c3:83:a2:c3:
         9e:fe:14:e2:aa:99:65:b5:e6:b5:c9:83:b4:63:f9:46:0d:34:
         26:6d:03:6c:9d:d4:55:48:54:29:09:60:6f:12:bb:d1:4d:92:
         b7:c2:b7:83:da:17:39:29:f0:45:95:54:f8:45:84:8d:6b:b2:
         88:a2:1a:62:75:32:bb:bc:ea:30:e8:aa:8f:17:b0:c0:37:26:
         bb:6f:a9:56:e6:13:7b:48:4a:c3:e2:00:c5:94:40:15:77:8d:
         99:2a:c9:f1:c6:8c:d9:89:91:8b:eb:6b:5b:a1:56:34:54:38:
         b9:b7:ab:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:44:50 2026 by rpki-client