Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa
File:                     8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa (raw, json)
Hash identifier:          es6gAeEstULbGMjtolEuq1FxRq3Imsm4BmLVT4xqTLU=
Subject key identifier:   B7:51:92:FE:64:5C:40:67:45:AB:B8:57:96:93:30:0F:2F:39:B5:5E
Certificate issuer:       /CN=0c061d8c-3838-415d-8bbc-20962c789d81
Certificate serial:       010D0C9F4328584D0D426A8A73B27172C97C5B80
Authority key identifier: 65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa
Signing time:             Wed 04 Mar 2026 02:00:32 +0000
ROA not before:           Wed 04 Mar 2026 02:00:32 +0000
ROA not after:            Tue 02 Jun 2026 01:00:32 +0000
asID:                     61228
IP address blocks:        23.141.88.0/24 maxlen: 24
                          2602:fb0d::/44 maxlen: 48
                          2602:fb0d:99::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:0d:42:6a:8a:73:b2:71:72:c9:7c:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c061d8c-3838-415d-8bbc-20962c789d81
        Validity
            Not Before: Mar  4 02:00:32 2026 GMT
            Not After : Jun  2 01:00:32 2026 GMT
        Subject: CN=5b9fa916-fe4a-4db6-a889-88662788b83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:06:e5:c7:d5:5b:1d:ef:17:52:e0:50:f2:
                    5e:93:6d:e5:59:cc:e0:8c:72:59:f5:50:bf:3c:ba:
                    40:09:78:e5:d7:7a:c0:8f:5e:37:79:7f:5c:22:21:
                    48:96:21:67:0b:64:06:da:bb:76:6b:b5:2a:d1:f5:
                    b9:59:5a:98:fb:9b:0b:03:89:4b:69:00:b0:e0:b0:
                    1d:ba:ea:d3:71:40:a2:fa:1f:bf:b1:64:6a:58:32:
                    19:be:e1:b3:9f:30:f9:57:bc:f3:a9:57:9d:e9:0b:
                    a4:2c:25:59:09:29:60:b4:8f:3f:d7:97:fa:51:b3:
                    f9:86:3f:1c:2b:45:61:fd:59:1a:53:75:bc:59:a9:
                    84:1b:d0:47:3f:99:f1:6b:5c:b5:e0:e3:3e:2a:b8:
                    77:b4:71:db:01:04:76:c5:cb:1d:ef:bd:b4:43:0c:
                    28:55:65:e5:d3:05:39:fc:21:68:42:e3:fc:33:ea:
                    db:53:16:45:73:18:34:9c:e7:2c:ef:7a:a1:b3:63:
                    ac:36:78:c4:51:98:f9:80:75:c2:2c:08:9b:f3:e3:
                    c4:6e:0b:90:cf:42:ff:cb:fd:e9:e5:09:58:5b:eb:
                    4c:46:92:c2:5c:cf:e4:bf:8f:58:39:27:4a:b6:9c:
                    5a:0f:8d:0c:28:46:b5:85:ff:61:01:95:e5:6a:71:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:51:92:FE:64:5C:40:67:45:AB:B8:57:96:93:30:0F:2F:39:B5:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/8e117f76-b87c-37a0-a202-b1ce407bf7a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81/0c061d8c-3838-415d-8bbc-20962c789d81.crl

            X509v3 Authority Key Identifier:
                keyid:65:B3:C6:31:F3:A8:02:B1:B2:7C:15:AD:5A:4E:B8:FB:EF:9C:3E:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c061d8c-3838-415d-8bbc-20962c789d81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.88.0/24
                IPv6:
                  2602:fb0d::/44
                  2602:fb0d:99::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bb:79:ef:55:2d:0b:2a:4d:8b:50:40:83:a6:ba:dd:47:b2:aa:
         ab:61:50:5e:2d:2f:d6:4a:75:20:7d:4e:ed:2b:31:fa:e8:e7:
         e1:fa:8e:6c:29:67:4a:a1:d4:ad:f8:14:cd:a8:78:7e:ea:af:
         f5:80:9e:c9:59:10:ff:e3:45:0a:33:8b:dc:48:ff:70:c9:75:
         78:38:d4:02:11:1a:bf:2f:52:bc:0b:c7:41:65:2e:9f:63:a2:
         df:c8:5f:a6:bf:7f:4f:73:72:88:0d:d8:76:5b:ca:cd:82:93:
         6f:0d:13:91:5a:88:d2:f7:1f:92:d2:7d:33:f5:a2:f6:aa:98:
         3d:e0:9a:ac:20:0f:67:45:4c:fb:d1:e9:f1:e5:e1:7f:f6:a6:
         6e:fd:69:6b:4a:7d:33:f3:21:54:e2:a5:d4:50:58:71:6f:40:
         df:7a:50:3e:d6:4d:46:a0:4a:92:d2:12:ea:70:3c:59:27:8a:
         f0:66:58:eb:39:5a:57:de:a0:ac:b9:79:6c:cd:af:cc:b7:42:
         d7:ae:cd:f7:63:cd:68:43:78:7b:c3:4e:da:8e:84:c6:5c:dc:
         a4:c7:c6:10:21:14:0a:62:31:8e:bb:7c:c2:84:8d:bc:18:d6:
         fa:e2:c1:e6:76:91:d6:e9:24:9c:03:1d:68:2a:9c:2e:72:86:
         d8:b6:74:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:49 2026 by rpki-client