Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/b8e76dae-4d3c-31be-b3c8-512f31ec2f0a.roa
File:                     b8e76dae-4d3c-31be-b3c8-512f31ec2f0a.roa (raw, json)
Hash identifier:          8NoiwHSY0h1YADAKIkd6dRV1MEkBR9PjxvZ8L8wBQAA=
Subject key identifier:   4C:6C:63:39:95:63:7C:8B:F9:C0:1A:D7:63:77:EF:07:D7:15:D9:1C
Certificate issuer:       /CN=73d32729-3efa-4a4c-a5ce-85790b40d100
Certificate serial:       010D0C9F4328584D1B19EDDC610A0E6F18BBF040
Authority key identifier: DE:E4:57:18:9A:AC:6B:28:6E:26:A0:14:E0:8B:4C:F3:29:B9:8E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/b8e76dae-4d3c-31be-b3c8-512f31ec2f0a.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     51082
IP address blocks:        23.175.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:19:ed:dc:61:0a:0e:6f:18:bb:f0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d32729-3efa-4a4c-a5ce-85790b40d100
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=28b9ea41-cc80-4384-9700-5e598540c3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4f:70:89:a6:ae:9e:64:53:38:e5:d8:36:ce:
                    f8:0d:dc:50:d4:1c:ff:fc:2a:10:5a:bc:b5:fd:28:
                    d9:5d:b7:4f:b3:1b:84:3e:81:69:00:d5:35:fc:bb:
                    62:c4:36:96:a0:98:3d:8f:0d:b6:cd:6b:df:15:a8:
                    de:23:9c:4c:cd:8d:31:8f:41:b8:40:21:00:30:8f:
                    94:f8:36:60:4b:69:84:b4:b3:81:71:09:2e:7e:ce:
                    56:f2:3c:f9:63:6a:41:ad:f9:36:76:f6:a1:3b:34:
                    64:df:b0:dd:a8:37:e1:78:a0:2e:b5:87:8d:db:63:
                    3c:87:e4:ba:ea:df:8d:19:46:20:f7:a5:5c:5d:ef:
                    be:f1:a8:ad:4c:33:ac:01:bc:64:58:23:35:28:f1:
                    8b:34:81:db:cd:8a:41:5b:51:6b:51:39:d0:09:a8:
                    ea:b9:2e:79:09:6c:76:ee:04:b3:7c:86:f8:bd:7e:
                    63:bc:a7:64:2d:77:e4:58:24:81:5d:4d:89:2a:91:
                    da:43:f2:bd:23:a4:f0:04:fd:df:89:72:23:8f:89:
                    cb:ec:5b:77:f1:e8:fa:57:33:b6:0d:75:4c:50:cb:
                    2f:62:1f:fd:3e:59:1b:0c:5b:fc:d8:04:61:11:0b:
                    94:35:41:f7:7b:0c:a3:e3:55:89:f2:09:94:7c:d8:
                    fe:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6C:63:39:95:63:7C:8B:F9:C0:1A:D7:63:77:EF:07:D7:15:D9:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/b8e76dae-4d3c-31be-b3c8-512f31ec2f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.crl

            X509v3 Authority Key Identifier:
                keyid:DE:E4:57:18:9A:AC:6B:28:6E:26:A0:14:E0:8B:4C:F3:29:B9:8E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:4d:dd:94:6e:60:4f:3b:6f:d5:38:3e:9b:8d:64:82:36:90:
         ae:df:10:df:84:c8:dc:49:7f:b4:ca:7a:3f:72:fc:23:11:d2:
         38:4f:b7:a1:99:e5:b0:a4:f9:77:4d:4f:4d:d6:bb:26:5f:1c:
         06:fe:a8:ad:f3:fe:b8:46:24:2f:69:85:5f:4f:4a:af:0e:19:
         35:cd:19:18:a5:64:61:4a:3f:0c:8c:fc:5c:ee:91:5f:80:c7:
         81:01:7e:34:29:fe:93:93:98:ce:82:34:0c:ce:1d:0a:0b:c9:
         f0:36:98:61:4d:08:41:30:21:cb:0b:e9:30:58:e0:cc:0c:bd:
         13:eb:90:1d:5a:85:91:f7:86:cf:84:77:01:27:16:b6:e0:43:
         84:f6:b2:a7:60:cb:2f:3f:04:38:15:b8:99:0b:88:a6:60:8b:
         9c:95:18:cc:3c:35:ff:47:ce:f6:29:d2:d3:c6:6e:6e:88:e7:
         2b:1d:be:c3:13:7c:16:4d:e4:5d:4b:9f:d2:b1:69:03:92:c2:
         77:0f:aa:65:60:a9:6e:51:b1:44:ba:5e:eb:b0:55:e9:83:8e:
         e1:26:b1:c7:2d:3e:ad:9c:9a:21:0f:9f:1d:b2:eb:37:ed:63:
         2b:46:63:68:9b:cc:40:c4:0d:a8:67:52:c4:5f:10:2b:93:00:
         06:2f:47:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:13:28 2026 by rpki-client