Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa
File:                     db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa (raw, json)
Hash identifier:          aAQ4b2TiIB2xsSFsKz4To+8ax6DyqUZEERTxZWtoya4=
Subject key identifier:   7E:24:81:DF:61:0B:BD:4C:EA:52:D5:34:C7:37:6B:6C:82:CD:E8:AB
Certificate issuer:       /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
Certificate serial:       010D0C9F4328584D1B1A1936D413737BD6C34E00
Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     134365
IP address blocks:        23.247.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:19:36:d4:13:73:7b:d6:c3:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=864b79c2-8c63-4ba3-81c3-20bca1911198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6d:d5:06:71:d3:c6:55:f1:37:07:d0:69:bd:
                    e4:19:6a:90:4e:f3:01:79:7b:10:c8:c7:1d:72:96:
                    79:d0:e5:9a:2a:63:73:e9:9f:5b:dd:26:db:df:52:
                    41:13:c3:2a:95:c6:64:b3:49:a2:2e:29:1c:fd:8b:
                    2f:43:2b:3f:3c:92:84:d1:31:c5:3c:a4:cc:45:aa:
                    5e:8a:22:4b:9e:03:00:1a:18:05:fd:b7:30:32:bb:
                    97:2c:6c:2e:c3:e6:9d:a6:54:cf:a3:dc:dc:48:8a:
                    94:71:0d:ce:8f:b0:5f:e1:18:cb:60:02:71:cf:f7:
                    99:46:20:63:45:df:7d:ee:3b:1f:b5:69:5a:b8:7c:
                    55:cb:e9:81:61:db:6c:24:77:3b:23:c8:90:1e:c0:
                    58:8a:0d:0c:1a:99:1b:2f:af:46:8d:59:5f:42:ac:
                    7b:fb:d5:e5:c8:27:34:c9:40:94:9f:70:8c:86:84:
                    1d:c4:03:22:68:40:d3:e1:69:d7:56:0c:59:2d:f7:
                    03:8e:29:d8:17:18:2d:d3:ef:86:af:a0:65:e6:5c:
                    df:83:47:7c:45:f0:49:c5:ac:fa:d1:96:05:1e:c6:
                    b5:86:83:73:f6:a3:0c:c3:99:bf:6f:ca:c6:50:5e:
                    1c:9c:26:ca:de:1b:32:ce:f5:3c:1b:80:13:d0:73:
                    f7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:24:81:DF:61:0B:BD:4C:EA:52:D5:34:C7:37:6B:6C:82:CD:E8:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/db330fa3-1f16-3d9e-bad3-44bc858b82fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl

            X509v3 Authority Key Identifier:
                keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ed:9f:82:93:65:ef:67:bb:62:c1:d8:60:23:c1:25:b3:66:
         ac:82:91:a8:c7:f3:36:05:47:23:f8:a1:6e:19:8d:83:2a:30:
         62:d2:aa:be:62:29:c9:45:fe:84:81:71:b5:70:df:01:d6:df:
         61:8b:67:af:d2:f4:66:1d:38:eb:71:73:bd:73:97:94:b6:42:
         d7:48:8b:2f:26:c5:b0:57:ae:04:4c:6e:62:0b:c2:56:92:5b:
         37:69:f2:a4:ca:c3:52:f4:51:2b:a2:3f:f0:17:fa:63:31:40:
         ce:0f:c9:69:8f:d0:c7:9b:2e:a6:c1:e2:21:5e:19:fb:84:f5:
         09:71:93:a3:a3:cf:45:39:d2:47:a8:e1:43:9b:58:9f:05:81:
         21:aa:82:96:09:a0:09:df:88:87:67:fe:b9:70:f9:22:d1:b6:
         87:7f:95:6e:8a:be:d7:5f:32:6f:d7:64:6c:0b:76:5e:eb:4d:
         f5:ae:5e:a9:a1:60:d7:f8:82:48:77:f6:f8:24:9a:ab:7e:19:
         2d:1f:1a:2b:81:f0:fb:bd:07:75:55:25:e3:2b:d8:11:90:f7:
         96:fc:7c:24:19:50:bb:f0:be:47:6c:c5:2a:43:6d:1f:20:bf:
         e8:d1:ca:5d:49:44:65:eb:2c:e0:a3:6f:86:6f:a8:f3:55:cf:
         1a:fc:91:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:50 2026 by rpki-client