Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/601e89b6-9c54-3d33-b864-f9e483ec6f90.roa
File:                     601e89b6-9c54-3d33-b864-f9e483ec6f90.roa (raw, json)
Hash identifier:          jz5Rv8JrBOJQwVHSrselv8eAiDTwGN1NmmfoC+1pNLI=
Subject key identifier:   59:A8:4A:47:59:C4:81:AB:5C:3D:EF:38:6E:9D:B0:AB:BD:D6:66:73
Certificate issuer:       /CN=5701ab54-077b-43a9-8b22-67e8fe12ded7
Certificate serial:       010D0C9F4328584E37646E46766B64E3861BAF80
Authority key identifier: 19:19:13:1D:36:B4:5E:A5:05:6F:9C:D3:2A:28:08:29:01:C6:0F:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/601e89b6-9c54-3d33-b864-f9e483ec6f90.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     397797
IP address blocks:        23.247.148.0/22 maxlen: 24
                          205.137.240.0/22 maxlen: 24
                          209.209.80.0/22 maxlen: 24
                          2605:6640::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:6e:46:76:6b:64:e3:86:1b:af:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5701ab54-077b-43a9-8b22-67e8fe12ded7
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=8eca4f83-4945-4af4-a8f7-72f98fdef8b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c0:0b:2d:95:1e:70:74:ef:47:81:be:05:8f:
                    0b:65:17:ed:29:e9:bf:6d:71:d2:c0:3d:13:c0:3d:
                    25:8a:d0:73:23:ae:38:04:66:2a:b4:ca:df:f8:a8:
                    7f:b4:c6:05:1d:4d:31:87:b6:43:ef:a0:d3:f3:e5:
                    2d:39:74:a5:0c:aa:42:4d:be:20:0d:42:58:66:a0:
                    50:b4:05:24:c0:11:20:8c:6d:e5:e0:71:ee:7f:3a:
                    8c:18:4f:c8:15:8e:a5:ac:61:e4:91:ff:44:b1:60:
                    11:b9:48:8e:d1:7a:83:39:3e:58:f2:aa:b1:c2:6e:
                    87:8d:92:13:17:b8:38:4a:0d:98:3d:f6:0d:94:80:
                    f2:16:c6:13:50:64:e4:5b:b5:91:1b:cc:d3:45:83:
                    54:df:a0:f6:99:b5:89:1c:64:fa:5c:22:50:25:7a:
                    13:f8:93:ca:52:5a:e9:bb:10:d3:26:b7:66:55:47:
                    29:8b:41:1d:25:1c:05:fb:3b:8e:bd:d4:09:b6:0c:
                    35:7a:a7:5f:94:b1:1c:90:c3:55:69:65:6f:f6:57:
                    d1:7b:7c:ab:af:ea:c2:36:30:83:60:51:a3:26:c1:
                    9d:7f:0a:01:89:49:14:2c:42:da:0b:77:51:03:31:
                    21:11:d4:24:4d:f0:cb:5a:fa:28:ac:fe:ae:0a:ba:
                    74:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A8:4A:47:59:C4:81:AB:5C:3D:EF:38:6E:9D:B0:AB:BD:D6:66:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/601e89b6-9c54-3d33-b864-f9e483ec6f90.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7/5701ab54-077b-43a9-8b22-67e8fe12ded7.crl

            X509v3 Authority Key Identifier:
                keyid:19:19:13:1D:36:B4:5E:A5:05:6F:9C:D3:2A:28:08:29:01:C6:0F:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5701ab54-077b-43a9-8b22-67e8fe12ded7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.148.0/22
                  205.137.240.0/22
                  209.209.80.0/22
                IPv6:
                  2605:6640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:0b:35:61:48:82:8f:6a:f6:ab:28:26:6a:32:82:1c:0a:43:
         69:42:90:cb:3e:18:47:b8:7e:bd:86:98:2d:5d:d5:7a:4a:1e:
         b4:d4:72:a4:df:1d:33:c2:db:0e:cd:54:4d:62:a5:6d:26:da:
         25:e4:84:62:38:86:a7:e8:80:d1:3a:2b:7f:a9:63:7e:ab:74:
         a1:6e:76:65:87:e5:93:ad:84:54:7f:3e:0b:45:9a:44:07:d9:
         b6:ad:ff:fe:b8:e3:54:df:3b:87:23:8c:1c:9f:77:91:7c:cd:
         33:15:73:51:d3:90:5a:a1:ca:80:c1:29:28:94:4c:0b:a8:1f:
         b5:1e:8e:14:a1:31:ac:96:22:f1:35:45:9e:26:29:b2:e6:4a:
         d8:1e:ab:47:2e:5e:63:0a:d3:fc:4f:a7:c0:0a:4d:ae:c4:1b:
         a4:9a:b0:26:ee:bc:5b:46:a3:28:44:74:b5:fe:a9:1b:fd:21:
         8c:0b:6a:98:d2:ab:c5:18:26:b7:7a:d1:db:20:55:2e:76:e5:
         bb:d5:68:4b:a0:79:9b:e2:8b:7e:e0:83:d7:6c:b6:ee:89:7d:
         85:99:bf:29:1d:12:ab:5d:c3:b4:69:eb:44:36:49:fc:d0:ae:
         c3:8f:1d:cd:86:ee:4f:50:e2:f5:a0:be:c2:1d:04:16:1e:7b:
         1c:68:b3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:27:07 2026 by rpki-client