Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa
File:                     2517d6e9-9680-3eb3-a47b-2325fa06189c.roa (raw, json)
Hash identifier:          BWA/NIwOU3oP059X43dRlXYmVWaR7961ctaKgiT48RU=
Subject key identifier:   29:29:CA:D1:C1:D7:26:92:A2:B0:29:F6:36:5E:93:77:3B:E5:07:5E
Certificate issuer:       /CN=552c5335-022a-4a1d-911d-4612dc6e86d7
Certificate serial:       010D0C9F4328584DAF1018D942E133953916BDC0
Authority key identifier: 8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     394625
IP address blocks:        23.154.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:18:d9:42:e1:33:95:39:16:bd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c5335-022a-4a1d-911d-4612dc6e86d7
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=9b27ad6d-7af4-41ee-a443-95f63eded7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4c:54:1c:31:9e:29:dd:79:21:57:a5:c1:cd:
                    08:45:6e:bd:3a:a3:3e:83:95:d3:7f:f2:2a:94:95:
                    71:c4:b0:81:ad:4c:b7:6e:a7:db:4f:ee:d0:46:86:
                    50:94:ea:22:ec:8f:5a:62:e8:b9:d0:70:30:c3:ac:
                    17:71:63:2b:0a:a2:a3:c4:1c:2d:cc:e5:aa:4f:9b:
                    dc:26:9b:20:ab:79:d1:a4:7d:97:34:5f:e6:0d:cf:
                    de:dd:71:60:f7:1d:57:cd:5a:6d:9f:04:1a:72:70:
                    1d:68:1c:f0:8f:f4:e3:38:7b:8e:72:bd:d8:60:1b:
                    c8:e4:55:9a:f4:95:e5:ee:4b:a1:e5:5e:ca:cf:6f:
                    2b:84:ad:21:ab:ae:38:76:20:d6:6c:c6:4c:e9:23:
                    04:17:7b:42:a6:8f:b0:3c:60:b2:01:97:97:da:aa:
                    d7:45:32:1a:4e:e9:00:74:e7:06:db:d9:4b:0d:1f:
                    88:fc:e1:3b:4d:ee:29:75:ff:c7:b7:d9:5f:af:60:
                    9b:4f:5a:27:7e:90:ca:c8:79:75:a2:e1:de:1b:22:
                    49:84:e6:a7:d1:28:0d:b0:d5:e5:d1:c4:53:bd:87:
                    ab:96:be:77:4b:4a:5e:b6:63:1d:61:a9:aa:f7:2b:
                    c0:b7:3b:1c:01:c3:bf:b5:8d:99:30:e6:f6:8b:51:
                    6a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:29:CA:D1:C1:D7:26:92:A2:B0:29:F6:36:5E:93:77:3B:E5:07:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/2517d6e9-9680-3eb3-a47b-2325fa06189c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7/552c5335-022a-4a1d-911d-4612dc6e86d7.crl

            X509v3 Authority Key Identifier:
                keyid:8C:0C:22:23:DA:2F:CB:87:90:24:13:D4:BC:A7:F7:19:5C:A2:5A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/552c5335-022a-4a1d-911d-4612dc6e86d7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:6c:f2:bb:c6:7b:85:4d:51:0f:28:21:a4:4e:4a:8a:1e:df:
         93:36:3e:59:74:ef:dc:59:87:21:8a:dd:34:40:be:dd:0a:76:
         75:9a:05:6c:96:2c:79:ab:e6:90:0c:fa:42:46:54:99:92:18:
         0f:a4:1f:01:ec:32:6e:be:fc:5d:57:83:84:64:1f:88:82:68:
         73:c9:da:c8:e7:8e:5a:a7:1d:e3:9d:79:57:a2:ef:b4:b5:39:
         70:c0:5b:6a:cd:d7:6e:86:ca:e5:da:c7:06:94:13:fb:40:d3:
         30:60:c7:16:75:92:85:50:7b:d7:51:ca:6b:e1:56:e7:30:de:
         68:06:bb:12:69:7e:38:72:4c:55:90:57:3c:c8:7f:48:47:be:
         8f:05:b0:90:50:62:c6:08:16:a9:aa:9e:9f:85:c6:11:fe:3a:
         a5:d1:53:58:e5:8e:2c:4b:46:9f:df:a1:17:9b:71:6d:e8:31:
         a2:01:3c:55:8d:e0:91:67:a0:cd:a0:17:5e:ef:b6:99:ef:12:
         2d:48:69:25:f4:fa:67:9e:52:b5:72:b2:ff:9c:d9:23:82:6a:
         73:f0:d1:04:71:ef:33:a0:7a:87:e0:e1:19:be:8d:13:e8:6e:
         f6:16:1f:25:6f:4b:0d:78:53:62:a4:54:8a:5c:2d:5a:90:17:
         c5:30:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:50:02 2026 by rpki-client