Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/4ad5af7c-521b-35a5-bbb6-15cea91f2fe8.roa
File:                     4ad5af7c-521b-35a5-bbb6-15cea91f2fe8.roa (raw, json)
Hash identifier:          XkaLU5jSdmh/1hBxyl1MAm1CY1V0TA8ZZzokjOM7nDc=
Subject key identifier:   86:59:41:DA:62:E6:6C:D8:6D:EB:3A:BA:85:F4:92:2D:20:76:5B:DF
Certificate issuer:       /CN=74bdcdb1-ade3-4be9-818b-4809959ddfcc
Certificate serial:       010D0C9F4328584DB075860343DD6DD24A108680
Authority key identifier: 1C:A2:9E:F3:A1:6B:AC:78:B0:93:45:1A:15:A0:36:2D:89:9C:02:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/4ad5af7c-521b-35a5-bbb6-15cea91f2fe8.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     400734
IP address blocks:        23.172.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/74bdcdb1-ade3-4be9-818b-4809959ddfcc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/74bdcdb1-ade3-4be9-818b-4809959ddfcc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:86:03:43:dd:6d:d2:4a:10:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74bdcdb1-ade3-4be9-818b-4809959ddfcc
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=5e915eca-3bf5-4d5e-b1ee-7a6ee364a715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:40:80:05:b6:c7:da:a9:6c:c8:5c:f6:13:77:
                    47:8d:fa:73:ae:12:2b:a0:57:82:62:3e:65:59:99:
                    b5:65:18:b8:6d:a1:54:11:c4:32:54:dd:2c:a3:ff:
                    96:12:07:9b:d5:c0:58:b4:64:f4:c0:86:30:f8:83:
                    4f:d0:66:18:9f:25:ed:42:9d:e6:94:c8:05:c9:49:
                    3b:48:69:74:27:8c:54:46:e4:b1:7b:88:fc:77:b0:
                    d9:a2:1f:ca:b8:ec:19:54:c7:f1:94:17:86:32:dd:
                    47:60:5a:c3:75:76:f9:f6:13:6e:b4:98:66:47:9d:
                    fb:07:39:e0:b6:9b:13:2b:b1:30:81:98:29:5d:27:
                    f3:bd:44:12:36:fe:ce:14:1e:d4:22:9a:54:da:80:
                    b0:3e:85:17:28:73:30:ce:4e:a2:fa:ad:db:89:6b:
                    00:16:ee:91:dc:be:79:55:98:c7:4b:50:a7:e7:8e:
                    47:91:f3:d5:51:52:74:52:d9:74:ba:14:55:c7:ec:
                    80:a5:b2:a1:ab:cf:4e:e9:5b:2c:44:64:9f:65:93:
                    cc:0b:d7:4b:7d:72:c3:f1:0a:88:d9:13:95:2a:7e:
                    fe:12:64:f5:4c:33:45:e7:c6:52:37:c8:e3:56:ad:
                    25:39:a7:1c:c9:71:c1:b0:3f:66:71:60:bf:ed:c6:
                    4b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:59:41:DA:62:E6:6C:D8:6D:EB:3A:BA:85:F4:92:2D:20:76:5B:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/4ad5af7c-521b-35a5-bbb6-15cea91f2fe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc/74bdcdb1-ade3-4be9-818b-4809959ddfcc.crl

            X509v3 Authority Key Identifier:
                keyid:1C:A2:9E:F3:A1:6B:AC:78:B0:93:45:1A:15:A0:36:2D:89:9C:02:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/74bdcdb1-ade3-4be9-818b-4809959ddfcc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ea:8b:bf:42:f3:95:d9:dd:7c:4d:28:d2:be:96:b4:af:52:
         09:28:80:98:ed:b7:a7:d9:6f:e9:bd:fa:ee:4d:58:5f:58:30:
         56:87:4f:7a:de:65:76:58:61:33:ba:56:e6:d5:1d:c5:8a:58:
         9f:bc:7d:58:1c:49:8f:d0:23:ca:1c:f1:49:8d:c1:6e:01:85:
         66:35:e0:1d:23:eb:42:15:41:dd:db:d9:46:6b:5c:1a:09:e2:
         12:09:fb:45:ed:a5:64:1d:20:59:c8:71:9c:41:36:98:68:8e:
         6c:9b:8d:12:4d:5b:64:98:68:6c:13:5a:22:78:e7:1d:57:fe:
         34:9e:58:b1:16:17:fb:22:22:f6:43:07:f1:d4:5e:9d:90:52:
         27:16:3d:1a:5b:cc:47:99:e9:42:f1:bb:38:b3:32:9f:67:5b:
         ba:23:6e:ea:07:8b:64:ba:0b:f9:52:cf:c3:bb:61:bb:7a:7a:
         2a:39:8e:91:fe:ce:9b:b2:fd:28:f6:ec:ed:01:14:82:f0:a4:
         5b:fa:30:ea:6a:a8:7e:5b:fa:f5:23:f2:d3:8e:77:ac:4e:c5:
         29:fa:fc:99:aa:33:a9:c4:48:be:00:68:bb:d0:42:69:ea:94:
         74:11:92:2a:8e:b5:93:a4:73:40:d9:cd:4e:f5:20:1e:56:9c:
         e4:5b:87:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:22:24 2026 by rpki-client