Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/397f62d5-6cea-3c3d-a28a-35f9d78df2f7.roa
File:                     397f62d5-6cea-3c3d-a28a-35f9d78df2f7.roa (raw, json)
Hash identifier:          UDehLc3RrNTQoJrkeJkMlNKB6/DVsZMtAF28bz0O0yo=
Subject key identifier:   B9:78:2F:0B:F7:C5:26:A1:E9:C9:5E:83:13:CE:D6:E7:D4:FE:AA:08
Certificate issuer:       /CN=4a214c14-52f7-4b21-a2ec-7e64e41ea27d
Certificate serial:       010D0C9F4328584DB8D58AFD54236C9121069350
Authority key identifier: 18:F9:DA:91:FD:FC:57:A5:28:F5:40:9B:11:CD:B8:2D:D9:A9:0B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/397f62d5-6cea-3c3d-a28a-35f9d78df2f7.roa
Signing time:             Mon 04 May 2026 13:00:30 +0000
ROA not before:           Mon 04 May 2026 13:00:30 +0000
ROA not after:            Sun 02 Aug 2026 13:00:30 +0000
asID:                     399463
IP address blocks:        23.169.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b8:d5:8a:fd:54:23:6c:91:21:06:93:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a214c14-52f7-4b21-a2ec-7e64e41ea27d
        Validity
            Not Before: May  4 13:00:30 2026 GMT
            Not After : Aug  2 13:00:30 2026 GMT
        Subject: CN=c3d14e0a-64ca-48d0-a278-96098b44662d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f0:2a:00:6c:be:88:c7:58:49:13:f1:89:06:
                    ba:df:19:ad:62:20:68:e1:a3:cc:da:f2:3f:b4:ad:
                    fe:4a:a5:f0:9d:91:fd:ff:85:ca:59:a8:c1:a7:a6:
                    4c:a3:10:e6:0d:f1:23:1f:a1:8a:b1:40:1f:dd:10:
                    9e:80:a1:e6:4e:5a:ab:c3:ad:00:05:35:53:b1:e7:
                    1c:09:7b:a6:1d:cb:af:6a:ca:06:50:1c:7b:90:76:
                    b4:45:f8:0c:cc:7e:19:fa:af:03:be:37:31:b7:13:
                    d6:7e:27:53:f8:13:6e:81:c9:2e:e9:11:77:6b:bd:
                    bb:0e:1e:cb:70:fa:b7:96:89:95:2b:01:bd:cf:f0:
                    6f:0c:32:ab:e9:6d:ad:6c:fa:ef:bc:9a:05:87:e1:
                    9b:be:25:12:53:b0:ba:7a:4d:c2:2c:da:21:23:86:
                    30:eb:78:b7:6a:0a:47:09:2d:45:6f:f6:4a:c6:27:
                    e4:3b:5a:ba:a7:86:38:41:19:82:1c:74:82:1e:0c:
                    be:33:78:1d:2e:05:c3:b4:e9:d1:7e:87:71:3b:43:
                    c7:b6:08:05:60:6b:b5:31:31:d8:55:2f:43:e9:d5:
                    cb:7c:e6:f8:7c:a0:32:9f:bd:d8:55:1c:24:73:0e:
                    6d:d2:15:35:58:55:9a:b1:6a:05:63:80:99:8d:55:
                    da:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:78:2F:0B:F7:C5:26:A1:E9:C9:5E:83:13:CE:D6:E7:D4:FE:AA:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/397f62d5-6cea-3c3d-a28a-35f9d78df2f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.crl

            X509v3 Authority Key Identifier:
                keyid:18:F9:DA:91:FD:FC:57:A5:28:F5:40:9B:11:CD:B8:2D:D9:A9:0B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.169.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:cf:17:41:05:d5:91:8a:4a:bf:c2:50:a4:c6:26:4f:29:0c:
         28:50:40:58:f9:5a:d7:7c:d3:8d:e0:c8:88:3f:a2:ca:ff:d0:
         88:75:4e:2e:07:96:b2:7d:41:98:74:d7:17:f2:6e:11:c8:33:
         22:18:11:66:98:93:0a:d8:5d:9b:03:3d:63:17:6e:86:88:57:
         54:50:e9:88:f2:dc:80:7d:a3:d4:76:f5:fc:d4:d9:a4:60:db:
         48:82:82:30:c2:14:9f:36:bc:d5:f6:4d:57:16:22:61:9b:fe:
         1e:74:84:13:89:03:9f:60:cf:6b:fc:8e:a9:2b:36:05:a2:55:
         94:69:79:20:f0:da:90:f4:a0:6b:6f:c8:f9:eb:87:a1:35:28:
         0a:37:09:3b:cd:04:10:cb:8e:6b:58:ca:fc:0b:0b:90:7a:75:
         da:5d:73:9c:71:be:b8:24:cc:39:79:46:e2:7e:16:77:15:6f:
         91:6c:f7:cf:08:55:1f:de:42:e1:a8:27:ba:41:14:e3:1c:05:
         47:59:8c:42:0d:ba:cc:ba:36:61:6e:19:54:9c:1b:22:f9:70:
         dc:e3:2d:09:55:7f:f0:48:e4:88:8f:c1:1e:05:85:6f:5a:38:
         92:76:c3:46:25:1e:55:a2:da:02:8e:fd:19:61:83:da:f4:71:
         44:05:27:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:29:31 2026 by rpki-client