Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/c29da368-12a4-3190-8fb2-2391e3134074.roa
File:                     c29da368-12a4-3190-8fb2-2391e3134074.roa (raw, json)
Hash identifier:          JE2ibNsBdFBz2ELskmAgBEg7UVHPyJ91Z5gSDsmWq2g=
Subject key identifier:   5B:98:82:DC:82:61:E3:27:BF:D4:76:7D:42:EA:59:79:34:9B:29:45
Certificate issuer:       /CN=d4fa172e-2779-4878-8bd3-1b92d7a18cea
Certificate serial:       010D0C9F4328584DCDC5A75B23EB09B0EC9BA4E8
Authority key identifier: 79:CD:4E:A1:93:4C:0F:C7:E9:3A:EE:E2:33:F1:FB:A9:13:3E:AF:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/c29da368-12a4-3190-8fb2-2391e3134074.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     395656
IP address blocks:        23.134.100.0/24 maxlen: 24
                          2602:f6ef::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:a7:5b:23:eb:09:b0:ec:9b:a4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4fa172e-2779-4878-8bd3-1b92d7a18cea
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=cc49600b-7a8c-4745-a4aa-efcaa7ec8a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:f1:9a:11:42:67:bf:28:88:1f:27:2a:b2:
                    af:2f:16:8b:0a:dc:32:5d:ac:cc:ff:9b:da:a4:28:
                    66:9f:d3:1b:95:b2:5e:a5:dd:bb:88:10:eb:bf:ac:
                    72:95:ba:ba:03:28:42:d5:cf:92:6f:d4:d5:69:db:
                    44:38:08:0f:2c:c6:3c:70:9e:f5:cf:d3:26:4b:4a:
                    25:87:f1:aa:af:66:e4:f8:72:c3:a0:86:43:e8:d2:
                    f0:3e:70:75:db:31:66:84:e4:c9:c5:dc:0f:29:77:
                    95:58:03:6a:12:f6:c2:e6:fa:15:21:8f:f1:c2:92:
                    c6:5e:43:e2:17:d9:44:67:8c:e4:01:fb:27:d2:85:
                    46:b4:fa:a5:a6:f3:7e:b9:8b:32:d4:61:27:14:86:
                    73:81:49:71:dd:85:98:f1:f0:b4:67:53:57:d6:4b:
                    3f:8f:62:fb:ce:52:b6:2e:d4:49:53:c3:45:50:8d:
                    97:56:e4:71:17:b0:a0:89:cd:db:92:52:47:f9:7c:
                    a9:ce:44:e8:44:53:8c:41:d2:35:a3:9d:28:6a:f7:
                    a6:34:22:69:ac:d7:9f:56:64:85:d5:0c:ce:14:2f:
                    d1:ac:67:41:04:85:b1:2d:fc:4d:31:db:c2:db:c8:
                    51:8a:4c:67:08:5a:85:44:ee:75:33:69:49:05:1a:
                    07:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:98:82:DC:82:61:E3:27:BF:D4:76:7D:42:EA:59:79:34:9B:29:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/c29da368-12a4-3190-8fb2-2391e3134074.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl

            X509v3 Authority Key Identifier:
                keyid:79:CD:4E:A1:93:4C:0F:C7:E9:3A:EE:E2:33:F1:FB:A9:13:3E:AF:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.100.0/24
                IPv6:
                  2602:f6ef::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:dd:87:43:b5:66:12:3f:da:68:64:3b:ea:b2:ff:02:6d:db:
         03:b9:0a:83:30:dd:87:d7:34:ca:c9:ea:53:1b:94:27:ae:50:
         2b:53:31:3a:46:e4:61:1d:91:c4:e1:b3:ce:be:6a:e3:e4:ef:
         bb:12:96:51:46:cd:53:f9:00:62:bc:61:de:5f:bd:4a:ad:b0:
         e3:0b:8d:84:99:17:ce:f6:b9:7a:46:18:95:9c:b3:c5:94:5e:
         2c:9a:bf:7e:1c:77:fc:8e:f9:be:66:70:34:d6:25:be:88:0c:
         92:8a:ff:bf:67:96:1d:ec:0a:4d:8b:34:b5:b6:68:1d:30:38:
         f1:e7:ef:9d:49:4d:c7:99:7a:9c:d1:8b:6f:56:9a:c1:dc:00:
         91:81:19:1d:7d:51:d4:b5:dc:76:f4:c7:95:08:fc:84:f3:be:
         53:5f:01:ef:0e:ab:2e:cf:6a:35:95:f2:30:e2:ac:bf:dd:1a:
         ed:11:36:2f:7a:84:3e:ee:91:54:ba:41:b3:a6:9b:4f:68:76:
         cc:4c:e2:b6:c9:80:d2:06:35:03:a2:f9:19:d5:e0:53:c1:36:
         6b:d5:91:82:89:f6:e7:32:09:c9:1f:f1:89:ce:5f:43:bf:61:
         fe:d0:0a:ad:63:8b:53:97:30:f4:f0:c8:6b:49:f6:28:9e:bc:
         2b:be:ea:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:39 2026 by rpki-client