Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/71614124-d8cd-3cfc-83ad-fb27d9571197.roa
File:                     71614124-d8cd-3cfc-83ad-fb27d9571197.roa (raw, json)
Hash identifier:          FzdRJBYxw66b5hL0EgtOyj+ylzkq22Zn4FO+YJsoLbA=
Subject key identifier:   BD:E8:38:22:70:EA:53:51:B4:02:33:D0:C4:AE:77:4F:80:9A:4E:5F
Certificate issuer:       /CN=d978ad6f-4614-4fcf-9d00-9f30e1a82674
Certificate serial:       010D0C9F4328584D9E4FFF3536E1DE662C91F5C0
Authority key identifier: F7:D1:FE:EA:1C:EC:BE:6D:45:87:65:7F:4A:53:11:CE:D8:B2:7F:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/71614124-d8cd-3cfc-83ad-fb27d9571197.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     8143
IP address blocks:        23.149.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/d978ad6f-4614-4fcf-9d00-9f30e1a82674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/d978ad6f-4614-4fcf-9d00-9f30e1a82674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:4f:ff:35:36:e1:de:66:2c:91:f5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d978ad6f-4614-4fcf-9d00-9f30e1a82674
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=ec4c09d4-bc7d-4fe1-926a-da033842443a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2a:51:b2:22:8b:e3:03:0d:cb:79:ec:b6:9f:
                    cd:c8:2e:b0:d8:00:fa:37:29:8b:d1:0b:f0:17:61:
                    ee:2c:61:ce:ad:08:7e:b7:4c:c5:18:10:d1:6c:f1:
                    a4:25:75:6a:ba:2f:c9:a6:e8:8e:a5:55:8e:27:24:
                    b4:2f:58:5e:6c:1a:1a:bc:ac:4f:59:bd:7c:63:9c:
                    f9:40:71:60:84:9d:a6:60:26:60:a6:9a:22:15:a3:
                    0a:15:7d:df:3b:6a:e6:d1:77:42:99:58:39:a5:02:
                    35:25:99:2a:56:ad:53:d4:a1:12:03:1c:91:d2:4d:
                    2e:6b:df:c3:90:2e:54:8a:4b:44:09:a4:4e:93:e4:
                    4b:6f:6e:cb:fe:ed:6d:8d:d9:33:09:43:96:3e:a3:
                    0d:0d:6f:c8:a4:db:48:a7:67:13:6d:85:8c:3a:8b:
                    bb:3c:dc:05:b1:81:25:de:22:52:44:ea:6b:93:be:
                    62:08:eb:0b:53:e8:79:80:16:f3:fc:db:64:f6:cd:
                    3d:90:a4:3d:8f:e5:67:20:72:ec:3c:12:5a:ca:b4:
                    a9:9b:99:66:33:25:87:0e:4f:05:52:d8:d8:fe:c3:
                    27:5a:2b:78:48:79:ee:47:e7:fc:b3:4a:39:ae:7b:
                    b6:72:9f:02:3f:39:89:0c:9e:fe:b8:be:93:ae:7d:
                    96:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E8:38:22:70:EA:53:51:B4:02:33:D0:C4:AE:77:4F:80:9A:4E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/71614124-d8cd-3cfc-83ad-fb27d9571197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/d978ad6f-4614-4fcf-9d00-9f30e1a82674.crl

            X509v3 Authority Key Identifier:
                keyid:F7:D1:FE:EA:1C:EC:BE:6D:45:87:65:7F:4A:53:11:CE:D8:B2:7F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:8d:7c:08:25:3c:74:43:00:63:a3:f3:da:d6:e4:12:35:2a:
         06:4e:5a:4e:2c:76:b3:c6:df:05:a7:da:6d:02:8a:d8:7e:d8:
         4b:bf:61:41:d5:4b:89:a4:a4:e2:1f:06:ba:93:fe:92:cb:fe:
         57:43:f1:b9:8c:8f:4c:ed:cd:19:77:f5:0a:28:98:4d:29:ec:
         ab:12:55:76:cd:d9:99:22:2b:48:99:83:f0:75:13:5f:2d:49:
         b0:f6:0e:08:a7:7e:72:da:13:ae:29:4d:5b:e1:2b:19:7f:7f:
         46:01:c9:c4:0a:79:bf:ae:a2:75:15:b1:ff:31:9c:da:2c:a3:
         40:71:37:85:b8:8b:ea:a1:55:f9:a2:ea:cb:9f:0c:02:3a:b6:
         28:eb:61:e5:4d:de:e7:76:57:86:62:03:8e:0b:7d:48:df:07:
         3f:00:c6:9b:64:26:4f:c1:5d:c7:40:b8:77:8f:83:94:3b:46:
         45:67:a9:14:38:ea:c5:05:12:b4:e9:58:e5:58:d4:c1:45:96:
         f1:de:4e:7f:43:ec:7c:c5:56:9e:d2:ac:83:cc:56:ca:78:8e:
         41:6e:4c:d5:d7:c6:0c:9e:b8:26:20:28:95:a4:fd:a5:0c:58:
         5a:e0:4a:fd:10:d0:2b:91:29:1e:eb:b3:8a:35:94:0a:92:e1:
         02:29:9e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:11 2026 by rpki-client