Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/55e5afc3-fb9f-3e8c-ba77-d71dbe12ab7b.roa
File:                     55e5afc3-fb9f-3e8c-ba77-d71dbe12ab7b.roa (raw, json)
Hash identifier:          l6ehUg7HwdLzexbJKUQFC0SkEuIBGg2/+D7XTcu6Tq4=
Subject key identifier:   A8:9F:CD:DB:60:77:AD:C8:BB:FE:01:06:38:2D:89:80:85:5F:6B:37
Certificate issuer:       /CN=da900f81-3070-4c79-8343-f14ceb8ddb3a
Certificate serial:       010D0C9F4328584DB07591C7B473C59C62D6CBA0
Authority key identifier: AE:C5:44:2B:D5:12:50:7C:7F:60:84:B8:5D:29:BE:04:B8:C9:90:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/55e5afc3-fb9f-3e8c-ba77-d71dbe12ab7b.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     34927
IP address blocks:        23.150.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:91:c7:b4:73:c5:9c:62:d6:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da900f81-3070-4c79-8343-f14ceb8ddb3a
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=2a613faa-3b5b-43b7-84eb-84a9fbeb356a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:35:26:9b:df:23:6f:cc:78:a4:05:af:4f:
                    ae:26:9e:81:0e:4d:d8:41:20:b4:9e:45:ea:10:83:
                    c4:8b:af:cf:cd:37:aa:f6:03:f6:a8:a1:f6:25:bb:
                    57:ad:9a:b9:88:45:aa:0d:6b:be:cb:55:c7:9f:dc:
                    74:ba:b8:38:18:02:66:b2:6c:0c:d6:1c:09:c3:b0:
                    67:aa:ef:d2:30:3f:9a:23:3c:1b:43:60:67:31:fd:
                    62:b1:95:5a:bb:90:d9:51:c6:76:5e:c2:94:d2:2c:
                    f2:3b:a6:9f:6d:3c:4b:5e:b7:d4:6d:c7:d3:35:43:
                    db:34:ac:77:1d:a9:9d:25:e4:5d:d5:f3:f7:46:66:
                    46:06:f8:84:5b:b2:0c:3d:3d:96:2a:6c:08:f6:6a:
                    c1:27:db:26:e2:dd:c5:15:03:dc:b5:da:6c:a9:0d:
                    2b:4a:d7:11:0d:21:b6:c0:6c:1d:96:bd:e6:45:b6:
                    39:af:99:03:19:a7:0a:4f:bc:4b:65:a4:c0:41:42:
                    6a:48:23:08:e1:80:b1:e9:24:4d:bc:d8:65:34:21:
                    7a:98:78:12:f7:c8:34:12:9d:af:8c:ec:79:aa:f4:
                    90:37:74:06:17:5a:61:75:dd:99:c9:b7:b6:11:d6:
                    7c:2e:f7:d7:98:67:5a:9f:33:7f:13:3f:c7:5b:42:
                    5a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:9F:CD:DB:60:77:AD:C8:BB:FE:01:06:38:2D:89:80:85:5F:6B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/55e5afc3-fb9f-3e8c-ba77-d71dbe12ab7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a/da900f81-3070-4c79-8343-f14ceb8ddb3a.crl

            X509v3 Authority Key Identifier:
                keyid:AE:C5:44:2B:D5:12:50:7C:7F:60:84:B8:5D:29:BE:04:B8:C9:90:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/da900f81-3070-4c79-8343-f14ceb8ddb3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:51:49:a5:95:62:71:a8:c9:c7:f0:bf:e4:d4:d7:c1:41:f6:
         85:91:0a:e2:2a:ab:bd:ba:24:6e:94:60:78:37:b0:4c:0d:c9:
         50:aa:2f:33:9d:af:5b:b1:51:67:08:8c:af:04:a7:e1:d9:4c:
         2d:7e:17:b1:0e:87:54:0d:a6:19:ff:53:17:94:80:9e:33:52:
         ae:cd:96:0c:ff:95:db:7d:1c:c9:39:d0:b0:08:3f:6d:e0:cf:
         49:e5:ff:a1:ec:d4:b6:6e:0c:66:1a:96:e0:13:06:bf:08:d4:
         09:9f:3c:27:b6:ae:06:53:0f:7c:a8:5e:53:77:6c:60:7f:c2:
         49:01:3a:62:e6:46:2a:3b:62:a8:68:9f:a6:c6:66:02:de:c5:
         90:fb:78:82:48:33:1e:38:cd:7e:b3:a7:d3:c5:ff:23:ff:30:
         dd:56:a2:86:26:02:d2:d9:e0:e3:26:4b:3e:ed:07:1c:92:3d:
         31:98:89:c3:33:51:99:e7:b7:63:27:de:fb:5e:80:a1:bd:7d:
         a1:ca:02:b0:5a:b8:03:78:aa:43:e3:07:ae:c1:87:19:62:ab:
         33:27:94:8a:e8:5a:9f:0f:ad:d4:ac:3e:0f:de:95:88:57:a9:
         d6:aa:c1:ab:17:39:25:0d:09:11:f6:59:63:3b:93:ab:c1:6b:
         7e:95:ab:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:00:53 2026 by rpki-client