Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/4cc8e385-a35a-3137-bb31-ffe001f66d75.roa
File:                     4cc8e385-a35a-3137-bb31-ffe001f66d75.roa (raw, json)
Hash identifier:          gVjV4YjWmUZNNpfeLrRSWBCTIvVgexUWCYHkbhqyFtA=
Subject key identifier:   5F:8D:3F:4C:08:75:C9:12:79:9B:C5:08:24:E8:0D:01:84:B4:57:5B
Certificate issuer:       /CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa
Certificate serial:       010D0C9F4328584DAC457D15AA5528342730C6B0
Authority key identifier: AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/4cc8e385-a35a-3137-bb31-ffe001f66d75.roa
Signing time:             Thu 30 Apr 2026 01:00:26 +0000
ROA not before:           Thu 30 Apr 2026 01:00:26 +0000
ROA not after:            Wed 29 Jul 2026 01:00:26 +0000
asID:                     211392
IP address blocks:        23.145.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ac:45:7d:15:aa:55:28:34:27:30:c6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa
        Validity
            Not Before: Apr 30 01:00:26 2026 GMT
            Not After : Jul 29 01:00:26 2026 GMT
        Subject: CN=11a9fb4f-6b9a-48fc-9a3c-980b14243884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d2:14:9e:66:0d:16:b0:68:ce:bf:da:29:a6:
                    37:e8:65:41:9d:46:b3:16:3a:ff:75:a6:01:d4:f2:
                    8c:bb:6a:84:29:e2:83:ac:57:50:75:94:5c:4b:d1:
                    ff:9c:0c:c0:05:9e:4d:0b:b2:d8:29:99:a0:b8:c9:
                    3a:a0:a3:7d:4c:ac:42:b4:11:ea:62:4f:42:b7:1e:
                    d6:25:ad:1b:0f:03:51:e2:08:42:f0:5c:23:86:8e:
                    2c:d1:ea:5a:37:72:67:4d:b5:2e:77:af:2c:fb:c5:
                    a4:da:1f:d7:a9:43:32:49:7a:40:63:65:30:e1:43:
                    12:0f:8d:79:98:35:c7:42:5c:20:b8:f5:fa:18:ff:
                    c0:3c:4f:22:84:68:16:21:40:aa:d0:ef:dc:88:b9:
                    38:f3:3b:82:3d:5f:be:48:31:bb:d9:94:04:f6:91:
                    37:e0:7e:a8:8d:b2:a8:07:84:a8:02:2b:06:18:52:
                    bc:7a:97:68:76:40:6e:09:c6:73:5d:6e:58:52:27:
                    08:b5:38:e5:8f:eb:4e:f8:01:2d:b0:df:0e:a7:5d:
                    e4:3a:90:da:04:c4:d1:f9:a6:e5:5b:10:30:29:31:
                    6a:8b:aa:86:57:29:c3:0d:83:26:3f:83:84:90:da:
                    fa:50:f5:09:ef:9b:10:78:6c:93:33:f9:e9:07:4f:
                    5f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8D:3F:4C:08:75:C9:12:79:9B:C5:08:24:E8:0D:01:84:B4:57:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/4cc8e385-a35a-3137-bb31-ffe001f66d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.crl

            X509v3 Authority Key Identifier:
                keyid:AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:0b:e4:1d:40:7f:4a:db:04:1c:62:ee:d1:29:2e:5e:82:7d:
         4e:e4:a2:94:76:92:52:d9:59:cc:33:92:d3:e9:63:67:d8:4a:
         11:29:85:20:3d:a1:61:85:05:c5:9d:4d:6b:eb:a4:cb:8f:d2:
         86:25:e8:b4:29:2b:1b:c1:b7:10:cb:b0:22:08:8d:2e:e4:3f:
         52:a5:3e:44:cf:b0:ff:fe:6d:0e:ab:49:41:d3:ef:08:b2:09:
         07:05:21:98:2e:e7:ed:bc:b2:6e:7d:5a:6b:08:8a:11:d4:01:
         25:60:28:b7:de:bf:c7:2b:43:54:ee:c6:b3:2e:ad:7f:73:c9:
         0f:d8:d2:78:62:f6:85:2e:21:fd:01:79:ec:37:5c:f1:69:80:
         d6:2c:4d:73:86:3b:b2:e5:33:3a:50:0a:ce:be:6c:81:cf:76:
         0a:c0:e5:49:24:c6:0a:dc:12:6d:76:63:09:61:fe:ce:3b:94:
         4e:f2:4d:d7:2c:9e:b2:7e:0d:37:81:38:7f:d3:0a:e8:28:41:
         81:52:df:f5:96:7c:2d:58:71:7b:9a:d7:65:96:c6:7b:8c:25:
         98:62:ce:91:02:34:95:75:13:b0:31:47:55:16:52:13:b0:09:
         6d:5e:a1:65:24:c1:02:b9:24:7d:f6:45:7b:13:1c:b0:23:fb:
         c5:1f:ab:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:28 2026 by rpki-client