Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fb1bf863-b3b2-359d-831e-d305657e8de3.roa
File:                     fb1bf863-b3b2-359d-831e-d305657e8de3.roa (raw, json)
Hash identifier:          uiDr6cuxdnUvfmGWS6e52XpSexN2Tccj23q/pngprIY=
Subject key identifier:   0E:9E:B2:AC:3A:28:12:73:07:0C:6A:36:59:03:D8:E8:57:24:91:02
Certificate issuer:       /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
Certificate serial:       010D0C9F4328584E683F635F6F1251B5DD5E1100
Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fb1bf863-b3b2-359d-831e-d305657e8de3.roa
Signing time:             Mon 06 Jul 2026 09:00:12 +0000
ROA not before:           Mon 06 Jul 2026 09:00:12 +0000
ROA not after:            Sun 04 Oct 2026 09:00:12 +0000
asID:                     26006
IP address blocks:        23.168.136.0/24 maxlen: 24
                          2602:f9bd::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:68:3f:63:5f:6f:12:51:b5:dd:5e:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae
        Validity
            Not Before: Jul  6 09:00:12 2026 GMT
            Not After : Oct  4 09:00:12 2026 GMT
        Subject: CN=02cd5d50-cd70-4cb5-8606-371a4cff44bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:5b:37:cc:a6:1a:55:2e:71:dc:9c:3b:3b:
                    79:dc:45:48:c3:44:9c:37:60:db:9f:81:69:1d:6b:
                    fc:bc:75:eb:ce:a9:54:76:e0:92:52:88:c7:fd:dd:
                    d0:71:45:af:86:28:f6:41:36:68:48:5c:98:43:bb:
                    c9:d6:31:0c:66:0b:1c:22:47:ff:f6:83:d7:87:5c:
                    83:24:ad:85:68:92:7d:dd:41:f0:47:c4:35:1e:0c:
                    be:8f:d5:cf:6a:de:a2:dc:67:ca:cb:4e:eb:2b:e2:
                    b8:78:20:58:a3:d0:ee:72:d5:8f:41:71:a5:12:90:
                    68:24:5e:ab:35:f5:8d:23:f5:f0:8d:8f:c6:90:e0:
                    ec:a1:ee:70:01:e0:a9:93:16:4d:98:e3:da:ee:82:
                    a5:28:d5:bc:a3:44:66:65:2b:ad:21:86:cf:2b:cd:
                    f4:14:39:25:94:d9:e7:db:25:cd:81:08:62:b1:61:
                    c9:d9:60:d6:a2:d2:be:0f:8f:b8:ee:7a:f0:cd:32:
                    96:6e:e8:41:b2:e3:9f:9f:49:bb:03:41:53:3a:dc:
                    5e:5c:49:4b:a2:77:80:78:aa:6b:0e:df:35:53:4d:
                    ef:83:b6:5e:84:d1:b2:e9:f4:60:ec:7e:ef:bb:57:
                    f0:91:48:e2:68:cc:ec:61:b0:15:50:f8:0d:63:51:
                    cd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9E:B2:AC:3A:28:12:73:07:0C:6A:36:59:03:D8:E8:57:24:91:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/fb1bf863-b3b2-359d-831e-d305657e8de3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl

            X509v3 Authority Key Identifier:
                keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.168.136.0/24
                IPv6:
                  2602:f9bd::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:87:97:44:0c:25:af:b8:10:25:38:ce:07:15:d7:e9:29:bb:
         a4:b1:47:d0:82:49:cd:f2:1f:73:01:d7:7b:e7:c8:c1:0a:c1:
         65:a3:a2:9e:3a:93:fe:02:8a:ef:a6:3a:44:9d:ba:82:5e:e8:
         f4:3f:74:50:e6:a5:8d:eb:c7:7b:13:80:d1:79:59:0f:c0:12:
         bc:ce:3a:bd:a7:8c:bf:3d:60:40:93:f1:96:3c:37:cd:fd:76:
         1e:df:4e:9a:40:6b:51:48:1d:cd:ac:9e:60:94:a4:d3:61:92:
         f8:9b:75:6e:0b:71:26:f6:b4:74:fc:13:bb:c5:57:9f:62:14:
         5c:1d:2a:93:1c:6a:ef:7f:90:e0:d2:e1:4f:11:33:af:0f:42:
         69:42:db:45:2c:2c:a9:97:18:70:5a:a9:c7:b5:1d:dd:cb:27:
         6f:93:a7:04:bd:93:9c:2d:a4:c7:49:2e:26:20:7c:cf:32:d8:
         49:a4:83:6a:f1:60:c7:b7:09:4e:74:1f:5a:ea:32:5b:8c:9b:
         2b:41:7b:72:ba:ae:ca:66:23:74:a5:93:70:8c:d2:99:20:27:
         9f:93:77:7f:f4:a3:67:b2:2d:8b:3f:d8:11:d2:81:f3:7c:d8:
         69:4a:56:7e:c0:b9:8c:11:d1:fa:93:b8:dd:d6:3d:13:d1:56:
         92:be:82:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:11:59 2026 by rpki-client