Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa
File:                     a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa (raw, json)
Hash identifier:          nhoN3TI8tB9pUDJyAV3VRh6GktPIZkpItSuvJp6A710=
Subject key identifier:   C1:A7:8A:A6:84:84:E1:0A:9E:B1:62:80:5E:91:F0:B7:98:FB:4E:83
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584E94EA81471EB4130D17CA31C0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     54113
IP address blocks:        23.235.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:81:47:1e:b4:13:0d:17:ca:31:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=c81c7c8a-5963-4302-a75c-b4e1e5f57720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:30:44:e1:f0:24:07:06:d6:ba:46:9c:0d:
                    73:42:ab:71:6b:82:df:f6:10:6d:e8:49:00:4a:34:
                    1b:7d:61:f9:0a:96:3b:58:dd:91:98:8e:12:84:0b:
                    f3:2a:86:60:25:ea:18:db:f5:1a:f8:ed:70:bb:d3:
                    11:16:c2:fc:5e:a3:18:65:e6:a2:0e:20:b8:5e:01:
                    90:c3:97:50:94:eb:e1:49:3b:fe:56:ef:f1:19:01:
                    59:d1:3a:b8:bc:47:da:a3:54:77:f7:43:b3:72:9b:
                    60:41:3c:3d:12:16:4f:c0:af:3c:e8:1b:13:52:1e:
                    3f:6e:14:73:d9:52:1d:d9:36:9f:3a:5a:e0:08:54:
                    a7:b2:1e:49:22:9d:4d:ee:8f:b2:08:85:06:fe:f7:
                    96:7c:56:4e:28:ff:20:97:4d:16:d6:8a:8d:81:a5:
                    3e:a0:4d:82:71:76:0c:30:4a:a2:b7:a7:02:61:0e:
                    c5:12:e4:f7:c1:e8:67:bf:b3:97:e7:30:61:06:28:
                    32:a8:8a:83:6f:1d:b5:04:7b:d1:53:ec:01:ea:b7:
                    b3:01:c9:df:29:1b:44:c1:15:49:20:93:4e:02:65:
                    2f:fa:0f:bc:d2:28:23:f9:65:2d:41:62:ee:cf:d5:
                    1d:cc:7c:75:0e:e8:88:d9:b0:d8:6f:12:fb:35:4a:
                    cb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A7:8A:A6:84:84:E1:0A:9E:B1:62:80:5E:91:F0:B7:98:FB:4E:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/a3aeee48-4949-36bc-a7ed-c62ac2ae6a4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:ec:cd:ab:ea:b2:e1:6d:68:d2:df:37:22:10:8a:98:b9:8a:
         b2:ca:e9:ff:31:7f:99:77:10:4f:90:b0:d0:0f:a5:a2:4c:64:
         b3:b4:d9:35:f9:5d:e8:8a:69:ad:6c:1a:fd:64:ac:8f:18:7e:
         f1:f4:3f:62:b8:57:84:7e:d2:db:66:76:b7:0e:fe:c8:bb:17:
         f7:18:ee:26:27:b2:2c:5c:74:d1:09:62:22:bc:cb:39:4a:db:
         03:0c:c8:fc:fc:f6:a8:1c:8a:44:fe:b7:52:bc:df:73:39:75:
         60:41:ec:7e:4a:0f:7b:91:31:dc:be:00:0b:d7:4d:25:a5:53:
         de:ba:24:20:de:6f:73:09:ee:97:c8:1a:b6:13:eb:6b:42:bd:
         e2:84:01:83:fa:77:0d:43:c3:b3:f9:92:70:ce:2d:22:05:d7:
         22:9f:e2:4d:3f:cb:01:43:29:7b:ef:26:31:58:84:57:23:5d:
         ba:45:f2:63:35:bb:cd:96:e6:09:f0:de:b7:85:2b:b3:f1:94:
         33:95:82:3e:65:9c:6b:46:bb:01:77:65:82:f7:d8:77:c6:d0:
         35:f8:9e:52:0a:4a:3f:ab:99:85:1c:3a:99:ac:64:cb:bd:a1:
         f0:bd:3a:20:ff:3b:07:e0:82:08:d2:20:58:54:da:6d:05:7b:
         83:bd:21:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:05:55 2026 by rpki-client