Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a5f17359-8844-3d36-b6fc-9201973cfd95.roa
File:                     a5f17359-8844-3d36-b6fc-9201973cfd95.roa (raw, json)
Hash identifier:          6NX+neF/2hrG1j2RcvoaK9TsgWBBcvs0mVysb0Bpi2k=
Subject key identifier:   FB:1C:5A:EF:FE:71:24:8E:EA:7E:8E:48:13:9A:99:EE:82:95:12:76
Certificate issuer:       /CN=a7bb872d-e597-498e-8bd5-d2efae320554
Certificate serial:       010D0C9F4328584E7E94ED69534CBBF681ADBD40
Authority key identifier: 0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a5f17359-8844-3d36-b6fc-9201973cfd95.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     20473
IP address blocks:        23.145.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:ed:69:53:4c:bb:f6:81:ad:bd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bb872d-e597-498e-8bd5-d2efae320554
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=ddba6769-daa8-4b78-95bc-287cea1624ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:62:81:4d:12:be:94:47:27:4e:02:e9:97:16:
                    0f:b3:16:34:0c:ee:a4:14:02:f5:be:f1:4b:29:3a:
                    d5:e5:f1:49:c7:6d:dd:7c:d9:94:b4:f9:df:d3:8b:
                    64:d6:de:80:44:e2:53:1d:f0:d4:43:0d:cb:ed:8a:
                    21:2d:c1:6c:b7:52:ee:c2:3e:0d:90:2a:d8:89:3e:
                    7d:0d:be:b5:75:d3:17:43:8c:6b:9f:55:7d:bd:35:
                    6f:da:55:e1:10:a1:2c:aa:0e:50:80:43:eb:00:a0:
                    3c:60:0c:6d:b3:56:d2:f1:c6:e5:a5:01:9e:5b:31:
                    e4:90:1c:c8:e6:1e:bd:8d:87:09:74:a7:74:a5:27:
                    cc:25:d1:fc:81:3e:10:90:0a:e6:c3:e6:21:0e:d1:
                    bf:91:05:54:da:99:12:56:e9:fb:b1:13:67:8f:87:
                    5a:26:ab:f5:36:43:74:50:89:1d:85:9b:14:1e:97:
                    c8:8e:9b:48:c2:98:c3:d5:56:a6:44:08:71:e2:bc:
                    02:21:0c:41:0b:f5:44:50:11:7f:85:a0:b7:ac:a6:
                    29:64:5c:36:72:9b:15:4a:cf:d0:1f:fa:b9:0f:76:
                    a0:95:c3:32:62:d6:4a:70:c4:68:b1:fa:91:4d:46:
                    5a:6d:4a:30:ed:b6:dd:05:49:a0:00:fb:b6:9a:88:
                    9e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1C:5A:EF:FE:71:24:8E:EA:7E:8E:48:13:9A:99:EE:82:95:12:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a5f17359-8844-3d36-b6fc-9201973cfd95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl

            X509v3 Authority Key Identifier:
                keyid:0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:f7:f8:1b:24:cb:99:e8:6e:73:7e:e9:9d:38:83:c3:d1:be:
         82:a4:f0:6b:30:54:01:39:2c:a7:ac:38:e1:b6:54:cb:9a:d8:
         36:8d:93:de:1b:75:12:52:bf:62:18:32:8c:64:c1:e8:1e:b5:
         b1:8b:54:b0:6b:f9:de:7c:24:c3:ad:fe:18:73:8e:bd:71:c7:
         03:15:40:9d:e6:2b:bc:a7:aa:12:4f:9b:e9:a0:2f:5c:e6:12:
         8b:80:45:d6:c6:79:b1:a1:2f:bb:48:b7:3c:4b:3e:40:cf:0f:
         77:5d:24:11:b6:54:28:04:eb:f4:ad:9a:e2:52:c5:60:6d:a0:
         7f:49:ef:2c:f0:c9:e4:05:66:b4:b9:ea:a8:e7:b8:e2:c2:3b:
         ae:68:a2:ab:87:38:6d:12:3a:cb:1c:a9:a5:c3:1b:81:1a:fa:
         f9:8e:5f:90:e3:fd:d9:d0:f0:59:e7:3d:32:27:01:32:19:d1:
         5e:ca:3c:90:ce:47:a6:5d:96:3b:d7:43:9d:e7:79:56:18:15:
         75:38:e1:b4:c6:dd:89:36:8b:08:e8:1b:5b:37:08:57:bb:ab:
         f4:d7:f7:97:a5:eb:2c:f2:2d:72:e8:37:4e:9a:0c:62:3c:85:
         37:37:90:03:dd:a5:e2:5d:4c:07:d1:c9:30:23:de:91:02:7e:
         4d:6e:bb:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:36:09 2026 by rpki-client