Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/87c56411-a115-366c-b881-794a7033caac.roa
File:                     87c56411-a115-366c-b881-794a7033caac.roa (raw, json)
Hash identifier:          tEAch2zIX+if4iqNA8N2vVuAOhOe5wwUX/lGgDYr9nU=
Subject key identifier:   B6:63:21:ED:36:EF:90:D8:80:EA:F6:E3:16:C1:0B:8F:B8:2D:C2:2A
Certificate issuer:       /CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5
Certificate serial:       010D0C9F4328584E5084B54BE42219A3BD8CB9C0
Authority key identifier: 05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/87c56411-a115-366c-b881-794a7033caac.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     31898
IP address blocks:        23.91.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:b5:4b:e4:22:19:a3:bd:8c:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=3caa1f06-0b9f-4a38-a747-44f4ea69f6a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:e9:2b:8b:72:94:92:3c:77:bf:9b:49:1c:
                    3a:f1:b2:fa:8f:4a:43:fc:ff:69:7b:22:85:e4:75:
                    36:53:7c:2c:b8:b2:7a:5c:c7:2f:6f:f6:94:e4:c5:
                    9f:95:6b:bc:09:7c:8f:4c:f9:85:b3:60:fc:be:6c:
                    ee:f5:0b:ac:74:3a:f4:08:9e:e5:05:83:31:46:e6:
                    10:96:f5:d0:10:e9:cb:0f:31:23:68:16:d1:02:6b:
                    57:e7:da:ba:43:90:93:04:54:fc:70:fa:22:3d:b3:
                    3e:37:fa:fe:6b:2f:3e:35:61:9a:69:56:55:97:c7:
                    2d:73:84:16:31:3c:de:b3:1f:15:2d:26:29:2b:09:
                    72:c8:d7:06:14:67:82:84:1c:0e:82:7b:44:c6:eb:
                    04:9f:0c:cc:91:fb:95:09:da:92:a4:00:11:70:61:
                    90:b0:16:db:a5:73:09:4a:6c:5d:91:6e:1c:55:73:
                    f4:3c:11:14:02:d5:6f:ed:d2:f9:da:d7:55:88:8d:
                    31:22:aa:73:65:58:fb:61:cd:7e:e3:26:71:00:87:
                    11:6e:a7:46:30:3e:2a:10:26:2b:28:84:ef:e0:8a:
                    45:d7:28:81:d8:64:00:99:89:3f:6b:6a:10:fd:f9:
                    e3:30:13:a8:6e:78:06:33:9b:ce:ed:3f:d2:fc:7a:
                    d2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:63:21:ED:36:EF:90:D8:80:EA:F6:E3:16:C1:0B:8F:B8:2D:C2:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/87c56411-a115-366c-b881-794a7033caac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl

            X509v3 Authority Key Identifier:
                keyid:05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.91.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:6f:2b:2d:2c:7e:e2:23:3b:f5:88:c6:cd:72:d0:9b:b3:03:
         67:66:ac:90:a3:af:d8:9e:c9:a1:41:73:b1:ec:9a:e5:44:2a:
         14:e7:5c:68:4f:da:14:9f:d3:fa:ae:0e:b4:6c:31:0f:51:6a:
         ba:6a:73:39:f6:3f:d1:63:ce:6a:73:ed:3e:6f:04:57:a6:f1:
         78:57:8b:80:87:58:11:5f:09:6a:7e:b4:ae:9c:fc:e9:b7:99:
         74:42:13:2e:9f:88:14:80:95:15:3d:56:66:3a:af:02:ba:cc:
         71:06:5b:f0:cd:46:d5:09:e4:e8:74:ad:09:e2:26:28:5b:fe:
         1a:9e:ef:e2:a1:3a:7b:6e:b5:42:56:9d:8f:b8:f4:e7:7e:c4:
         ec:ba:07:35:28:4a:2f:d4:19:19:bf:12:44:9b:20:a5:2a:fd:
         b2:53:5a:6b:4c:a0:64:51:6c:4d:aa:c2:2a:28:db:ff:3a:99:
         f9:f1:e8:2a:08:b5:b5:9c:ba:ae:31:41:7d:1e:4c:41:fe:b8:
         c4:0b:ff:22:75:c5:f6:4b:96:47:06:73:2f:fe:c8:55:52:4b:
         ea:4f:51:4f:b2:d3:b6:25:96:c8:71:9c:f6:e2:86:7e:2f:ad:
         64:f3:7f:d4:58:f5:a9:12:65:4c:70:8d:f2:94:ab:db:b2:f5:
         12:a9:05:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:00:20 2026 by rpki-client