Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151/c26dc67f-011b-390d-ab17-de97103742e4.roa
File:                     c26dc67f-011b-390d-ab17-de97103742e4.roa (raw, json)
Hash identifier:          S6NRct2pbCVCm/i3UZCfCwvUGXhFav0w7GZgXRz2AKY=
Subject key identifier:   1C:EF:F6:A7:52:1A:BC:F8:C2:B2:02:ED:16:9E:83:25:F7:CA:D3:9C
Certificate issuer:       /CN=1d5fb34f-5d30-47d5-b2c3-8f829fbc3151
Certificate serial:       010D0C9F4328584D8C2AAEFF15B54CDB0AC0CE00
Authority key identifier: A3:42:5B:BD:2E:41:08:FD:04:83:71:02:B7:1D:05:37:E2:85:3A:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151/c26dc67f-011b-390d-ab17-de97103742e4.roa
Signing time:             Sat 18 Apr 2026 13:00:30 +0000
ROA not before:           Sat 18 Apr 2026 13:00:30 +0000
ROA not after:            Fri 17 Jul 2026 13:00:30 +0000
asID:                     214483
IP address blocks:        23.139.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8c:2a:ae:ff:15:b5:4c:db:0a:c0:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d5fb34f-5d30-47d5-b2c3-8f829fbc3151
        Validity
            Not Before: Apr 18 13:00:30 2026 GMT
            Not After : Jul 17 13:00:30 2026 GMT
        Subject: CN=f1f911a5-7d75-422b-92f9-4cdfc08f209b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0e:4e:ea:e1:5f:f0:71:74:02:1b:f2:72:33:
                    35:7a:a3:5a:4a:4d:b3:37:42:9b:7a:b4:8d:c4:09:
                    91:fd:e1:89:8a:15:d9:45:b5:b6:32:b9:ea:55:ef:
                    ac:a0:a9:5b:7b:88:26:96:34:99:0a:ed:4f:76:26:
                    bb:93:3c:f6:d0:c6:6f:04:1d:9a:65:ab:04:0b:9f:
                    da:19:13:25:62:16:66:4b:0a:e5:59:e7:4b:e7:48:
                    bd:b3:cb:ad:c8:56:6f:ba:d4:71:aa:16:11:92:77:
                    24:24:b9:78:fd:70:df:4c:20:5a:1a:9e:e3:82:e7:
                    f1:9a:7b:12:18:c8:f5:1e:e3:c6:6a:b3:a4:24:7a:
                    e4:5a:d0:52:37:91:b4:71:a6:fa:75:0b:ad:fb:6c:
                    65:1b:4f:59:37:96:ca:d6:8d:14:4e:15:b7:8b:4d:
                    96:c5:17:2b:2f:88:7e:97:15:96:68:22:0e:5a:b2:
                    6f:d3:6b:aa:31:ef:da:88:e9:ad:3e:b3:4c:44:47:
                    5a:3e:c3:73:94:3c:05:b0:ae:bd:f5:9e:4e:17:75:
                    43:d4:ef:05:3f:e7:75:2f:e7:fc:0c:48:58:b7:73:
                    61:0b:9a:ad:43:f1:68:1f:dc:45:18:d0:bb:66:e2:
                    47:6e:d1:6b:db:4a:82:bc:1f:04:c1:d2:10:41:6a:
                    55:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:EF:F6:A7:52:1A:BC:F8:C2:B2:02:ED:16:9E:83:25:F7:CA:D3:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151/c26dc67f-011b-390d-ab17-de97103742e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151.crl

            X509v3 Authority Key Identifier:
                keyid:A3:42:5B:BD:2E:41:08:FD:04:83:71:02:B7:1D:05:37:E2:85:3A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/1d5fb34f-5d30-47d5-b2c3-8f829fbc3151.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e3:db:d0:e9:b5:30:aa:4d:b0:f3:59:d5:2f:d5:59:de:69:
         49:5b:99:18:3d:e8:b6:2e:74:b8:4f:95:33:ce:41:ce:99:02:
         24:24:bc:f5:71:9b:9a:85:d0:64:c9:81:56:31:5e:45:a7:23:
         e0:a9:bd:35:3c:cd:6e:d3:22:4d:fe:d6:a4:d1:e9:bb:b5:08:
         88:ed:c1:0b:81:99:97:dc:de:fa:3b:42:27:6e:b7:42:57:07:
         35:07:ea:2a:5c:cc:ee:a0:55:4d:0d:1c:8a:cb:1b:18:b3:28:
         60:5d:4a:af:dd:94:80:25:14:8e:64:ba:d3:e1:8c:be:e9:da:
         b9:9b:f4:bf:dd:4e:6f:08:ec:c0:e4:d6:94:35:fa:74:7b:34:
         c5:1b:75:61:c4:a6:e7:38:23:20:6d:11:90:ca:fc:8a:ed:c3:
         ee:30:4f:d1:d8:73:d6:46:53:dd:b4:81:1a:39:22:b0:9c:8f:
         8b:37:00:53:aa:a8:ca:c3:35:ae:c2:29:ce:3d:a7:74:6b:5a:
         a6:a5:50:10:6f:69:f4:9e:66:ee:ac:ea:cf:07:69:90:a0:dd:
         da:42:54:f5:ec:70:02:60:41:2f:e9:34:50:49:8f:8b:41:44:
         89:01:e1:25:ef:4b:6b:8b:fc:94:93:a3:59:56:53:c1:1f:01:
         1a:40:d1:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:12:52 2026 by rpki-client