Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/0d5b4427-5549-34ab-8c4b-f2571d399c35.roa
File:                     0d5b4427-5549-34ab-8c4b-f2571d399c35.roa (raw, json)
Hash identifier:          2EulMfHuu4K3o2WE1LBu/HP3p1ooVzG/vVr1qxS4eGc=
Subject key identifier:   2D:77:66:52:6D:A7:8F:63:22:B4:9A:9F:74:A0:7A:67:01:97:19:15
Certificate issuer:       /CN=2f9d1f23-406d-4b24-98df-682f42315db5
Certificate serial:       010D0C9F4328584DC29ADD2C084A8D3B99866E80
Authority key identifier: DB:BB:6E:8C:CB:55:F1:AE:A2:43:50:82:5B:8D:F8:28:3E:5B:41:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/0d5b4427-5549-34ab-8c4b-f2571d399c35.roa
Signing time:             Fri 08 May 2026 01:00:24 +0000
ROA not before:           Fri 08 May 2026 01:00:24 +0000
ROA not after:            Thu 06 Aug 2026 01:00:24 +0000
asID:                     214483
IP address blocks:        23.136.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/2f9d1f23-406d-4b24-98df-682f42315db5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/2f9d1f23-406d-4b24-98df-682f42315db5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c2:9a:dd:2c:08:4a:8d:3b:99:86:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9d1f23-406d-4b24-98df-682f42315db5
        Validity
            Not Before: May  8 01:00:24 2026 GMT
            Not After : Aug  6 01:00:24 2026 GMT
        Subject: CN=fe169767-f0a2-4024-8801-55ca278215b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:45:9f:d3:f4:42:7b:e6:65:ff:84:b3:e5:ae:
                    dd:3f:30:0f:35:4f:28:7c:0a:59:3f:90:7e:71:ef:
                    80:fa:1d:9d:a4:da:b5:7d:fc:a3:6b:23:fb:bf:21:
                    56:7d:46:1f:b2:be:31:c2:ea:e1:b0:b1:a3:53:40:
                    71:d0:d5:49:23:41:2d:f7:02:6f:e4:cf:89:f4:c8:
                    7b:70:9f:e6:31:a4:50:92:0b:ff:1c:81:4f:9f:b5:
                    d9:ea:c9:9c:eb:f7:45:e2:22:5e:48:cb:9b:77:6a:
                    d0:68:d5:57:ef:3f:43:cd:17:21:a4:b6:c5:b9:3d:
                    76:8a:e2:04:34:5e:c9:93:ad:bd:66:34:c2:05:eb:
                    30:70:f2:b2:d1:a1:34:27:ea:bf:8f:01:a1:5a:7f:
                    de:ec:b8:78:1a:78:01:aa:6c:09:38:05:d9:a9:d5:
                    22:93:09:f5:b6:27:e5:68:eb:f6:f3:ba:f0:61:6e:
                    16:c3:c1:ae:79:0f:25:92:ec:51:a0:9d:d5:1f:4c:
                    9b:06:9e:4f:12:a4:09:37:c9:a4:11:64:f1:ba:9f:
                    c7:d9:93:ad:e3:d9:f2:9a:42:b8:18:1f:e7:35:38:
                    98:4b:03:9c:61:bc:ec:35:91:ae:61:ac:56:e1:fb:
                    b8:cf:29:0f:b6:3f:4e:4a:6c:15:1f:e4:97:40:0a:
                    d5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:77:66:52:6D:A7:8F:63:22:B4:9A:9F:74:A0:7A:67:01:97:19:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/0d5b4427-5549-34ab-8c4b-f2571d399c35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5/2f9d1f23-406d-4b24-98df-682f42315db5.crl

            X509v3 Authority Key Identifier:
                keyid:DB:BB:6E:8C:CB:55:F1:AE:A2:43:50:82:5B:8D:F8:28:3E:5B:41:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2f9d1f23-406d-4b24-98df-682f42315db5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ab:46:cf:6c:da:09:ed:72:bf:36:90:8e:3a:e7:cf:66:d8:
         b6:fd:66:99:9c:c7:ca:a2:c3:94:8c:38:d4:f8:1d:8b:9a:94:
         f1:52:e8:36:27:84:0c:e6:aa:80:ee:e8:71:8a:2f:b7:85:fc:
         f3:80:65:74:4d:28:bd:6a:07:e7:11:0d:58:4c:5a:69:47:be:
         05:87:87:b4:fa:8c:dc:ba:1c:19:d8:7d:7a:13:3f:6e:ed:1c:
         0b:f3:bf:be:42:2c:b4:68:d6:e4:e8:32:8b:3c:6e:27:5b:81:
         b1:83:ee:3e:ff:f2:7b:7b:d0:c1:0f:0c:88:3b:31:4c:1e:bb:
         75:fb:03:6a:12:a1:0e:97:bf:ff:df:f0:d3:87:9f:0f:4b:9c:
         49:50:62:ec:56:8b:e7:15:de:2e:27:3d:7e:98:bf:69:8b:31:
         1a:9d:21:91:5b:fe:d0:cc:b6:7b:06:87:ca:14:6e:9f:7d:82:
         64:e2:2c:ba:f0:8a:84:e6:69:08:f3:8e:52:a5:31:7d:fc:87:
         90:51:7f:37:fc:51:70:5f:9c:4a:1d:44:81:49:cc:69:1e:fc:
         53:5b:9b:7c:4f:fd:77:1b:db:a4:a7:a4:b2:22:31:ea:b7:2e:
         ea:ea:59:62:37:53:70:a8:ae:6c:e6:90:5d:49:1d:c0:f7:0d:
         cb:71:47:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:18:12 2026 by rpki-client