Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902/96abca08-bfa2-3d87-85a3-b1d186321bd7.roa
File:                     96abca08-bfa2-3d87-85a3-b1d186321bd7.roa (raw, json)
Hash identifier:          YSzQdpG4rhdg32rUvvzHvnzxGBNDLUfbHZAdfQ7eC+M=
Subject key identifier:   53:2A:9A:D4:0F:8F:32:65:FE:1A:6B:C1:BB:6B:4D:E0:8D:30:27:3D
Certificate issuer:       /CN=8ebbdcab-800e-4b7c-80be-d82c3d97d902
Certificate serial:       010D0C9F4328584DCF2B1AC3423EFEB8D0A03700
Authority key identifier: 52:BD:26:08:9C:3A:07:32:76:F8:B9:52:D9:C3:35:6A:22:B4:8B:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902/96abca08-bfa2-3d87-85a3-b1d186321bd7.roa
Signing time:             Tue 12 May 2026 13:00:30 +0000
ROA not before:           Tue 12 May 2026 13:00:30 +0000
ROA not after:            Mon 10 Aug 2026 13:00:30 +0000
asID:                     8095
IP address blocks:        23.178.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902/8ebbdcab-800e-4b7c-80be-d82c3d97d902.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902/8ebbdcab-800e-4b7c-80be-d82c3d97d902.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cf:2b:1a:c3:42:3e:fe:b8:d0:a0:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ebbdcab-800e-4b7c-80be-d82c3d97d902
        Validity
            Not Before: May 12 13:00:30 2026 GMT
            Not After : Aug 10 13:00:30 2026 GMT
        Subject: CN=ceaa921b-1a6e-4900-8bd6-f3676d52890c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6a:94:a0:5e:dd:af:15:8f:43:ba:d5:16:2d:
                    38:b0:3e:8c:49:d4:03:4c:ba:20:9d:89:c1:da:53:
                    7a:1f:39:61:2e:fc:76:72:bf:17:0f:d7:c3:4d:fc:
                    7e:18:3b:bf:bf:9b:4d:8a:84:52:74:3b:0a:9e:b7:
                    8d:84:d4:10:69:a3:21:9f:70:85:84:30:cd:4b:a0:
                    7e:f3:08:ab:57:8c:31:28:8f:11:dd:08:f8:b9:ba:
                    71:27:33:6e:44:8b:8c:57:d3:c0:07:bc:dd:5e:3e:
                    94:10:3e:e5:f9:4a:82:14:a1:1f:7c:6d:92:3c:b5:
                    e7:91:82:62:0b:7d:21:fc:55:3a:29:3b:c8:18:15:
                    09:01:88:1c:16:3c:ba:e7:f3:9b:23:9f:e8:a2:26:
                    1c:d7:e1:e1:ce:7f:ae:91:98:50:74:61:2a:0f:1a:
                    8d:01:7e:71:8b:34:ff:e5:ed:fb:33:64:6f:7f:f6:
                    ab:38:d2:2a:46:90:ac:c9:e4:62:01:78:25:76:60:
                    ce:c8:4b:37:25:f7:d7:d4:78:29:71:44:8b:77:3a:
                    f6:e9:a1:90:eb:32:09:a4:9e:24:42:b5:b6:63:52:
                    12:5a:61:f8:27:34:2d:0e:e9:20:eb:26:04:35:06:
                    69:1e:c7:cc:e6:52:1c:1d:97:9d:6a:fa:f1:db:b6:
                    67:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2A:9A:D4:0F:8F:32:65:FE:1A:6B:C1:BB:6B:4D:E0:8D:30:27:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902/96abca08-bfa2-3d87-85a3-b1d186321bd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902/8ebbdcab-800e-4b7c-80be-d82c3d97d902.crl

            X509v3 Authority Key Identifier:
                keyid:52:BD:26:08:9C:3A:07:32:76:F8:B9:52:D9:C3:35:6A:22:B4:8B:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8ebbdcab-800e-4b7c-80be-d82c3d97d902.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.178.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:2a:db:4c:2d:a7:1f:4b:07:ae:82:8e:65:c7:2c:d6:f0:be:
         e0:56:31:a5:33:7e:bc:a5:91:18:e6:c0:79:66:66:05:5f:65:
         2b:45:f8:28:65:f0:95:d5:c8:ca:ab:b1:be:d6:3a:ea:c9:89:
         8f:61:fd:1f:51:24:04:24:fa:d9:3c:d8:10:28:01:aa:3d:9f:
         95:f9:23:d7:e2:df:cc:bc:fa:fd:f7:b3:49:3d:fc:1e:ab:a3:
         e7:f2:a4:a8:61:56:1e:c2:3e:5f:12:e9:ba:c1:6f:7f:67:79:
         97:af:3f:d4:6a:7d:61:a4:9c:af:c8:86:7e:bf:1b:db:46:08:
         83:23:99:b6:6d:f5:a3:9b:5a:d1:b0:d8:0e:d1:69:42:26:e9:
         de:21:8f:6f:b2:4e:34:76:e7:26:92:54:58:36:20:c5:1f:88:
         b4:55:5c:7b:8d:9e:73:a2:88:bd:b5:71:8a:13:ba:9a:99:2b:
         90:92:a0:f8:61:e2:4d:fd:47:26:48:97:bc:20:db:15:1a:ec:
         b4:70:0b:ed:8b:60:bb:67:bc:61:be:a7:82:0e:91:e5:f6:d8:
         a3:22:95:71:78:3d:43:d6:a1:3b:6a:c7:41:dd:52:88:53:aa:
         22:e9:55:e0:dc:6e:8b:b1:88:37:a8:d3:c9:a1:d7:b5:db:1b:
         8e:03:5b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:43:28 2026 by rpki-client