Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/03a1f876-96a4-30bb-80b8-4e90fb71c43a.roa
File:                     03a1f876-96a4-30bb-80b8-4e90fb71c43a.roa (raw, json)
Hash identifier:          JwDW70/W7VjaAcaVLKFJEXQAW6iiftfQRrG7Z4beMeU=
Subject key identifier:   17:9E:B1:6A:F1:C1:59:B1:B4:C2:D3:41:3E:3E:E6:55:11:EF:D0:D5
Certificate issuer:       /CN=d190027d-4989-490f-90d8-74213ed3a98e
Certificate serial:       010D0C9F4328584DC995A675C45420051737F4A0
Authority key identifier: 41:5A:1D:48:72:6D:15:F2:14:92:BC:12:4B:A0:B7:8B:06:D6:25:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/03a1f876-96a4-30bb-80b8-4e90fb71c43a.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     21626
IP address blocks:        23.140.100.0/24 maxlen: 24
                          2602:f612::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/d190027d-4989-490f-90d8-74213ed3a98e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/d190027d-4989-490f-90d8-74213ed3a98e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:a6:75:c4:54:20:05:17:37:f4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d190027d-4989-490f-90d8-74213ed3a98e
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=79d38ba8-2561-48d3-bc68-2799e87ea2e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8c:60:df:92:8c:6d:35:93:03:de:4e:b5:b4:
                    a3:10:3c:db:c2:fb:b4:ff:19:3b:52:d1:e6:95:b2:
                    f0:c7:72:77:94:0b:c6:8e:c1:3b:c3:ac:e7:66:ec:
                    ed:29:cb:70:99:06:50:72:8b:01:4f:0d:35:fb:65:
                    66:3b:c7:b3:ba:e8:54:f4:27:2b:92:d4:f6:0b:be:
                    c3:e2:e9:34:66:14:2d:19:23:0b:76:a9:23:e8:df:
                    bc:cf:ac:38:4c:28:92:08:27:18:30:86:fa:d4:9b:
                    03:ff:43:89:9e:ad:88:67:f6:37:68:cb:e1:1a:5e:
                    63:d1:05:d2:af:97:61:c6:e5:3b:11:d7:d1:fe:a4:
                    42:a9:4c:bd:01:ce:33:58:11:2b:81:e1:f7:d9:7d:
                    fc:88:a6:60:3c:9a:0c:5a:fd:a5:ef:1f:43:2a:e5:
                    8e:6e:57:1c:2b:31:79:cb:54:43:2e:8a:db:56:7d:
                    30:0e:41:bf:9d:6c:fa:c3:66:0b:ee:51:b1:fd:e1:
                    f4:70:12:a3:cc:cd:56:cb:6c:21:13:6d:2b:9d:da:
                    e2:4c:52:7a:cf:0c:4b:a2:52:d5:11:b8:69:0b:e8:
                    12:82:89:3f:73:b8:12:87:8a:ed:29:c7:ce:a6:34:
                    97:7a:70:44:0c:82:94:2b:ca:e8:6b:5e:f8:3f:78:
                    c0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9E:B1:6A:F1:C1:59:B1:B4:C2:D3:41:3E:3E:E6:55:11:EF:D0:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/03a1f876-96a4-30bb-80b8-4e90fb71c43a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/d190027d-4989-490f-90d8-74213ed3a98e.crl

            X509v3 Authority Key Identifier:
                keyid:41:5A:1D:48:72:6D:15:F2:14:92:BC:12:4B:A0:B7:8B:06:D6:25:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.100.0/24
                IPv6:
                  2602:f612::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:09:6e:6d:8b:72:c0:73:36:97:33:2d:57:3a:b4:3a:34:9f:
         2b:7a:29:4c:7f:e9:e4:14:84:64:8d:be:95:2f:b9:4c:a4:d8:
         c4:27:ce:ed:2c:14:a8:50:2a:1e:7f:8b:4c:9d:2e:ec:6e:7a:
         b3:f0:fa:d1:88:eb:6d:03:79:4e:a1:da:fe:91:2d:ef:2c:9b:
         01:a5:26:7c:f0:0e:3a:c7:ff:ea:6d:93:1f:db:db:ad:cc:81:
         38:96:64:1c:e8:2b:82:31:87:9c:c6:21:42:02:05:44:a4:62:
         b7:1b:89:70:6f:48:06:d6:a5:fa:76:04:e9:52:79:30:2f:44:
         ec:52:65:35:e5:7d:79:e8:d1:0d:b1:85:9f:f3:85:2d:56:98:
         f7:b1:98:88:4e:94:cd:48:bb:7c:60:31:8f:fb:f8:b1:d7:cd:
         6e:8a:66:b3:f7:64:f7:14:ce:1b:50:1b:db:d0:3c:e8:26:68:
         23:00:31:e6:04:d2:fb:e6:59:5d:79:8d:d4:3b:78:ff:60:a1:
         cb:73:dd:8e:06:89:89:27:15:21:b8:68:07:69:81:88:ab:32:
         9b:ec:bf:19:7b:10:05:85:fb:a5:25:16:d1:f7:4a:80:f9:7a:
         02:d7:23:73:3c:ce:ad:65:c3:7f:ae:45:09:90:25:f5:c0:18:
         cd:4d:fa:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:26 2026 by rpki-client