Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa
File:                     7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa (raw, json)
Hash identifier:          4KJmMEXi8CEFKda8AzGb2Gogyd3kJUPR2ZnofQpivaw=
Subject key identifier:   5D:CF:27:C9:F4:20:D0:E2:67:AA:0B:58:06:61:DF:51:DF:F7:FF:A7
Certificate issuer:       /CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Certificate serial:       010D0C9F4328584E8DEFA3E21F43D6EA53706300
Authority key identifier: 11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa
Signing time:             Sun 19 Jul 2026 21:00:12 +0000
ROA not before:           Sun 19 Jul 2026 21:00:12 +0000
ROA not after:            Sat 17 Oct 2026 21:00:12 +0000
asID:                     14618
IP address blocks:        23.131.60.0/24 maxlen: 24
                          2602:f763::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8d:ef:a3:e2:1f:43:d6:ea:53:70:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
        Validity
            Not Before: Jul 19 21:00:12 2026 GMT
            Not After : Oct 17 21:00:12 2026 GMT
        Subject: CN=064f76b8-4fbb-4321-9c88-fb3ecec63612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:32:1b:c6:94:e9:34:5b:d6:8f:84:eb:f6:
                    03:f2:4d:48:cc:cf:51:6c:a6:30:53:e9:6a:b9:1d:
                    49:59:c6:80:76:7b:f5:6b:cf:c9:a3:11:57:2f:88:
                    6e:a3:1d:4b:15:c9:e0:ec:b4:ae:5c:5d:72:7e:56:
                    28:37:0a:d7:05:19:e2:3e:22:17:0c:be:5e:39:92:
                    36:9b:28:8b:4c:b1:27:27:73:8d:0b:cc:e0:5b:26:
                    3e:21:ef:c7:94:e8:12:b3:4d:51:4f:1c:b9:ca:cd:
                    0c:35:88:d1:78:6a:94:cd:dd:b6:f0:2f:73:0f:ee:
                    93:2d:5b:74:82:2d:e3:4b:2a:1d:db:7d:fb:76:4e:
                    f5:02:01:f5:08:b9:39:eb:c3:74:5f:88:33:65:d5:
                    35:01:51:d0:e0:87:9a:20:7a:0a:e6:38:50:ec:65:
                    5b:03:17:c9:a2:38:e3:e8:76:91:a5:ae:23:d6:c1:
                    46:d5:8e:2a:86:d3:48:da:e2:7a:8f:bd:5c:6c:ba:
                    88:05:93:13:cc:19:80:12:d2:96:e1:35:b7:e0:de:
                    43:9f:a9:b4:24:8c:35:4f:bb:12:92:a8:a1:0e:48:
                    db:54:3c:56:2f:16:36:60:ad:2c:b8:62:d5:7e:61:
                    b5:4d:38:08:f9:7c:06:5e:4e:d1:82:69:56:0c:36:
                    08:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CF:27:C9:F4:20:D0:E2:67:AA:0B:58:06:61:DF:51:DF:F7:FF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/7e3d434b-4370-3a39-8b26-c3d433d2bd13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl

            X509v3 Authority Key Identifier:
                keyid:11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.60.0/24
                IPv6:
                  2602:f763::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:3c:e4:b3:db:ad:ff:c9:00:aa:6c:a7:da:38:47:e7:42:db:
         34:4b:76:69:08:ed:8e:95:89:f1:ca:1e:98:f2:4a:3f:a9:d9:
         10:5b:37:3e:36:f5:d5:62:ea:76:37:ba:10:86:c1:62:e8:f4:
         90:52:bf:ea:1d:cf:fe:85:e5:40:47:60:43:c1:ef:28:c8:02:
         ab:5c:1b:72:c5:a7:44:1c:84:52:68:8f:fe:82:86:a9:28:10:
         b0:5c:a3:83:28:f2:d2:02:d3:40:8e:aa:7e:a4:0c:e8:29:76:
         73:ad:45:5f:44:ed:d1:34:6b:22:fd:ea:e1:0a:f0:15:d6:5e:
         83:b9:80:bf:3a:43:75:3f:fa:a5:be:4a:81:f2:ff:63:c7:8c:
         02:b7:1b:a8:f0:b7:e8:6d:7b:36:44:87:37:0c:67:e1:ef:ca:
         ba:8b:10:e4:0e:ab:71:b9:35:10:28:27:ad:40:01:65:71:e9:
         21:d5:5b:21:7e:82:25:25:fc:28:e7:7d:e0:ae:ed:b9:a1:b0:
         32:1d:86:d5:0f:90:10:05:bd:d1:b8:45:f6:fb:f0:ad:1e:d4:
         82:92:19:e7:96:cb:81:06:3d:8c:bd:85:bf:56:41:d6:04:18:
         1d:df:eb:ab:c2:6b:23:f8:57:8b:f2:fe:31:0a:3a:92:24:fb:
         ba:24:cc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:33:40 2026 by rpki-client