Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/d6ca0cd0-1cc5-38a0-b4e9-b396012ff871.roa
File:                     d6ca0cd0-1cc5-38a0-b4e9-b396012ff871.roa (raw, json)
Hash identifier:          +/+J2neKN86IgRdHIzVTBjwd29nnUrC4OsAf4gHNE1k=
Subject key identifier:   62:70:D8:EF:26:6D:19:7C:ED:74:DB:7B:A0:31:E2:54:F9:E3:49:8C
Certificate issuer:       /CN=51ff4ddd-c38d-4309-8f4d-95441dc765f5
Certificate serial:       010D0C9F4328584DCC605EDBA9E0AF21C35BFA00
Authority key identifier: 81:CE:EA:0C:5D:1D:C7:A4:62:10:D6:39:93:37:B0:C4:29:98:2C:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/d6ca0cd0-1cc5-38a0-b4e9-b396012ff871.roa
Signing time:             Mon 11 May 2026 13:00:31 +0000
ROA not before:           Mon 11 May 2026 13:00:31 +0000
ROA not after:            Sun 09 Aug 2026 13:00:31 +0000
asID:                     399861
IP address blocks:        23.131.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/51ff4ddd-c38d-4309-8f4d-95441dc765f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/51ff4ddd-c38d-4309-8f4d-95441dc765f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cc:60:5e:db:a9:e0:af:21:c3:5b:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ff4ddd-c38d-4309-8f4d-95441dc765f5
        Validity
            Not Before: May 11 13:00:31 2026 GMT
            Not After : Aug  9 13:00:31 2026 GMT
        Subject: CN=de515855-2b39-44ff-ad29-7098aa46ea9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:54:06:9f:27:a7:99:ce:79:f7:03:28:49:
                    e8:85:82:b4:48:ac:b3:2d:50:70:85:70:ee:18:c0:
                    d2:c5:c3:6c:38:b9:43:f0:df:f2:ab:e4:56:e9:47:
                    a0:a0:ec:a3:9d:25:7b:15:f6:04:80:84:67:29:5d:
                    11:d2:d7:16:e9:2f:d1:a7:c3:70:ae:69:fb:03:4b:
                    e5:63:9f:21:27:f9:0d:3a:12:e4:8a:85:49:ba:f6:
                    83:e2:c6:2a:61:00:4f:db:1d:3b:c0:ab:b6:14:b9:
                    52:f1:19:5f:cd:cb:6b:04:b8:ae:7e:e9:6b:c4:7b:
                    30:4f:f2:79:05:7f:57:d3:9e:66:5b:b9:97:16:ef:
                    23:b6:21:11:da:ad:e0:19:cc:a8:92:fc:b4:b6:d1:
                    cb:fe:63:ab:a1:8f:da:8a:3e:90:bb:2e:b2:07:ef:
                    78:81:e7:df:37:d1:eb:a2:6f:55:c5:8f:7d:08:b8:
                    bf:83:60:a3:d9:8a:44:22:7d:86:7e:c7:21:cc:5a:
                    ce:81:35:80:ee:5e:d0:fc:95:21:a1:22:a1:27:f4:
                    d3:ba:b8:eb:5e:20:39:4b:23:02:46:47:20:43:4c:
                    9a:ac:5b:05:01:a4:8e:e2:fb:17:85:d9:96:2d:3a:
                    18:ef:3c:72:37:bd:14:92:c1:10:35:3d:11:e0:ce:
                    a0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:70:D8:EF:26:6D:19:7C:ED:74:DB:7B:A0:31:E2:54:F9:E3:49:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/d6ca0cd0-1cc5-38a0-b4e9-b396012ff871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5/51ff4ddd-c38d-4309-8f4d-95441dc765f5.crl

            X509v3 Authority Key Identifier:
                keyid:81:CE:EA:0C:5D:1D:C7:A4:62:10:D6:39:93:37:B0:C4:29:98:2C:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/51ff4ddd-c38d-4309-8f4d-95441dc765f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4d:3c:da:62:57:af:12:24:41:21:0a:64:3e:30:c0:2d:d7:
         c2:40:19:fd:09:ba:dc:2e:dd:f3:57:3d:81:7f:bc:cd:fb:19:
         f5:69:84:88:f6:e0:fb:46:09:58:a8:20:7b:8c:e8:b1:e5:b7:
         85:dc:c4:f6:b8:3c:28:63:ad:73:0e:41:f5:91:e5:ec:54:3e:
         05:1f:d2:a6:f9:e4:9c:20:25:75:de:38:4e:29:b3:23:1f:be:
         bb:5b:d4:98:06:fe:38:13:15:8c:19:36:fa:a9:77:91:ce:fa:
         2c:ad:69:39:35:98:c4:15:cc:fd:6e:bc:9c:21:1b:0d:f6:dc:
         48:05:04:16:95:44:81:21:de:a3:4d:44:03:7d:11:a7:65:e1:
         ef:b9:25:b4:3c:a3:d1:c5:19:85:21:f5:c0:19:cb:24:bd:88:
         f0:5b:87:17:2d:12:89:06:4d:23:bd:0a:48:e1:60:54:75:d5:
         e6:b5:28:89:d7:e4:7a:63:d8:01:8a:69:fc:40:02:c0:c8:e6:
         d9:03:b2:39:93:b3:b0:fd:c2:b5:1c:77:df:3f:f7:27:0c:d4:
         30:95:90:22:da:61:98:bf:51:4d:c7:c1:33:61:5d:1e:c7:3f:
         c4:27:e7:0b:47:db:ae:19:1f:88:be:09:d9:81:a2:f3:56:89:
         3d:c5:03:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:22 2026 by rpki-client