Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/697051ee-d03e-3ba9-936f-b028b5af5118.roa
File:                     697051ee-d03e-3ba9-936f-b028b5af5118.roa (raw, json)
Hash identifier:          OopQpCVjwRX+u7L7jO0ITJo3v4Oz1b6woOI384wmxTQ=
Subject key identifier:   ED:71:3A:7D:DD:F2:FD:93:D4:11:9E:CA:79:20:D9:F2:BC:07:A5:77
Certificate issuer:       /CN=7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770
Certificate serial:       010D0C9F4328584DC40048EE9CDC5FF1E0CD7400
Authority key identifier: 42:3A:B5:4A:C8:C1:10:E5:4F:0C:54:B8:AC:07:47:2E:55:97:6A:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/697051ee-d03e-3ba9-936f-b028b5af5118.roa
Signing time:             Fri 08 May 2026 13:00:30 +0000
ROA not before:           Fri 08 May 2026 13:00:30 +0000
ROA not after:            Thu 06 Aug 2026 13:00:30 +0000
asID:                     399861
IP address blocks:        23.128.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c4:00:48:ee:9c:dc:5f:f1:e0:cd:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770
        Validity
            Not Before: May  8 13:00:30 2026 GMT
            Not After : Aug  6 13:00:30 2026 GMT
        Subject: CN=51f6ccb8-405d-457d-a68c-391e848e209b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2b:d5:b4:93:ee:ed:75:a6:f5:7d:c4:48:8a:
                    38:20:10:56:2c:51:9f:53:f8:74:f6:6d:ff:e8:a5:
                    c6:7f:a2:28:f4:19:8c:31:0e:d4:d5:a5:fd:7f:58:
                    5e:f2:e8:a3:8c:4b:ae:dc:b8:75:22:2b:71:52:34:
                    7e:6f:5a:54:4f:28:91:af:67:e8:fa:42:64:dd:da:
                    c6:07:10:48:0f:4f:82:53:f3:0e:ef:dc:f0:2e:09:
                    2a:5e:a0:b7:b4:b0:32:ba:6c:22:7c:00:42:5c:87:
                    94:d9:ba:74:c3:88:d2:d9:e1:1e:88:e1:71:58:0f:
                    cd:a0:00:29:fb:c4:6a:31:35:d6:2b:14:4f:e6:56:
                    84:44:2f:a6:c7:fc:93:9f:ac:a2:6f:b8:b2:a5:7f:
                    5c:4f:0b:a5:47:a9:70:5b:a6:ac:13:04:99:63:fc:
                    40:13:7e:eb:b8:5b:8c:68:08:9d:36:18:78:f5:1a:
                    6a:e3:5e:b9:e7:7a:6b:53:1c:6f:65:70:d9:93:3d:
                    a3:2a:ed:19:0d:cf:cb:39:3e:2b:d2:22:ba:14:ce:
                    5f:46:01:cb:9d:83:b5:e7:e0:13:c7:6d:ff:a3:76:
                    cd:c3:3f:6f:90:67:e4:3e:32:89:93:0b:63:6e:70:
                    97:1a:27:d1:30:54:eb:28:22:a1:5d:cb:ea:a4:f2:
                    a7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:71:3A:7D:DD:F2:FD:93:D4:11:9E:CA:79:20:D9:F2:BC:07:A5:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/697051ee-d03e-3ba9-936f-b028b5af5118.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.crl

            X509v3 Authority Key Identifier:
                keyid:42:3A:B5:4A:C8:C1:10:E5:4F:0C:54:B8:AC:07:47:2E:55:97:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7ecd6c70-2a4e-40a6-bd94-4ae1cae4d770.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:52:eb:a8:2d:85:49:4c:50:b4:cb:a3:e2:94:6b:e2:e6:57:
         9a:93:d3:3b:6b:49:ee:0e:d8:55:d6:02:46:fe:08:57:a3:70:
         da:19:b2:c3:0f:a1:ad:97:f4:71:92:aa:1a:1b:31:b1:9c:bf:
         04:33:c6:19:44:58:f9:8b:2b:de:2d:f7:22:1f:03:57:28:8e:
         88:d2:c0:71:9e:be:d5:17:a4:8b:7d:ea:44:63:23:eb:70:84:
         cd:9a:08:44:8b:60:1c:44:d2:8c:4a:3c:65:99:6c:94:01:bd:
         52:a0:4a:ba:8e:75:52:8d:9d:65:5b:ae:d1:98:62:81:da:fe:
         51:ee:71:13:11:c4:8f:ee:ed:66:01:09:5b:2a:29:ae:ba:f7:
         72:37:af:d5:30:55:11:96:e6:5c:d3:53:eb:db:b6:23:38:e5:
         5a:3e:2e:d0:f3:08:af:1e:8e:31:b8:a7:2c:47:5e:69:d9:ea:
         03:21:aa:56:e3:7f:2f:c3:f9:2d:a5:29:21:0a:2e:41:e0:1e:
         ec:3b:c2:18:7d:88:3e:ad:e3:16:83:c5:30:2f:92:4f:c2:23:
         fe:89:d6:34:36:d3:ab:23:a4:d6:a6:9c:f5:f5:ac:ef:f0:67:
         35:2c:18:79:2f:2a:d7:fc:c5:27:ca:21:46:87:9e:1c:ae:8d:
         eb:b3:27:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:14 2026 by rpki-client