Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/a06833e4-c499-3a4c-80b3-c2b4de9a3dda.roa
File:                     a06833e4-c499-3a4c-80b3-c2b4de9a3dda.roa (raw, json)
Hash identifier:          5syO2h189+xwXfjGR7yjxaxXy5QbiifxzK8Gf30vhc4=
Subject key identifier:   75:AF:B9:39:C0:EB:A7:26:CB:74:D3:07:C6:79:EB:34:D5:34:4F:70
Certificate issuer:       /CN=956c8740-f351-4625-a3ff-54fb1e6a5b97
Certificate serial:       010D0C9F4328584DBA3AD6F785999F23FCB46EC0
Authority key identifier: BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/a06833e4-c499-3a4c-80b3-c2b4de9a3dda.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     11715
IP address blocks:        23.136.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3a:d6:f7:85:99:9f:23:fc:b4:6e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=956c8740-f351-4625-a3ff-54fb1e6a5b97
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=76035822-00dc-404e-91e5-de8874a241d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:20:05:dc:25:09:d7:55:b8:a1:bb:4a:24:
                    c0:06:e4:5b:36:0e:25:b8:2e:50:83:eb:79:93:f5:
                    d0:82:5d:e6:14:d4:a3:fa:58:8e:50:25:53:71:11:
                    8a:ca:d0:77:49:7a:5e:20:2b:89:a6:b8:5b:08:83:
                    59:e4:bc:28:86:5b:43:76:b0:d5:1f:a0:da:a4:96:
                    87:ec:11:70:18:1c:14:9f:6b:7e:53:38:48:a1:6a:
                    e9:1a:43:dc:e9:e9:a6:68:d6:66:0f:f3:3c:c7:02:
                    73:74:b8:6c:91:83:41:62:d8:c1:bf:6b:c3:c3:41:
                    84:59:70:bd:3f:07:e8:47:2d:05:ed:e0:e8:c9:c7:
                    5a:e7:35:40:38:2e:5f:fb:3b:32:a1:8d:9a:3a:61:
                    7c:41:c6:12:a3:4a:1e:b9:18:31:c6:36:92:1b:1d:
                    3f:45:64:7b:74:f7:38:37:75:02:77:12:7a:c9:b5:
                    4b:e8:b7:cb:cc:12:ee:bd:7b:ae:f8:55:5e:ab:44:
                    1e:5e:ae:1c:36:a7:e1:7e:5d:87:0e:8b:de:67:21:
                    a5:1b:91:b3:38:c2:e0:cc:9a:4d:48:ce:aa:da:39:
                    a3:14:49:cd:b0:b1:ef:c2:98:d5:b6:78:91:9c:62:
                    01:08:9a:cc:68:8c:1c:42:3b:f5:0d:0b:1c:c5:9c:
                    40:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:AF:B9:39:C0:EB:A7:26:CB:74:D3:07:C6:79:EB:34:D5:34:4F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/a06833e4-c499-3a4c-80b3-c2b4de9a3dda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:cb:49:14:a5:86:d9:4b:74:8c:cf:75:97:8e:1a:ef:fc:cc:
         19:bd:63:70:c7:c9:8b:e6:c1:66:0c:3f:61:89:95:1a:20:a7:
         02:fe:32:9c:b3:65:15:9e:78:1b:84:a5:06:1f:12:ea:44:70:
         9a:4f:44:ff:a5:d8:e6:95:61:e0:2d:4d:ef:71:4b:f1:be:fa:
         66:eb:d3:3e:fc:4b:ea:a8:ca:ef:69:85:71:a2:5a:c8:cb:60:
         de:61:2d:87:a8:fc:72:a7:44:55:f9:fe:34:29:24:a8:0f:d6:
         ef:4b:fc:38:fd:58:b8:9f:57:61:e1:14:cd:83:34:93:3b:7c:
         4e:e4:26:9b:81:01:1c:d2:c3:7d:1c:01:36:a2:31:be:94:34:
         ff:70:a3:fe:c8:51:68:2b:e0:86:b9:12:35:34:f1:69:89:55:
         d6:38:3a:27:c7:a7:b4:b6:f0:07:db:13:bb:62:b4:6e:5e:d3:
         7a:76:6d:34:52:b0:44:4c:d2:72:69:79:0a:5d:b5:ff:71:5a:
         ce:4d:fd:87:c4:c7:47:6b:84:1d:a4:c8:db:64:6c:1c:90:d4:
         44:08:87:c9:d1:7e:b7:ba:8f:50:04:67:57:df:51:6b:3d:ab:
         e2:70:a3:4e:29:7b:e9:0d:29:59:c1:75:28:ce:8c:07:40:a6:
         49:17:54:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:53:41 2026 by rpki-client