Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/010ac7e1-bd40-4f6d-a001-dc6b1f7476cd/6c145418-85c0-39d4-a833-c1c968d44eed.roa
File:                     6c145418-85c0-39d4-a833-c1c968d44eed.roa (raw, json)
Hash identifier:          DYruGAb58HSw6AktksWhi8Wd3dllgrK5eVeG7XEvDVs=
Subject key identifier:   73:9A:6E:E6:9C:9E:71:0E:50:15:C5:70:6D:A7:B7:20:2F:E8:DF:AD
Certificate issuer:       /CN=010ac7e1-bd40-4f6d-a001-dc6b1f7476cd
Certificate serial:       010D0C9F4328584DB4A5B515AD33A9204724E184
Authority key identifier: FC:81:66:BA:86:95:71:9C:94:77:02:6F:73:A8:A4:AA:2A:31:FA:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/010ac7e1-bd40-4f6d-a001-dc6b1f7476cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/010ac7e1-bd40-4f6d-a001-dc6b1f7476cd/6c145418-85c0-39d4-a833-c1c968d44eed.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     398357
IP address blocks:        23.171.176.0/24 maxlen: 24
                          23.171.177.0/24 maxlen: 24
                          2602:fcd4::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/010ac7e1-bd40-4f6d-a001-dc6b1f7476cd/010ac7e1-bd40-4f6d-a001-dc6b1f7476cd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/010ac7e1-bd40-4f6d-a001-dc6b1f7476cd/010ac7e1-bd40-4f6d-a001-dc6b1f7476cd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/010ac7e1-bd40-4f6d-a001-dc6b1f7476cd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:b5:15:ad:33:a9:20:47:24:e1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=010ac7e1-bd40-4f6d-a001-dc6b1f7476cd
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=2256b201-e757-4932-8790-10c02bc09363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fd:a1:45:8b:72:8e:48:fe:bc:6a:d4:16:cd:
                    43:fb:fe:d8:51:d1:4a:ca:c1:08:9d:4b:29:8b:71:
                    19:2c:8c:fe:12:35:e2:34:7b:30:8a:3c:7d:fa:99:
                    70:a8:86:c7:e6:6a:90:ae:04:62:54:bd:67:1b:ce:
                    1a:c5:35:59:11:e9:31:ad:8b:2a:ed:69:57:e4:2b:
                    77:d9:bb:09:38:a8:44:da:06:70:c6:fb:f9:e9:42:
                    0f:6b:9a:43:ca:d1:73:df:72:05:c0:e6:8e:8d:44:
                    fb:97:37:e1:f1:11:ab:57:64:37:31:2c:45:dd:74:
                    b3:64:f6:31:ad:d3:ef:48:3a:ae:dc:cd:90:ed:c4:
                    5f:ad:17:95:68:f3:ab:04:a9:cf:a3:81:62:ff:b1:
                    d3:5b:98:bd:5b:78:7b:4c:58:71:71:7b:de:3b:9c:
                    71:cc:83:74:7f:b9:9b:74:e6:a3:1d:fa:df:3f:31:
                    0a:58:01:96:7c:e7:d1:05:07:75:a1:f7:35:c5:c3:
                    1b:1c:53:b5:b2:32:41:0d:2b:c3:05:2b:c6:fc:11:
                    c3:c3:9c:91:c3:22:5e:4c:9e:31:21:79:2a:c1:5d:
                    78:ad:8b:07:0e:be:ec:3b:6a:9b:0d:45:d4:60:db:
                    5a:fd:4c:fe:9d:76:a9:38:e7:a7:97:ca:f3:5b:4b:
                    d2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9A:6E:E6:9C:9E:71:0E:50:15:C5:70:6D:A7:B7:20:2F:E8:DF:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/010ac7e1-bd40-4f6d-a001-dc6b1f7476cd/6c145418-85c0-39d4-a833-c1c968d44eed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/010ac7e1-bd40-4f6d-a001-dc6b1f7476cd/010ac7e1-bd40-4f6d-a001-dc6b1f7476cd.crl

            X509v3 Authority Key Identifier:
                keyid:FC:81:66:BA:86:95:71:9C:94:77:02:6F:73:A8:A4:AA:2A:31:FA:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/010ac7e1-bd40-4f6d-a001-dc6b1f7476cd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.171.176.0/23
                IPv6:
                  2602:fcd4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:3b:5c:22:1d:9a:e9:a5:b4:7a:49:31:6e:c9:6a:31:ad:1d:
         eb:14:be:15:d8:82:e0:5c:3d:bb:d8:2b:49:16:fa:0c:79:ad:
         a7:c9:ac:d0:34:3f:1b:67:ac:55:88:af:71:b7:07:bb:55:c0:
         a2:24:0c:31:ae:e0:95:b9:a9:74:eb:39:9b:9a:27:37:91:77:
         13:8a:70:5b:4d:37:a0:fc:b3:23:ee:a2:0b:03:5a:ed:84:bd:
         f7:49:bc:1a:d6:0f:91:24:1f:f4:1e:02:15:1d:54:63:bd:04:
         66:d5:2f:04:32:af:30:32:00:64:94:13:57:17:21:ee:44:fc:
         c3:f5:31:c8:c4:ea:e0:8f:08:25:e0:b0:d3:9a:75:1c:f4:0d:
         a9:2d:40:ba:66:30:cb:ef:ea:d9:c7:2c:99:32:6d:1e:79:1d:
         a4:d7:b6:6b:49:e3:55:e5:30:21:a5:f6:f9:33:10:dd:50:92:
         ef:e8:8a:ed:b5:46:f7:aa:b7:90:8e:66:c4:aa:25:d9:f0:55:
         02:5f:d8:59:89:9f:73:71:d2:63:78:ab:ee:25:2d:23:16:82:
         d6:01:14:51:bf:51:74:b8:ea:23:3a:d7:d0:d6:42:16:29:e7:
         c5:10:5b:f3:b9:90:3a:5c:37:b5:c8:e0:fd:d3:7d:62:0a:fa:
         c6:dd:76:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:15:44 2026 by rpki-client