Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/76dd9975-746a-344b-b81a-674850bce36f.roa
File:                     76dd9975-746a-344b-b81a-674850bce36f.roa (raw, json)
Hash identifier:          xGZFgEzhyCESdk1zQUT6fTMsle6stbW6QS1K8oKKIME=
Subject key identifier:   40:34:25:1C:55:06:B4:A2:69:F3:41:0F:FF:3B:80:D9:A9:B3:39:0A
Certificate issuer:       /CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
Certificate serial:       010D0C9F4328584D9FB56CFCF689C4C8EC72A800
Authority key identifier: 96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/76dd9975-746a-344b-b81a-674850bce36f.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     398900
IP address blocks:        23.134.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:6c:fc:f6:89:c4:c8:ec:72:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d9fc7a-f366-485f-a2c8-58c4b470361a
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=ca3f7cf1-1293-4ed3-b753-c6821477852d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ac:2c:2e:64:2a:df:ed:2c:57:d6:76:8a:52:
                    5b:b2:a2:d1:6e:af:29:87:52:da:6d:7c:4c:b3:f5:
                    28:78:19:dc:bf:ee:c6:b7:db:d8:e9:8e:2e:95:6b:
                    58:46:91:ad:65:bf:e4:bc:1b:95:9e:a4:20:a5:b5:
                    23:ab:bb:31:08:05:03:e8:bd:7f:69:fc:03:60:92:
                    bf:70:56:0b:c3:11:7b:23:6d:d0:b5:92:f6:ce:3a:
                    67:bd:c3:28:dd:e1:28:69:33:dc:91:5c:1a:62:8e:
                    c4:cb:73:72:4c:86:6b:83:d0:3b:45:ff:4c:44:ac:
                    ef:92:bc:dd:5a:19:45:f9:b4:35:1a:6c:67:9c:79:
                    e8:f4:87:0c:43:d2:31:3a:04:c0:38:ee:33:85:06:
                    fc:40:ed:2d:46:69:0a:51:42:20:bf:0b:ec:27:dd:
                    f1:e9:57:fc:85:b2:5a:80:9c:dd:22:93:8c:72:bd:
                    90:6d:d6:80:21:dd:05:49:d8:38:4a:d6:53:42:74:
                    a1:9a:0e:e0:da:e2:77:88:85:0e:b7:a2:f3:5d:72:
                    08:67:b9:dd:fc:c9:07:c6:48:e4:ac:3e:9a:dc:2f:
                    cc:ac:44:bc:a4:aa:81:bc:e3:65:61:b1:cf:a4:7f:
                    6e:5e:cf:85:9f:67:35:78:38:6e:73:2a:ee:5a:d3:
                    b3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:34:25:1C:55:06:B4:A2:69:F3:41:0F:FF:3B:80:D9:A9:B3:39:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/76dd9975-746a-344b-b81a-674850bce36f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a/45d9fc7a-f366-485f-a2c8-58c4b470361a.crl

            X509v3 Authority Key Identifier:
                keyid:96:12:B0:E7:AD:D9:71:F2:E5:1F:50:56:E7:7A:70:25:0D:98:B7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45d9fc7a-f366-485f-a2c8-58c4b470361a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:06:d2:ec:7c:ac:c7:70:f2:d2:fb:fc:bd:f8:f8:f0:27:ea:
         d0:9f:1d:41:c8:6e:3a:60:92:cb:b2:a5:1f:75:2c:ce:93:6e:
         f6:04:5e:a3:03:f5:e8:b5:57:c6:a6:c4:80:5e:0e:72:81:77:
         fc:98:f3:02:31:13:74:0b:a5:4e:e6:e9:78:f2:1d:44:4b:cb:
         dd:f8:73:9f:51:4d:b3:4a:98:ab:69:ad:c5:a4:6c:78:79:ae:
         b5:c0:74:a7:ab:e4:69:73:29:ba:12:8b:9b:a4:25:5b:ba:43:
         f2:03:cb:74:2f:e1:b9:d4:ab:73:af:47:e6:3a:d3:a3:a3:41:
         f9:0e:be:4a:b6:f5:59:59:a8:e8:1f:79:f9:6b:36:4b:f5:c5:
         e6:00:90:ef:83:a0:35:d2:ea:36:08:e3:b6:b5:ab:76:42:91:
         7e:85:54:96:a6:30:6f:40:b6:3e:9f:1d:83:97:a0:b1:a6:d8:
         28:04:a2:69:04:ae:5d:72:b2:f8:ce:94:cf:e1:07:5d:c7:3f:
         76:72:d3:aa:76:7f:2a:4f:8c:9c:15:ba:5b:5f:d2:41:d5:b1:
         e3:53:e7:54:86:ff:fe:a6:6f:54:9e:c6:9d:69:b3:ea:8f:b6:
         be:2b:27:2e:81:a7:46:a4:17:dd:9f:54:53:0a:e5:be:d7:9a:
         f1:5e:d6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:20:40 2026 by rpki-client