Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/50306751-11fe-35d4-a81d-4a58fc0ec16c.roa
File:                     50306751-11fe-35d4-a81d-4a58fc0ec16c.roa (raw, json)
Hash identifier:          68XjigPNLk8OL3gw5ZxqiFpwnscOBCuECITyU6EPrLQ=
Subject key identifier:   96:79:6E:20:BA:0A:83:7F:01:D9:66:76:6D:05:EA:5C:37:1A:51:A6
Certificate issuer:       /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
Certificate serial:       010D0C9F4328584D300A5A60BD6F4ED6662CE400
Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/50306751-11fe-35d4-a81d-4a58fc0ec16c.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     23428
IP address blocks:        23.147.72.0/24 maxlen: 24
                          2602:fb68:140::/42 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:5a:60:bd:6f:4e:d6:66:2c:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=0d43351c-d78f-4d76-92fd-792b39aaaa25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4a:ce:9d:f6:dc:4b:11:dd:92:18:53:7b:2a:
                    b2:4e:aa:a9:a8:e5:91:15:2c:fa:96:74:c5:52:53:
                    4f:47:b4:77:c4:44:a1:44:d2:65:4f:3b:88:bc:6c:
                    5b:9e:4d:75:98:40:2b:0e:42:26:98:7e:49:25:8a:
                    f4:4d:a5:8e:60:47:3c:d7:68:d5:b2:cc:74:3b:90:
                    0b:ab:df:26:ec:c2:78:46:79:db:bf:67:5f:da:3d:
                    11:8f:7f:de:80:21:28:e0:bd:73:1e:6b:dd:26:9e:
                    44:33:28:af:19:ed:8f:1d:b5:be:87:31:5f:72:99:
                    41:1e:b8:1d:b9:09:84:9f:60:8f:72:56:40:93:88:
                    30:3e:50:22:55:16:5f:80:d8:8a:89:a3:a9:82:4f:
                    95:98:f9:7d:5d:fc:a4:e5:e0:08:bb:6e:5b:e5:c9:
                    cf:28:7c:b5:a1:f5:43:15:ad:42:79:7b:e6:c4:db:
                    ee:c2:8e:28:76:8b:45:a0:c9:02:05:46:f5:82:da:
                    ac:6c:3b:c5:a0:d4:41:79:b0:ac:6e:fc:61:b3:ed:
                    84:a6:77:9a:56:31:47:fa:0c:bc:28:79:03:56:43:
                    70:0d:64:a1:62:66:61:90:40:ec:97:10:9a:d9:2b:
                    e3:a0:cb:91:68:52:81:9c:4f:78:8a:26:a9:91:fc:
                    62:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:79:6E:20:BA:0A:83:7F:01:D9:66:76:6D:05:EA:5C:37:1A:51:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/50306751-11fe-35d4-a81d-4a58fc0ec16c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl

            X509v3 Authority Key Identifier:
                keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.72.0/24
                IPv6:
                  2602:fb68:140::/42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:95:59:c9:96:80:7b:ea:70:dd:11:18:46:8a:fa:ea:ea:f6:
         83:20:61:e8:08:fc:f3:1b:3d:fa:e9:ee:9b:05:52:28:32:d8:
         a4:43:a9:73:bb:b6:71:c8:18:f3:d1:68:60:8d:80:7d:4a:c3:
         b5:64:08:a5:a0:5a:a9:44:06:ad:11:6f:d8:ae:81:f9:46:95:
         3f:08:1a:94:c3:b4:dd:2d:b4:19:dd:3e:a3:f0:09:8e:10:7f:
         2a:85:9f:fe:45:ef:7f:a5:bb:92:41:ad:57:c7:45:98:d3:0a:
         98:e8:57:d2:9f:cd:2e:58:03:ea:ac:12:a0:92:7f:b4:99:71:
         f0:73:f7:85:39:c2:56:5c:6e:41:b9:c6:d0:2e:ec:15:67:f5:
         b2:07:99:8e:ee:de:d8:ce:a5:f8:e8:55:3f:ce:9b:e6:a6:71:
         3b:cc:0e:c0:1b:26:d4:00:66:9a:4c:93:14:74:fc:31:f5:78:
         5b:3e:f8:8b:c9:0a:9d:96:41:47:36:8a:5e:f0:2f:2a:7c:83:
         28:b4:ca:86:7d:57:bf:1f:e9:6e:73:60:64:7f:0d:46:d0:e3:
         e2:95:bd:99:49:c8:5b:fe:30:3d:b6:d3:63:b5:08:7a:1a:60:
         d3:de:fd:73:13:38:45:ea:42:af:95:62:c1:c3:0d:1d:d3:3c:
         e4:57:95:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:34:37 2026 by rpki-client