Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/7dcaa39c-7090-3cb6-9901-2a900809a80e.roa
File:                     7dcaa39c-7090-3cb6-9901-2a900809a80e.roa (raw, json)
Hash identifier:          Ko94GEvhCQiR2yukmu5L3Bh/dzuO1t+Pv1teBv3nr9M=
Subject key identifier:   64:B8:23:2D:EB:9C:4C:5B:1F:05:43:8D:BC:54:1D:4D:8C:41:E6:FA
Certificate issuer:       /CN=0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0
Certificate serial:       010D0C9F4328584E51E9FFDC846AC2A1CB82BC80
Authority key identifier: 11:79:D4:A6:A6:31:48:56:5D:61:E7:8D:06:1F:79:A2:6D:0A:FF:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/7dcaa39c-7090-3cb6-9901-2a900809a80e.roa
Signing time:             Sun 28 Jun 2026 09:00:11 +0000
ROA not before:           Sun 28 Jun 2026 09:00:11 +0000
ROA not after:            Sat 26 Sep 2026 09:00:11 +0000
asID:                     979
IP address blocks:        23.141.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:51:e9:ff:dc:84:6a:c2:a1:cb:82:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0
        Validity
            Not Before: Jun 28 09:00:11 2026 GMT
            Not After : Sep 26 09:00:11 2026 GMT
        Subject: CN=801720d2-e920-4a13-b50b-97bc697c799a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e4:c6:79:68:ce:fe:0f:4e:7f:05:56:a7:ac:
                    08:0f:c4:d4:0a:d3:1f:09:52:4f:37:d6:6d:f0:45:
                    c2:1a:bb:5a:6a:fc:13:af:87:09:e9:55:0c:0a:a8:
                    9f:0b:ae:21:44:b8:83:e6:41:f7:66:0b:2c:2d:60:
                    95:91:b6:eb:16:e4:d7:d5:f7:e1:9e:72:ef:cb:80:
                    8c:87:cb:5a:b8:0a:b4:b4:38:63:a8:d5:9c:08:92:
                    ac:b0:45:93:37:8b:92:3c:ae:34:e0:f0:9a:d1:14:
                    fd:e7:c7:35:df:e9:9c:84:e7:94:aa:7e:c4:48:bd:
                    1e:07:18:82:5e:0c:96:08:d7:46:5a:25:18:2e:13:
                    af:f9:21:07:8f:15:7d:34:73:8b:db:0d:09:92:f7:
                    23:f8:99:09:d3:e2:c6:94:27:bc:29:e1:9c:0f:80:
                    b8:6e:97:92:fb:37:95:5f:b6:cb:28:9c:25:4f:61:
                    4e:90:cd:a0:a0:89:ed:b9:cf:a3:61:9d:7d:74:2a:
                    f0:ea:71:ab:3d:43:2d:8c:18:33:4e:49:70:32:a3:
                    81:57:9e:76:0b:27:43:c7:48:15:5d:3a:63:15:4c:
                    ac:21:be:e9:c1:35:b6:04:c1:f7:e6:d5:90:19:e0:
                    54:ba:51:fa:ea:95:ee:2a:6d:f9:e7:91:c2:57:22:
                    92:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B8:23:2D:EB:9C:4C:5B:1F:05:43:8D:BC:54:1D:4D:8C:41:E6:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/7dcaa39c-7090-3cb6-9901-2a900809a80e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.crl

            X509v3 Authority Key Identifier:
                keyid:11:79:D4:A6:A6:31:48:56:5D:61:E7:8D:06:1F:79:A2:6D:0A:FF:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:14:31:28:72:d1:63:b4:27:f7:94:79:0a:61:57:5b:26:7a:
         3e:7d:4e:46:d7:48:dc:08:d4:c5:e5:2a:b6:ac:37:af:7c:6f:
         38:21:a8:d7:ae:56:c6:fb:69:58:a3:b2:ad:59:cb:65:43:e4:
         73:9d:47:e9:41:f2:6b:e7:63:c4:d8:94:79:5b:4b:b6:ef:74:
         8b:1e:7c:b7:b2:54:7a:ba:9c:65:66:81:b7:d0:0f:41:7d:97:
         a1:41:d2:2e:6b:3f:03:58:f4:09:f4:c0:7b:95:a3:93:ab:e3:
         83:92:97:a1:9d:40:dd:9a:a9:c6:d8:2d:6b:c5:cb:60:35:99:
         04:94:4b:d1:be:5d:94:75:92:58:ae:68:6a:18:f4:c2:09:57:
         d9:d5:3e:f9:37:07:f5:ba:83:9d:99:8f:68:83:32:25:a4:f9:
         d3:35:d7:49:36:01:c6:7b:99:43:29:a3:7a:93:f3:bb:53:f9:
         0e:c5:13:3a:46:bc:ea:7f:77:eb:5d:b3:81:a7:d9:bd:84:96:
         ff:7d:69:70:a1:58:26:91:fc:c0:59:f9:66:f7:e4:b2:10:12:
         3b:9a:ae:79:bf:55:cd:36:9b:ac:ed:4f:ba:81:4e:b3:81:43:
         be:3b:31:4c:c0:44:d8:48:4c:27:c7:83:74:a4:eb:17:dd:fc:
         5b:68:03:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:44:48 2026 by rpki-client