Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/5d63b206-9807-3c07-b865-78c350073c3e.roa
File:                     5d63b206-9807-3c07-b865-78c350073c3e.roa (raw, json)
Hash identifier:          +31oN77rebTDPyBWJ1Y3rzRZrA1SiwTRORv8q4HsVSw=
Subject key identifier:   87:BC:30:9D:19:A0:EC:70:81:4A:F2:13:60:66:B9:04:07:B0:E4:40
Certificate issuer:       /CN=4d309cdf-7ecd-401e-9f75-b4b181b44b63
Certificate serial:       010D0C9F4328584D300A474F12B23FA5AC6FE06C
Authority key identifier: 06:3E:49:D0:A4:13:BF:01:82:5E:BB:9E:0E:F6:28:38:57:01:71:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/5d63b206-9807-3c07-b865-78c350073c3e.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     402038
IP address blocks:        23.146.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/4d309cdf-7ecd-401e-9f75-b4b181b44b63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/4d309cdf-7ecd-401e-9f75-b4b181b44b63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:47:4f:12:b2:3f:a5:ac:6f:e0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d309cdf-7ecd-401e-9f75-b4b181b44b63
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=b5997468-ae2d-4a35-81d1-73ac2924068c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c9:49:f8:63:0d:6d:06:9f:3c:91:5a:68:91:
                    9f:f8:c7:37:ed:fc:89:50:87:15:b1:98:2f:20:e1:
                    2e:e3:f2:b7:6f:b0:35:60:b3:58:33:bf:b5:cd:12:
                    d3:ed:ce:b6:01:e1:6a:d8:f6:0e:71:ac:66:b2:4a:
                    d7:71:6b:ef:c7:23:02:23:36:15:23:9a:c9:16:d3:
                    9e:2b:96:a5:ca:8a:7c:68:fe:4c:03:20:60:1e:70:
                    18:e0:dd:22:f3:e2:0d:94:4e:33:36:6c:bc:57:e5:
                    e9:8d:14:98:b6:12:23:ef:81:22:53:95:18:40:e0:
                    d4:bd:f8:ca:6c:5c:ba:e6:1d:12:e2:6c:94:fe:ee:
                    ba:45:9c:0a:8d:ac:6a:5d:05:a8:8b:16:86:2d:2d:
                    91:aa:9a:f1:bc:5a:c6:70:03:22:5e:6a:73:0e:1c:
                    03:ab:b6:62:2a:5f:ef:8a:d5:d3:75:c8:ac:0d:5c:
                    b9:10:f5:cd:2c:c3:0d:6d:83:10:a4:ba:30:6c:78:
                    f5:11:32:5a:3d:a2:c2:48:76:03:b0:af:26:37:11:
                    c2:17:e5:f7:5b:ac:e5:da:e8:7d:6d:6c:23:92:40:
                    49:9f:6d:ff:b4:17:99:a1:fd:28:5f:bb:03:ba:31:
                    91:3d:ea:b0:d3:d1:67:e6:7a:95:39:66:bd:5b:42:
                    a7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BC:30:9D:19:A0:EC:70:81:4A:F2:13:60:66:B9:04:07:B0:E4:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/5d63b206-9807-3c07-b865-78c350073c3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/4d309cdf-7ecd-401e-9f75-b4b181b44b63.crl

            X509v3 Authority Key Identifier:
                keyid:06:3E:49:D0:A4:13:BF:01:82:5E:BB:9E:0E:F6:28:38:57:01:71:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:20:1f:05:dd:f0:13:df:06:40:dc:54:06:3a:cd:69:60:91:
         08:a2:26:95:2f:d5:95:de:a0:a0:ab:29:fd:e5:07:f8:2e:c3:
         17:3b:0a:6b:a2:a4:3e:83:32:fc:2c:28:bf:5c:b2:0b:71:5e:
         91:b1:e6:55:15:d9:62:8d:52:56:2f:fc:5f:0f:fb:17:da:78:
         bd:3a:f1:f3:fd:c2:55:97:94:b8:0f:e5:d6:eb:e7:92:2a:d7:
         35:01:0e:ae:e0:31:dc:9a:4e:cf:8d:80:b6:12:85:4a:e2:62:
         dd:25:9e:43:c7:81:64:5e:d8:44:18:40:3a:f5:f5:66:3c:b7:
         85:17:65:48:a8:ca:81:70:14:d7:ef:39:d5:f8:82:3e:fe:83:
         b8:7c:f9:69:ce:15:ab:b3:4c:08:86:fc:0c:3e:39:ab:81:32:
         73:50:5c:02:ec:54:4a:0b:d5:c8:1c:ee:e5:38:38:b7:b6:d3:
         bb:57:71:0d:59:6f:23:7e:2c:6b:ad:6b:94:b7:47:29:b3:dc:
         e0:75:46:8d:d0:87:9f:5d:fd:34:55:01:98:a7:e5:54:0c:63:
         92:74:d7:2f:f0:28:93:7d:63:62:69:2f:73:0f:46:72:3a:f8:
         dd:85:d6:64:d8:bd:4e:7f:ff:41:3b:85:49:60:5e:26:77:e6:
         ab:73:b4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:24:42 2026 by rpki-client