Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d2096b9-bddf-46e5-ad6d-227e3464c322/82efc8ce-a694-3b32-b05e-fcc9f3ca65d9.roa
File:                     82efc8ce-a694-3b32-b05e-fcc9f3ca65d9.roa (raw, json)
Hash identifier:          O5EkPxUbxKbAR2o7Fnca34fIj7n1AB4ONGYJ8p+2hJ0=
Subject key identifier:   9C:9D:6D:73:49:02:2B:C7:5A:16:B2:10:CF:19:80:0C:15:04:5B:B2
Certificate issuer:       /CN=8d2096b9-bddf-46e5-ad6d-227e3464c322
Certificate serial:       010D0C9F4328584D20AF79E27B8E02A1F6161000
Authority key identifier: 54:BB:E6:29:07:83:F0:52:D8:3D:8D:E2:27:AA:38:B8:2B:F6:DD:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d2096b9-bddf-46e5-ad6d-227e3464c322.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d2096b9-bddf-46e5-ad6d-227e3464c322/82efc8ce-a694-3b32-b05e-fcc9f3ca65d9.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     7346
IP address blocks:        23.133.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d2096b9-bddf-46e5-ad6d-227e3464c322/8d2096b9-bddf-46e5-ad6d-227e3464c322.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d2096b9-bddf-46e5-ad6d-227e3464c322/8d2096b9-bddf-46e5-ad6d-227e3464c322.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d2096b9-bddf-46e5-ad6d-227e3464c322.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:79:e2:7b:8e:02:a1:f6:16:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2096b9-bddf-46e5-ad6d-227e3464c322
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=8eccef32-2c8c-46c7-8cbe-5c1bfb4f1090
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f8:a9:76:60:4f:7c:02:d1:8a:33:2c:31:bc:
                    5f:c6:bf:c2:5e:3e:de:7b:51:11:f9:c3:8d:b6:1e:
                    69:41:c7:89:aa:56:28:38:4f:a2:3f:c1:e2:d6:42:
                    bc:df:ed:e3:75:79:a0:ae:9b:9b:50:c9:6c:bb:7c:
                    e8:91:71:8c:50:9e:2f:4e:68:ba:d3:f6:b3:6c:80:
                    21:f5:d2:d7:9a:a7:61:b2:1f:bd:f7:a3:65:06:1b:
                    17:d5:34:7c:3f:74:ed:a8:7a:0f:86:f0:d4:3f:22:
                    6d:e0:0f:98:0a:fa:34:be:94:d9:75:c6:b4:bd:31:
                    f0:c4:29:e2:25:9f:0e:be:17:04:a2:80:ca:3b:20:
                    0d:86:8b:73:b1:b4:42:24:62:ef:76:f6:d4:ed:e8:
                    45:df:7d:68:6a:5c:11:83:49:df:24:de:ca:ac:d7:
                    13:62:a3:72:e4:08:38:db:23:47:bd:4f:f3:b1:66:
                    6f:cd:fa:5d:ef:e2:97:89:aa:c6:ce:81:fb:58:01:
                    55:b9:e6:db:89:3b:cc:0d:e9:09:75:97:7b:5c:54:
                    2c:69:f5:15:36:bc:8d:b7:af:07:8c:16:f7:8c:24:
                    d6:56:09:0f:a1:d1:e4:72:87:dd:24:e4:d5:77:71:
                    54:7a:90:62:26:57:f4:f9:80:07:92:af:7f:79:c0:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:9D:6D:73:49:02:2B:C7:5A:16:B2:10:CF:19:80:0C:15:04:5B:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d2096b9-bddf-46e5-ad6d-227e3464c322/82efc8ce-a694-3b32-b05e-fcc9f3ca65d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d2096b9-bddf-46e5-ad6d-227e3464c322/8d2096b9-bddf-46e5-ad6d-227e3464c322.crl

            X509v3 Authority Key Identifier:
                keyid:54:BB:E6:29:07:83:F0:52:D8:3D:8D:E2:27:AA:38:B8:2B:F6:DD:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8d2096b9-bddf-46e5-ad6d-227e3464c322.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:f6:a8:2a:5c:bf:0c:3f:08:cd:9f:d1:61:8a:61:5b:42:63:
         5c:d9:8a:d4:b4:06:d6:f7:9f:84:be:2c:56:f0:5c:b7:09:48:
         17:4c:8b:4d:06:90:53:37:51:14:f6:a3:aa:2d:dd:53:d0:6d:
         5d:7c:82:f3:15:d2:44:76:43:db:f5:1b:b4:d1:e4:b2:c6:4b:
         fb:03:a4:ff:2e:43:0a:79:27:a0:81:84:fa:4b:7f:7f:d6:fc:
         51:0a:32:13:6c:98:47:44:cf:c2:8a:22:32:1a:d8:94:f3:e6:
         c0:29:9c:fa:4d:12:88:10:f3:af:a0:a2:61:9d:75:60:5b:00:
         a0:f5:5d:ae:59:61:62:ef:93:87:00:e8:b7:8d:2b:97:00:ac:
         cc:48:a1:b9:31:77:14:ac:54:97:3b:ea:d1:3f:22:23:f3:91:
         37:ca:52:d0:2b:fc:74:10:d4:4d:03:f9:b5:dd:c4:65:a7:89:
         32:ae:ff:8b:df:08:e9:49:c4:65:f8:16:51:b1:75:44:60:f2:
         61:e8:92:06:7c:a1:02:bb:53:75:0b:ae:f1:f2:08:ee:fc:c5:
         dc:ad:de:71:9a:fb:12:15:44:31:c2:0e:9b:02:d7:d2:d5:37:
         43:5a:d4:37:a1:a7:94:11:c0:ab:aa:64:45:f0:32:4c:e0:a2:
         9e:f3:fe:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:34:15 2026 by rpki-client