Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/e0555883-68da-3ed0-b20b-f794cbe5b3fc.roa
File:                     e0555883-68da-3ed0-b20b-f794cbe5b3fc.roa (raw, json)
Hash identifier:          T8mPIdz/ydMYyoZCjqNzi1UjXp4wM2+FaRlYdU/5kgM=
Subject key identifier:   E5:B0:D9:B4:36:8D:AB:4A:88:AA:C6:9C:0D:31:43:B1:08:58:37:3C
Certificate issuer:       /CN=c424337b-6d69-49df-8a01-857b948a7a5a
Certificate serial:       010D0C9F4328584D300A1ED92FEB0B7694EFD380
Authority key identifier: 08:AB:D3:BB:04:B8:74:C8:8D:36:07:46:43:0B:D9:7D:F6:EB:02:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/e0555883-68da-3ed0-b20b-f794cbe5b3fc.roa
Signing time:             Mon 16 Mar 2026 13:00:40 +0000
ROA not before:           Mon 16 Mar 2026 13:00:40 +0000
ROA not after:            Sun 14 Jun 2026 13:00:40 +0000
asID:                     174
IP address blocks:        23.141.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/c424337b-6d69-49df-8a01-857b948a7a5a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/c424337b-6d69-49df-8a01-857b948a7a5a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:30:0a:1e:d9:2f:eb:0b:76:94:ef:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c424337b-6d69-49df-8a01-857b948a7a5a
        Validity
            Not Before: Mar 16 13:00:40 2026 GMT
            Not After : Jun 14 13:00:40 2026 GMT
        Subject: CN=19db23bf-9a6d-4e51-82ce-9cbf4d6d937c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2c:5d:17:71:2c:90:ce:c7:6d:67:06:43:8e:
                    dc:55:33:2c:a3:97:e8:a6:d6:ce:db:5f:4f:89:cd:
                    70:55:5f:86:60:90:f8:51:10:a9:b4:35:70:b0:bc:
                    41:f9:f3:12:80:b3:31:39:28:bc:82:d6:c3:7a:da:
                    a3:bd:91:05:d1:9a:03:84:cf:3d:57:50:8f:f6:59:
                    fc:00:13:53:76:cc:cd:47:a9:06:2c:8b:46:c8:af:
                    29:70:a6:76:79:6d:0e:bb:3d:8e:29:40:16:6a:66:
                    1d:06:c4:5e:de:c8:60:95:9f:92:db:85:48:55:36:
                    43:dc:d5:58:72:6a:9f:75:55:ba:7c:fa:df:a4:8b:
                    82:63:63:59:24:65:ff:25:38:f7:68:ce:50:13:24:
                    ac:a7:40:7f:57:44:e7:11:76:f6:14:ef:0d:71:c5:
                    b2:f0:fa:75:92:27:93:24:14:2c:c6:72:e9:73:55:
                    dc:94:19:42:85:8f:2e:25:42:41:1f:86:6d:75:42:
                    31:ce:c9:e3:12:95:d3:6b:fd:8a:12:d0:e0:ba:3c:
                    77:ea:e1:cf:f0:1d:ed:63:45:95:65:c8:7b:e6:68:
                    f1:5c:e1:f1:e0:fa:74:90:a1:9a:a4:72:9c:7c:2a:
                    b2:4d:31:f3:01:1d:2f:89:df:4d:9f:a2:ae:c0:48:
                    3d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B0:D9:B4:36:8D:AB:4A:88:AA:C6:9C:0D:31:43:B1:08:58:37:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/e0555883-68da-3ed0-b20b-f794cbe5b3fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/c424337b-6d69-49df-8a01-857b948a7a5a.crl

            X509v3 Authority Key Identifier:
                keyid:08:AB:D3:BB:04:B8:74:C8:8D:36:07:46:43:0B:D9:7D:F6:EB:02:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:a5:f1:bb:09:36:87:2d:33:d0:39:29:e3:96:e2:39:a0:b0:
         d5:3f:db:8c:4e:dc:65:87:b4:9d:1f:e0:de:73:3a:e5:c2:7e:
         73:02:e3:84:5c:ca:02:13:08:f7:a1:7f:97:28:0b:50:9a:b5:
         7b:5d:e4:2e:8f:17:e1:c4:8d:6e:13:9d:4a:56:f3:92:ea:52:
         5b:71:81:2f:21:89:81:30:59:f7:8e:d6:1a:4a:90:67:3e:a0:
         08:3c:35:92:66:cc:24:6d:17:f2:a4:80:ee:ee:c0:3a:81:c3:
         f4:8c:73:2b:47:3d:c9:70:4c:ec:ec:8f:49:04:33:ea:3f:dc:
         61:a1:07:44:5d:80:fa:65:6d:86:ec:2e:a1:d7:50:cd:05:a4:
         ec:36:70:fd:3f:30:08:56:da:82:33:64:24:ef:68:67:77:8d:
         8d:e3:e5:37:23:77:5a:3c:5c:13:42:b8:da:37:85:e1:8b:d7:
         1c:1c:42:9e:d7:9c:14:06:ca:f3:66:8e:78:96:19:bb:4f:fd:
         2a:dd:34:69:db:6b:14:dc:2f:7c:ca:e1:31:3c:68:d4:63:7b:
         c4:75:bd:94:1b:2f:df:04:3c:0a:45:27:98:17:5e:02:86:d8:
         55:59:50:d7:23:da:73:b7:87:64:8e:8d:84:dc:d5:de:5b:f2:
         1b:f6:12:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:33 2026 by rpki-client