Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa
File:                     f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa (raw, json)
Hash identifier:          T2p5hikRa2WrTuTrGCwUY2u7Ye13EyO4ha3Zgk/6glU=
Subject key identifier:   0C:A8:08:FF:23:F1:E6:7D:57:6F:30:BE:43:68:53:DD:77:CC:E7:D8
Certificate issuer:       /CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58
Certificate serial:       010D0C9F4328584F4973E582A4FCDAADD735E900
Authority key identifier: 70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395648
IP address blocks:        23.143.200.0/24 maxlen: 24
                          2602:290::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:e5:82:a4:fc:da:ad:d7:35:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4706c6ca-b19a-44a6-94e1-340cbfd29a58
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b95d93b6-a40e-4107-a6fb-461b77f3eb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:33:e1:28:5c:91:01:08:15:86:63:04:bc:40:
                    70:88:a4:e6:a4:91:e3:67:73:ea:54:95:4c:1d:10:
                    3a:37:f4:df:03:f2:65:a9:f6:19:f3:c5:16:f3:40:
                    2b:98:ee:8c:44:79:f3:9b:bb:8f:d5:79:43:1d:f9:
                    38:10:8f:b7:ff:fd:86:1d:45:e4:d1:ca:a8:90:40:
                    69:44:e6:85:66:7d:65:f1:d0:6e:42:d0:38:80:b9:
                    70:f2:22:87:b1:72:26:b5:70:66:d3:6c:cb:c3:f0:
                    b1:50:aa:97:24:62:e1:49:69:d9:dc:6e:65:97:f7:
                    65:40:50:1a:06:00:5e:b8:54:ed:35:57:a9:c0:2e:
                    19:f6:3b:7c:6b:4c:42:d9:37:7e:50:d2:a4:8a:5b:
                    fa:fc:26:98:a7:3a:ef:14:0d:38:e9:06:22:b1:5a:
                    5c:82:cb:91:12:78:cf:c7:fb:26:36:15:ab:ad:4d:
                    88:87:74:50:21:0a:a1:3e:7a:9c:d2:96:74:1f:33:
                    41:72:09:4d:e6:f6:71:bb:78:9a:65:30:b6:a7:41:
                    23:ba:32:e9:e9:29:b8:78:49:21:ec:78:72:f3:b6:
                    3f:d7:17:5c:17:33:61:8b:8c:34:18:01:b3:b6:8b:
                    ec:25:57:f8:b5:55:f3:50:ee:ef:f5:c9:a5:fb:db:
                    79:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A8:08:FF:23:F1:E6:7D:57:6F:30:BE:43:68:53:DD:77:CC:E7:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/f060337d-b71d-3704-ad4c-66ef4b8ebb74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58/4706c6ca-b19a-44a6-94e1-340cbfd29a58.crl

            X509v3 Authority Key Identifier:
                keyid:70:13:15:9B:39:84:C7:41:92:FE:7E:8E:DE:C1:14:07:A0:64:E4:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4706c6ca-b19a-44a6-94e1-340cbfd29a58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.200.0/24
                IPv6:
                  2602:290::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a0:88:e5:a9:f2:b7:63:47:c2:aa:5f:16:b1:1a:ae:95:31:
         c3:de:ea:a7:4e:2a:48:1c:af:cd:5a:3e:e7:0e:ee:96:3a:09:
         e9:a9:c3:fd:b1:d1:c1:bc:ec:45:84:0b:5d:7d:d6:cf:4a:fd:
         5b:87:29:e5:f3:49:99:9f:32:ed:77:d7:52:00:d8:ae:1f:06:
         35:62:d7:f8:40:16:9d:ec:7b:94:50:b9:8e:95:64:fd:38:37:
         96:fc:c5:8e:6b:b5:4c:68:1b:05:1b:1f:bb:25:eb:15:3f:47:
         2d:04:01:2b:90:64:8f:3d:c2:8e:2c:8e:a6:51:8b:96:00:7d:
         c9:53:50:c0:91:2a:3e:cf:22:82:08:3d:be:1d:a3:a1:ee:ed:
         94:63:5b:51:94:d1:dd:83:12:1f:00:f4:00:0e:b2:f9:81:fe:
         0f:67:ec:b4:58:0b:a2:d3:18:fe:39:49:17:48:be:8e:29:e5:
         3f:2c:0a:d8:0e:bb:63:84:12:73:0f:40:2c:b8:5d:a9:82:2e:
         b8:88:1f:b6:27:0b:bf:74:f5:a6:2e:44:ce:df:87:23:35:8d:
         01:74:66:2f:f3:76:59:ce:12:55:e9:c1:b1:10:53:34:89:23:
         7e:12:a5:b8:08:f4:7d:de:b3:e4:3f:8d:b7:dd:e3:ea:83:35:
         df:3f:4c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:55:02 2026 by rpki-client