Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/d1a575f9-dfcb-30b6-afc6-88dbc95c0b81.roa
File:                     d1a575f9-dfcb-30b6-afc6-88dbc95c0b81.roa (raw, json)
Hash identifier:          2lKBZ534iT6z2I2LJCr814R6RPpCc4s8fJjeYcWG+xg=
Subject key identifier:   41:9C:85:71:4C:DD:3B:18:B0:D2:9F:6E:92:71:30:3C:14:4A:1F:34
Certificate issuer:       /CN=a4a5ba5d-c707-479a-82b6-0d1735321896
Certificate serial:       010D0C9F4328584F506D3CDB552C447C7B93F9A0
Authority key identifier: F8:66:20:60:A8:C4:68:5C:93:6F:51:65:D3:43:30:A2:C9:E9:EA:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/d1a575f9-dfcb-30b6-afc6-88dbc95c0b81.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     29802
IP address blocks:        23.226.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:3c:db:55:2c:44:7c:7b:93:f9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a5ba5d-c707-479a-82b6-0d1735321896
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=7070fc9d-c4c7-45f5-846c-8c3b60a87505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:4d:3c:63:f9:c7:ee:98:b0:3c:89:73:35:
                    d4:e7:e8:c6:4d:d4:f3:40:53:ae:3e:cc:71:f1:f5:
                    33:7d:43:36:d0:b2:43:b6:bb:bc:82:54:d9:b2:cf:
                    86:81:73:d9:1a:55:33:0e:79:eb:a6:6e:1d:34:aa:
                    f3:86:75:9c:ec:36:81:3e:69:1b:fe:5d:68:fc:fb:
                    b8:c7:7e:df:7d:69:61:bb:7b:c3:ae:c5:01:c1:27:
                    dd:5e:55:31:c8:02:30:e6:ed:b1:42:48:2f:5f:e5:
                    1c:9b:79:b0:b0:6d:64:45:77:27:41:37:c1:c6:1d:
                    16:4c:ac:9c:c0:fb:da:09:01:4d:fc:b3:01:f9:60:
                    a8:2a:14:5b:9e:f8:e4:17:bd:36:87:68:09:31:0b:
                    50:fa:45:cb:ba:01:db:47:b8:fd:1d:01:2a:47:c5:
                    c3:76:5a:10:d9:d5:6a:16:9a:e4:38:ab:c9:ce:4e:
                    c4:85:c6:ae:39:b3:3a:32:e6:03:b7:42:ac:e5:82:
                    22:ee:a7:d4:f5:ca:63:6e:36:62:88:22:c4:e9:c5:
                    2f:24:83:15:33:f0:45:09:eb:76:f1:e6:00:e4:9d:
                    4e:19:ae:4c:4a:9d:c3:d2:28:3b:d1:46:e1:38:d5:
                    9e:78:60:ff:60:cc:e7:b8:9b:53:83:73:75:fe:8b:
                    4f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9C:85:71:4C:DD:3B:18:B0:D2:9F:6E:92:71:30:3C:14:4A:1F:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/d1a575f9-dfcb-30b6-afc6-88dbc95c0b81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896/a4a5ba5d-c707-479a-82b6-0d1735321896.crl

            X509v3 Authority Key Identifier:
                keyid:F8:66:20:60:A8:C4:68:5C:93:6F:51:65:D3:43:30:A2:C9:E9:EA:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a4a5ba5d-c707-479a-82b6-0d1735321896.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:9c:1c:4e:17:0e:15:ea:d3:a0:4f:e9:2f:90:b4:b9:1d:16:
         e7:db:25:e1:5c:73:83:8f:7b:27:bf:71:93:6a:8e:79:3a:2c:
         45:90:2b:f2:1f:a3:2c:00:b7:9f:0b:f0:7b:ae:fe:84:e7:79:
         21:69:11:3f:18:7d:b1:89:f7:7a:48:c6:d4:7f:73:f3:b1:63:
         d3:72:7a:95:81:74:c1:58:14:09:07:26:39:7f:9e:c6:14:ca:
         aa:62:75:4e:72:c0:d4:84:ee:7b:fd:b7:dd:a4:01:08:4e:6d:
         ed:d9:14:28:16:8f:a7:79:a2:ed:60:24:3f:8f:2d:da:8b:19:
         dd:12:5f:ed:05:9a:8c:d1:08:a9:a4:2f:1c:09:33:cc:bf:14:
         9f:bb:40:7a:51:be:2f:6f:b8:b9:da:b1:17:18:12:ad:ad:96:
         b5:41:28:15:06:6b:3e:cc:d2:48:fd:fa:99:23:aa:ed:35:2a:
         ed:ed:cb:fb:ed:5b:25:c9:49:9c:52:2f:a4:4a:53:b9:08:33:
         03:a1:a8:29:14:8d:f0:b4:66:b6:2d:76:90:80:6e:6c:06:25:
         f3:89:3b:53:c7:31:38:07:d1:4d:7b:10:33:a6:ea:4d:92:d7:
         58:2f:1f:01:25:af:e2:a2:07:22:f5:08:64:1b:2d:47:d4:c5:
         f7:19:4e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:06:37 2026 by rpki-client