Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/0decc770-7996-3ee0-b8a1-f6778d297f96.roa
File:                     0decc770-7996-3ee0-b8a1-f6778d297f96.roa (raw, json)
Hash identifier:          F1qo/YhuniqCop0g1sLSioUroH6Eg/roPIv/NmT8pbI=
Subject key identifier:   70:BD:A6:BD:A5:EC:B3:9A:9D:7F:B5:94:58:86:58:79:19:03:11:90
Certificate issuer:       /CN=43379ab9-295c-4f8d-ac17-431c5c7004aa
Certificate serial:       010D0C9F4328584F4972EAA5067EDC197E49D700
Authority key identifier: 0D:6F:8F:C3:21:98:89:1F:27:96:A0:80:A4:F3:F8:FC:D6:53:E3:42
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/0decc770-7996-3ee0-b8a1-f6778d297f96.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     153771
IP address blocks:        23.176.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/43379ab9-295c-4f8d-ac17-431c5c7004aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/43379ab9-295c-4f8d-ac17-431c5c7004aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:ea:a5:06:7e:dc:19:7e:49:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43379ab9-295c-4f8d-ac17-431c5c7004aa
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b672110c-4317-48e4-97b3-2c207a88de32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:45:f6:88:f8:72:74:c2:ab:dc:90:99:78:fd:
                    ec:2a:be:72:d7:2c:da:85:6b:44:b2:b5:10:24:b6:
                    53:cd:b7:32:1d:d6:c5:92:00:cc:99:b3:8e:1b:21:
                    af:60:dc:0c:b1:a1:f5:3a:63:6a:af:9f:6a:71:e3:
                    0f:2f:39:fa:98:53:10:c1:fa:50:ec:16:f4:a5:e6:
                    71:1a:94:32:a8:10:82:29:d0:78:8a:6a:95:bd:7e:
                    af:31:e3:1b:c6:c5:bb:18:13:0b:4e:03:a8:30:fc:
                    ef:a4:ce:31:55:f3:0d:b5:60:5c:62:25:d9:f7:76:
                    db:a0:e8:37:cc:21:21:01:01:e3:fd:29:12:66:38:
                    78:a1:79:a9:33:7c:ca:cf:d5:e9:a6:3f:05:63:a0:
                    b0:99:cc:a7:c4:88:6a:2d:ba:92:03:18:4b:3e:fa:
                    e5:6e:68:04:d2:f2:8c:f3:e2:89:9c:3d:cf:ba:93:
                    b5:44:48:a3:1c:ef:17:f7:81:21:9f:12:e7:8c:82:
                    d8:ec:c5:fa:71:8d:bd:65:63:4d:3c:4a:38:17:a4:
                    d3:fb:ad:a2:60:a7:de:54:28:72:f7:d7:75:2b:75:
                    7a:7f:f3:eb:46:16:b8:41:88:bf:86:cd:ae:46:0d:
                    f6:48:48:ec:ad:84:b4:cb:25:ed:aa:bf:6a:53:cf:
                    5b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:BD:A6:BD:A5:EC:B3:9A:9D:7F:B5:94:58:86:58:79:19:03:11:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/0decc770-7996-3ee0-b8a1-f6778d297f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa/43379ab9-295c-4f8d-ac17-431c5c7004aa.crl

            X509v3 Authority Key Identifier:
                keyid:0D:6F:8F:C3:21:98:89:1F:27:96:A0:80:A4:F3:F8:FC:D6:53:E3:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/43379ab9-295c-4f8d-ac17-431c5c7004aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:6f:df:d8:fa:91:f2:2e:a9:f8:a8:d2:1b:ac:9b:61:9b:0f:
         3e:d2:00:53:55:01:d7:2a:c3:a7:5f:72:d8:34:05:12:eb:c5:
         a2:c1:a1:fe:e3:ad:d0:ee:3d:a0:55:03:21:c4:82:b4:28:f8:
         8e:18:14:41:27:c7:be:bb:60:51:82:8c:00:77:44:e0:7d:0c:
         9c:29:01:45:fd:54:61:eb:c9:04:a4:dd:3f:78:d4:45:c8:bf:
         75:5c:08:e2:24:50:37:a6:f6:1e:5f:56:97:a9:f6:53:f0:51:
         19:e3:42:f5:df:89:d1:c2:f8:50:57:c0:8e:5d:39:9c:71:25:
         d4:99:27:5a:ba:0a:90:19:97:9a:a3:82:04:2e:17:81:7d:9a:
         07:83:ca:a3:b8:86:98:9c:c8:94:b1:14:7d:6f:d9:c9:54:de:
         45:c0:11:23:74:c6:6d:ae:de:c6:16:e5:3b:66:d4:10:18:b2:
         94:45:00:51:1e:7c:ef:03:9a:01:b0:9e:eb:93:8f:e8:14:d7:
         0f:4e:a6:f7:8d:a0:c4:db:bc:cc:62:92:fb:06:fd:f5:cd:33:
         69:1b:b4:1f:28:bb:83:c6:59:dd:a1:cd:ef:53:76:59:29:ec:
         42:70:59:34:ce:85:be:1b:0f:0b:0e:31:12:27:d7:9c:7b:7d:
         4a:1c:1a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 02:13:42 2026 by rpki-client