Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/d4cb7a07-3013-37f5-aa8c-b08579fc062a.roa
File:                     d4cb7a07-3013-37f5-aa8c-b08579fc062a.roa (raw, json)
Hash identifier:          t4QYsDU1gPiJtW5DmGaK5ISgM9QruP68KY99kYf6z9U=
Subject key identifier:   C3:BF:AB:8B:87:CF:8F:E0:0C:4B:DA:97:A6:09:E5:2B:29:54:AA:62
Certificate issuer:       /CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
Certificate serial:       010D0C9F4328584F4976DE2AC1593328145C807E
Authority key identifier: 92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/d4cb7a07-3013-37f5-aa8c-b08579fc062a.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400928
IP address blocks:        23.173.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:de:2a:c1:59:33:28:14:5c:80:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5db45db-8c92-4b61-a3d5-f5bbb993bdc3
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=05222bfe-ee6d-40e3-9bb1-763a7101bd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:73:18:01:95:79:fe:84:97:26:a2:2c:77:b2:
                    ed:21:7b:5c:84:40:66:f0:67:b2:d8:b9:54:bd:20:
                    47:ec:74:db:24:b2:2b:e8:6f:ec:f3:39:61:91:40:
                    06:4a:7b:08:52:7b:c2:ae:b8:bb:39:2d:84:37:52:
                    ec:c8:7d:f2:04:2c:72:45:c9:49:c1:67:40:8f:f2:
                    52:9b:40:64:5a:68:df:77:04:60:7e:c6:8d:ee:b6:
                    d5:38:0a:52:ba:6c:f8:90:f1:3a:03:53:93:7f:30:
                    bb:0a:76:3f:c6:ca:5f:10:52:f1:95:2b:18:83:8d:
                    a7:bf:3b:9f:c1:cf:52:c1:cd:e8:ff:a0:7d:9e:7b:
                    27:99:71:6e:a7:1b:b2:4d:aa:d9:a7:06:8b:32:f4:
                    ae:cd:7f:e9:b5:6e:1e:12:71:63:6b:79:1a:1e:6b:
                    6a:f4:81:f0:65:8d:a5:95:cf:c3:6d:d3:83:d1:b3:
                    d1:db:ad:7a:85:80:19:47:79:53:e4:de:28:b9:c8:
                    a1:85:d1:c5:83:a7:bf:b6:58:9a:62:48:58:bc:46:
                    bc:77:54:57:0b:6d:02:b0:86:6d:70:28:a3:8f:46:
                    cb:4e:9c:68:21:c7:7c:5b:24:33:03:c5:6b:5e:26:
                    84:b8:39:d5:01:a9:7a:fc:f7:02:c8:36:06:7f:42:
                    96:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:BF:AB:8B:87:CF:8F:E0:0C:4B:DA:97:A6:09:E5:2B:29:54:AA:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/d4cb7a07-3013-37f5-aa8c-b08579fc062a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.crl

            X509v3 Authority Key Identifier:
                keyid:92:7D:D7:70:1F:B4:FA:EE:7E:66:5D:66:8F:0C:09:8B:B2:93:A4:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b5db45db-8c92-4b61-a3d5-f5bbb993bdc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.173.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:c9:0d:93:30:25:18:72:cb:bd:09:68:6b:d5:9a:97:c3:a7:
         da:03:6f:fd:c6:3e:82:50:ea:13:1a:2f:d6:f1:77:ae:6b:2e:
         95:80:c5:06:57:ef:57:75:a6:34:c8:05:0f:48:68:bb:6d:3f:
         b0:03:ed:5b:d3:54:44:47:86:13:d6:8e:68:d8:c8:f8:d3:6e:
         29:df:a0:83:80:7a:e2:c5:5b:0d:a1:0b:83:51:50:29:18:df:
         6c:86:9c:ca:74:24:75:ed:54:ef:27:3d:b4:63:5d:06:6a:11:
         ac:43:16:47:92:5b:1a:9d:8a:72:a5:d3:ef:4f:40:b6:5f:dc:
         88:9a:12:fc:cb:11:0e:7f:c1:53:ed:c2:45:ae:e8:47:3c:c4:
         3d:a6:0f:ef:d8:0d:ab:52:16:96:aa:6a:80:7e:a0:94:80:57:
         b3:ba:cf:04:6e:e9:21:49:c7:e4:a0:f4:a4:ca:40:a1:45:4a:
         7a:99:03:c9:21:98:65:56:68:9b:be:fe:ac:cc:e2:7d:e4:9c:
         ca:69:79:15:f0:81:bb:cd:39:5b:b4:40:6f:23:e9:56:95:01:
         4c:1f:91:7e:a1:dd:13:e8:a0:cc:37:ee:0d:ce:c4:74:98:31:
         d1:40:a4:e7:7b:91:9c:01:e7:36:e3:bd:69:d5:8d:d0:1b:e6:
         0b:9c:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:30:49 2026 by rpki-client