Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1203ff35-cf10-3bb4-9155-fbd9a78becde.roa
File:                     1203ff35-cf10-3bb4-9155-fbd9a78becde.roa (raw, json)
Hash identifier:          LoGBWF65L+wiKUe0IdfN14jXZa+/Fcox+LCoQ3DyaBo=
Subject key identifier:   D7:A6:9C:37:76:F6:4D:37:AE:64:20:9B:63:01:79:E4:0B:58:C1:AC
Certificate issuer:       /CN=51772dd7-991f-47b2-b40b-d92a8497234e
Certificate serial:       010D0C9F4328584F20F7B8EBD9D505DC9DC54240
Authority key identifier: D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1203ff35-cf10-3bb4-9155-fbd9a78becde.roa
Signing time:             Thu 10 Sep 2026 13:00:12 +0000
ROA not before:           Thu 10 Sep 2026 13:00:12 +0000
ROA not after:            Wed 09 Dec 2026 14:00:12 +0000
asID:                     16509
IP address blocks:        23.150.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:20:f7:b8:eb:d9:d5:05:dc:9d:c5:42:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51772dd7-991f-47b2-b40b-d92a8497234e
        Validity
            Not Before: Sep 10 13:00:12 2026 GMT
            Not After : Dec  9 14:00:12 2026 GMT
        Subject: CN=88f19fc7-36e0-4f65-afb7-7036a36a3a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d4:78:ce:23:87:e6:ad:ef:4c:7e:d3:1b:35:
                    2f:07:96:3c:f8:fc:1e:7a:18:f6:8c:d4:f2:b7:8d:
                    a2:2a:21:81:b0:b4:92:ad:44:f8:9a:85:88:dd:3c:
                    be:e6:75:f5:26:fb:67:1b:2a:6a:83:cf:9b:e7:b3:
                    91:4c:f2:3a:b6:b6:fc:96:98:6e:39:4d:c6:e4:48:
                    ec:f2:42:58:a2:cf:03:5d:6b:4e:34:38:c2:1a:f5:
                    eb:da:54:22:46:4c:14:a9:62:10:b5:4d:ac:fe:dc:
                    65:31:b8:d6:e2:df:73:ff:c0:fc:bc:d0:bd:fd:90:
                    64:26:40:21:03:fd:c6:26:4a:d5:24:25:87:ae:ac:
                    cf:d9:c9:eb:7a:3a:70:8a:f6:79:cf:9d:00:ee:19:
                    a1:b6:47:7f:ae:1e:1e:09:94:2f:0e:5d:0a:f4:28:
                    79:af:dc:6d:5d:93:ec:c2:d0:60:8a:d3:48:20:cd:
                    d3:5e:64:78:72:fb:d4:85:51:ef:79:c8:d6:d8:e4:
                    3a:84:55:4b:cc:41:e3:79:a7:de:73:7a:12:78:de:
                    45:0e:29:25:81:9f:10:38:a2:77:a4:19:bf:18:ef:
                    96:1f:c1:50:66:70:93:34:67:ba:78:a7:ab:f6:88:
                    82:72:04:8b:2c:6d:b5:5e:38:0a:d2:b5:9c:3c:7d:
                    65:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:9C:37:76:F6:4D:37:AE:64:20:9B:63:01:79:E4:0B:58:C1:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/1203ff35-cf10-3bb4-9155-fbd9a78becde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e/51772dd7-991f-47b2-b40b-d92a8497234e.crl

            X509v3 Authority Key Identifier:
                keyid:D7:BC:A9:71:3D:2E:8C:BE:A8:BC:77:2E:30:C3:3D:60:09:04:02:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51772dd7-991f-47b2-b40b-d92a8497234e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:87:85:58:99:57:52:88:7a:af:a9:73:93:fa:23:34:3c:ee:
         8c:29:cb:51:ae:7a:73:cf:34:66:4b:78:26:b5:5d:1d:4b:7b:
         74:8d:3b:44:ba:e6:ca:0c:1a:aa:e3:61:68:e1:a5:f7:a7:ee:
         13:7c:c5:f1:8f:92:fa:07:d6:a0:a0:96:e9:3c:ea:08:70:d6:
         4d:15:58:92:df:d6:80:c5:52:dd:2a:e9:b9:d8:be:aa:43:4a:
         ee:c0:fe:61:68:e8:17:58:f2:e0:71:c8:17:06:3f:4f:62:de:
         0d:6d:1a:6f:64:00:84:9c:67:10:b2:0b:22:33:84:b0:60:95:
         e4:57:c7:6d:ec:a5:43:b6:5b:fa:32:d3:2d:51:eb:49:e9:2c:
         59:f9:b1:a4:b1:e5:c8:4d:5b:39:06:95:da:8a:7d:5c:18:1d:
         61:d9:bf:43:98:2b:7f:13:a4:7f:cb:bb:15:80:04:fa:72:d9:
         82:71:a4:74:ee:84:f3:9f:f0:14:13:2f:37:02:07:9b:f7:7c:
         fa:22:f4:9e:af:df:54:91:41:d4:91:24:10:6f:a4:b6:59:27:
         d5:15:e4:c1:21:16:54:cf:8d:c0:06:c9:ea:bc:4c:f6:6d:96:
         0d:52:a8:f4:4f:28:1e:76:87:c3:4f:d0:d6:5b:6d:13:df:01:
         85:54:4a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:29:01 2026 by rpki-client