Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d0ee3b7e-8791-318c-a0af-42cde9f9f239.roa
File:                     d0ee3b7e-8791-318c-a0af-42cde9f9f239.roa (raw, json)
Hash identifier:          +frm+rXp/V7Cg5fRPC6bueT8M8TIt0Y/ebfUL+Yqvjg=
Subject key identifier:   CB:C2:97:DA:23:BD:45:6D:F8:96:BC:2B:29:21:03:AF:6E:88:A7:2A
Certificate issuer:       /CN=0edec576-87d0-4ec6-9e13-394230996e53
Certificate serial:       010D0C9F4328584F71ED9811DAE44ED1B4C9FC00
Authority key identifier: 55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d0ee3b7e-8791-318c-a0af-42cde9f9f239.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     398493
IP address blocks:        23.161.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:98:11:da:e4:4e:d1:b4:c9:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0edec576-87d0-4ec6-9e13-394230996e53
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=abca459a-5f54-4001-ace4-8115e52b1ded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:09:fa:34:15:48:77:3e:e5:5d:82:85:1b:
                    1b:52:5c:7a:0f:c1:e1:8b:0b:5d:88:37:fb:6d:99:
                    10:3c:71:1d:76:38:f6:de:49:68:6e:07:b7:25:56:
                    48:5d:f0:60:78:eb:d1:50:06:da:83:59:de:d6:c6:
                    81:c4:b4:22:c3:a4:18:33:70:6c:5d:9b:8e:70:5f:
                    36:0b:c4:88:fb:a8:fb:50:22:9a:be:e1:30:bf:cc:
                    3f:88:cb:33:e7:24:06:c2:27:3f:f5:cb:63:aa:54:
                    06:9f:18:de:73:be:32:c9:a7:fa:2b:55:e0:d9:02:
                    c2:90:7b:8a:93:c3:93:e4:66:49:48:72:b8:34:3d:
                    2a:d5:b7:cf:17:c4:80:54:c2:95:15:b0:8e:54:40:
                    de:82:59:78:9d:cc:0e:a3:e6:64:ac:f0:76:11:75:
                    1e:22:88:ad:ad:b9:a8:c9:07:e9:92:b6:d5:98:7c:
                    6d:86:c1:e9:e6:2a:34:10:8c:bc:02:f8:b2:7c:91:
                    fc:f1:b4:c5:0e:55:9a:23:f7:73:46:e4:79:8c:90:
                    94:02:7f:41:5b:90:b6:8b:c6:4e:88:d1:c2:2c:9f:
                    cc:af:a6:5d:49:df:7f:c4:1e:ff:43:75:99:dc:ff:
                    b4:ef:f4:90:44:b2:d3:02:7d:0e:b6:4f:44:be:ac:
                    34:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C2:97:DA:23:BD:45:6D:F8:96:BC:2B:29:21:03:AF:6E:88:A7:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/d0ee3b7e-8791-318c-a0af-42cde9f9f239.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53/0edec576-87d0-4ec6-9e13-394230996e53.crl

            X509v3 Authority Key Identifier:
                keyid:55:54:75:F0:0F:6F:F6:46:C3:4E:32:A8:4D:5F:C5:CA:E6:98:08:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0edec576-87d0-4ec6-9e13-394230996e53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:f0:46:a4:5a:28:b6:01:d9:b8:3e:5c:64:a3:50:4d:33:40:
         b9:05:57:72:73:e7:7b:45:9f:27:70:89:a8:bc:ec:e2:4e:a8:
         1d:f6:76:40:54:35:ea:a7:a7:36:c2:d9:1a:10:bf:56:2e:56:
         37:4f:6d:54:fe:08:61:cf:49:91:6f:3d:4c:c1:73:04:cd:7c:
         9b:b9:e1:65:b7:55:c7:a8:96:ec:55:21:8f:83:f6:ad:29:ba:
         95:31:e0:73:73:5c:92:59:1d:e5:a2:17:9d:0a:7e:c7:45:5b:
         ea:06:c5:bb:82:a3:d3:bd:c2:49:cd:f2:1f:b5:c7:88:e3:95:
         df:43:cc:29:d1:8b:49:35:1f:10:06:ff:75:fc:ae:19:f7:2e:
         7d:19:29:5c:83:0c:52:4f:e0:75:2d:85:41:35:66:90:78:79:
         43:b5:77:43:0b:c4:fb:cf:38:0f:f7:3f:bf:d3:6b:ce:fb:c1:
         cc:60:b9:2c:fa:1d:44:58:51:66:65:9a:23:32:06:82:5c:1e:
         23:fa:6e:f3:a8:e8:7b:7c:b2:23:b4:eb:22:70:51:7c:95:9f:
         89:97:2d:a9:76:bf:15:bd:b3:68:8c:2f:8c:38:15:42:95:20:
         b1:cb:fe:13:6e:0c:bf:de:6e:22:59:af:24:63:86:22:c7:21:
         c3:42:ed:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:38:41 2026 by rpki-client