Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/644325d7-4abb-3e88-bb5f-f2c2949325d2.roa
File:                     644325d7-4abb-3e88-bb5f-f2c2949325d2.roa (raw, json)
Hash identifier:          qSi0hnuuEPuXWLqDgKY60t2rMGPHpBF45de129jWUFM=
Subject key identifier:   3A:F2:2A:89:DC:B2:E4:A2:DA:A8:BE:20:27:B8:D2:48:9C:93:D8:71
Certificate issuer:       /CN=10c21a82-48fa-4568-908e-8e488e55c411
Certificate serial:       010D0C9F4328584F7BB2E8E3FEDFC1049ADC9C00
Authority key identifier: 93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/644325d7-4abb-3e88-bb5f-f2c2949325d2.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     398717
IP address blocks:        23.166.48.0/24 maxlen: 24
                          2605:f4c0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:e8:e3:fe:df:c1:04:9a:dc:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10c21a82-48fa-4568-908e-8e488e55c411
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=dd6ed234-3541-496e-809d-73d86e5f28c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cf:da:67:30:38:f6:a6:21:f5:8e:90:e4:bf:
                    b6:9d:2e:16:1f:6a:3a:ec:78:6a:3b:b6:a0:5f:c1:
                    db:f7:f3:d4:c1:14:3a:e9:c5:16:00:05:37:b1:03:
                    f8:bc:42:67:e9:b3:34:1b:a9:b7:6a:a8:64:15:b9:
                    88:dc:a6:ff:60:88:a6:a2:17:a4:30:10:60:2e:ba:
                    46:be:1f:23:c2:10:ce:61:13:ba:2f:88:be:3c:c2:
                    12:56:3a:e2:f8:c1:6d:ef:ec:04:80:57:83:a2:98:
                    fe:e9:ba:cc:8a:55:2f:15:92:c8:aa:5a:df:ce:4c:
                    44:88:82:1c:62:1c:16:a2:28:56:36:02:84:3f:24:
                    8a:10:85:1f:1c:6d:4e:cb:3a:40:a3:fe:49:b5:1a:
                    86:89:01:9d:c8:81:2b:45:e3:8f:62:cb:10:c8:34:
                    c9:97:ba:0f:33:26:f1:ee:69:ec:8b:c6:c7:b7:86:
                    78:1b:e4:97:63:45:c3:10:77:8e:1c:d4:1f:7e:ee:
                    fb:e5:13:f9:2f:2d:1f:86:46:89:9f:fd:14:b1:f5:
                    74:f5:4d:27:f3:09:f5:db:1b:d3:f9:d2:50:fb:db:
                    2d:97:a4:d2:52:48:87:93:a2:98:1c:3e:e7:a2:54:
                    d4:f8:00:06:fe:ac:70:32:c9:2e:99:ce:60:39:70:
                    d7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F2:2A:89:DC:B2:E4:A2:DA:A8:BE:20:27:B8:D2:48:9C:93:D8:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/644325d7-4abb-3e88-bb5f-f2c2949325d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl

            X509v3 Authority Key Identifier:
                keyid:93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.48.0/24
                IPv6:
                  2605:f4c0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:77:2a:09:60:b9:17:32:1a:86:ab:c8:52:fc:8a:3c:31:9d:
         1b:cd:cd:cd:27:34:d1:b7:d5:e0:44:7b:46:71:f8:37:cf:c0:
         c5:47:4f:17:66:cf:e3:2a:cc:95:df:a1:aa:4e:de:1f:f2:d5:
         f4:3e:27:09:6b:69:ef:9b:de:22:ea:db:b4:ca:f9:e8:8c:b7:
         c5:5f:17:ee:c7:91:b2:6c:9c:70:40:22:29:f7:dc:46:38:05:
         51:8e:5d:04:76:2b:d1:c1:1c:bb:58:8d:17:b8:eb:60:b2:68:
         e8:02:c1:d2:86:93:ce:17:2d:9f:73:79:e8:3f:a5:c8:fe:ff:
         2b:38:c3:a0:fb:d9:04:d1:a9:40:e0:d2:86:a5:ff:d4:4f:3f:
         ec:7b:e8:30:d8:e2:c8:da:bf:73:f2:b8:8f:22:46:b8:f3:eb:
         b3:1b:50:71:91:7d:37:38:c0:39:a0:64:5c:4a:be:b8:5d:8e:
         96:ba:9f:85:c2:f0:20:1d:a0:f6:cc:d7:28:7e:7b:7e:91:91:
         76:62:16:73:a0:a1:de:6e:6b:9f:9a:73:b4:43:77:49:02:42:
         dc:a2:63:cd:cc:d7:d0:f7:d1:a0:ca:e3:1a:da:ce:8a:1a:5f:
         84:1a:5c:8c:9e:c9:7a:fd:5b:f3:af:1d:ca:cd:e4:ff:bf:63:
         97:98:bc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:08:15 2026 by rpki-client