Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/30c7134b-40eb-32f5-8e24-6aadae966e69.roa
File:                     30c7134b-40eb-32f5-8e24-6aadae966e69.roa (raw, json)
Hash identifier:          gQv1mZmEi7Fap6KTLqNFFRBSIBfqkkMyeVpzlB2XQjA=
Subject key identifier:   A2:E3:DA:15:08:9D:49:07:03:42:CB:D5:10:36:81:F7:A1:F9:10:7C
Certificate issuer:       /CN=f7e22a46-44cd-4462-bb02-872f7aa721b7
Certificate serial:       010D0C9F4328584ED431E2EC62B2DC8B1432BA80
Authority key identifier: 4B:FF:DD:B3:5D:E7:17:48:AF:51:A3:98:D0:AF:FE:9D:45:3B:D5:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/30c7134b-40eb-32f5-8e24-6aadae966e69.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     30542
IP address blocks:        23.140.80.0/24 maxlen: 24
                          23.181.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/f7e22a46-44cd-4462-bb02-872f7aa721b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/f7e22a46-44cd-4462-bb02-872f7aa721b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:e2:ec:62:b2:dc:8b:14:32:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7e22a46-44cd-4462-bb02-872f7aa721b7
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=ba775d3b-db36-459b-94a1-7d97aa5bf4d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:08:e8:07:75:5f:27:36:82:81:83:9e:0e:3e:
                    f5:b5:0c:51:6f:2f:2d:f5:80:04:f2:d5:e8:d7:d2:
                    9d:7e:db:7e:98:31:99:63:69:df:59:1a:e5:b3:89:
                    8b:d7:0e:18:94:70:25:57:0f:b8:3f:2e:14:13:f8:
                    f5:d6:da:00:df:2c:2a:47:83:f1:6e:a6:6d:d2:f8:
                    6e:cd:38:f0:7b:02:af:42:9c:4b:4a:b5:ce:6a:08:
                    8e:2a:3d:df:f1:10:45:c2:bc:08:c7:61:37:e9:11:
                    be:d3:fc:79:f2:5b:81:97:9f:03:d9:cb:d6:45:d5:
                    41:0c:75:46:28:9f:c9:99:9d:51:46:73:a7:ad:5b:
                    5d:cb:c7:81:8a:5e:28:4f:50:0e:00:d3:b6:97:ca:
                    67:49:40:4e:86:26:36:cb:30:ed:1a:c3:d9:fb:2c:
                    19:c2:b8:7d:22:b8:d1:bf:ee:85:e1:61:e8:74:3e:
                    3f:8a:1c:b7:88:64:38:a8:3b:12:86:06:6d:a9:99:
                    05:48:3e:c0:05:a2:61:23:2c:fb:30:10:a6:b2:f1:
                    27:74:26:8a:d8:e6:48:0b:9a:00:ee:88:c4:68:2e:
                    72:c5:ef:a5:98:2e:89:a1:ed:b9:1c:b3:43:3e:1e:
                    e9:9a:13:32:34:22:d5:07:ff:17:cf:6a:e4:a6:b4:
                    71:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E3:DA:15:08:9D:49:07:03:42:CB:D5:10:36:81:F7:A1:F9:10:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/30c7134b-40eb-32f5-8e24-6aadae966e69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7/f7e22a46-44cd-4462-bb02-872f7aa721b7.crl

            X509v3 Authority Key Identifier:
                keyid:4B:FF:DD:B3:5D:E7:17:48:AF:51:A3:98:D0:AF:FE:9D:45:3B:D5:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f7e22a46-44cd-4462-bb02-872f7aa721b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.80.0/24
                  23.181.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:4e:1a:3b:1a:7a:27:99:16:e3:8f:db:4f:a0:a6:c2:c3:d9:
         3a:1f:53:6f:84:fc:d2:d4:b2:f5:43:c0:1b:e4:43:73:b9:a5:
         ff:aa:7f:5a:f0:9a:eb:47:a8:85:84:6c:4c:a8:5d:4b:ad:2a:
         ee:e8:b5:72:05:c1:8d:28:c8:35:72:75:56:14:d8:cc:cc:23:
         9b:50:75:ab:19:98:e8:97:0b:6e:01:59:51:7b:69:da:dc:d9:
         7a:43:fb:df:46:1e:49:d9:d3:b1:a7:d7:34:47:0e:99:e1:48:
         67:f9:c8:09:79:1e:74:c6:85:70:2e:4c:30:d3:97:09:9f:72:
         03:9a:2f:57:31:35:93:53:72:52:d3:8d:c4:d6:b2:b2:e6:13:
         b1:43:da:5c:bc:87:7d:0c:3a:8c:1b:bc:82:7d:f7:a3:44:49:
         dc:96:97:d9:77:3c:0c:44:af:e6:28:70:31:2f:e4:36:6c:c5:
         34:bd:9f:fb:53:e6:cb:b7:69:57:c5:1a:96:01:d8:74:c1:45:
         91:b1:e0:00:4c:28:8b:89:4f:b1:fe:59:0c:fe:e4:23:b3:d3:
         8f:e0:d0:cd:7a:6d:4b:4f:7f:1a:2d:cf:5d:c8:73:bb:91:0d:
         0f:91:e7:27:37:df:0c:16:c5:79:a1:6c:40:18:3a:9d:52:88:
         f5:77:78:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:35:57 2026 by rpki-client