Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/02c652c4-5793-34db-ab7f-a867c72271a6.roa
File:                     02c652c4-5793-34db-ab7f-a867c72271a6.roa (raw, json)
Hash identifier:          yDl37Jjj42eVOZjlUD6pZ84Dap7uwzWV+23ewb1XuUM=
Subject key identifier:   0B:29:96:25:0B:5F:C4:08:92:E0:EF:EF:30:45:0F:AF:69:62:DA:75
Certificate issuer:       /CN=ce634c28-231a-4b71-ad47-43e04779690a
Certificate serial:       010D0C9F4328584F004650FEE2082EA78807AB00
Authority key identifier: AD:81:80:2B:9E:99:D1:56:F5:23:57:FA:68:96:E0:83:21:93:DE:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/02c652c4-5793-34db-ab7f-a867c72271a6.roa
Signing time:             Sat 29 Aug 2026 19:57:08 +0000
ROA not before:           Sat 29 Aug 2026 19:57:08 +0000
ROA not after:            Fri 27 Nov 2026 20:57:08 +0000
asID:                     398578
IP address blocks:        23.247.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/ce634c28-231a-4b71-ad47-43e04779690a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/ce634c28-231a-4b71-ad47-43e04779690a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:46:50:fe:e2:08:2e:a7:88:07:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce634c28-231a-4b71-ad47-43e04779690a
        Validity
            Not Before: Aug 29 19:57:08 2026 GMT
            Not After : Nov 27 20:57:08 2026 GMT
        Subject: CN=ffad73c6-6294-48da-9fc0-e3035c26b5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:57:d4:68:56:2a:1f:c2:6a:2d:12:23:1c:40:
                    7b:ec:b2:51:81:ff:e7:6a:b0:4c:25:01:ed:3b:05:
                    34:49:52:01:3e:1e:61:4e:cd:69:fc:1b:69:e4:66:
                    76:22:c4:e3:70:82:84:87:03:b0:b7:a3:51:01:d9:
                    7b:c6:5d:d3:04:86:41:9f:19:d9:7b:fa:52:b7:80:
                    af:29:6b:84:64:92:70:b7:ab:fd:25:b8:89:20:77:
                    02:c0:a9:62:cc:24:3c:80:e2:e0:32:b5:94:55:2e:
                    47:35:df:63:93:78:61:e4:d7:ea:42:f9:3c:e5:38:
                    be:57:69:e3:6f:dc:27:9e:ef:24:a9:8f:47:67:2f:
                    30:7d:ff:dc:d0:8d:64:8d:d7:8d:9f:6b:1c:7f:a0:
                    bf:be:ee:59:9e:47:4c:31:e3:b1:c2:a4:36:3d:2a:
                    45:81:b9:43:88:ff:20:24:84:3f:f3:8e:c6:67:45:
                    35:3e:19:3e:09:c8:ec:46:6b:95:c2:bb:7e:61:79:
                    3f:91:fa:9c:f8:65:3d:81:24:80:46:35:1c:a7:38:
                    5f:a7:54:26:de:94:4f:ba:d7:42:aa:d0:92:d3:2a:
                    aa:a3:15:44:ee:1c:67:8f:e2:39:ce:34:6e:a7:f2:
                    f2:e4:84:f1:9a:20:12:80:53:9a:8f:db:b0:b3:f9:
                    b6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:29:96:25:0B:5F:C4:08:92:E0:EF:EF:30:45:0F:AF:69:62:DA:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/02c652c4-5793-34db-ab7f-a867c72271a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a/ce634c28-231a-4b71-ad47-43e04779690a.crl

            X509v3 Authority Key Identifier:
                keyid:AD:81:80:2B:9E:99:D1:56:F5:23:57:FA:68:96:E0:83:21:93:DE:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ce634c28-231a-4b71-ad47-43e04779690a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.247.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:89:a0:7f:14:91:b0:64:ee:27:10:cc:29:09:b7:6a:36:b5:
         1b:50:2e:20:22:5d:45:af:66:05:1b:32:64:c9:3b:f1:50:b7:
         ee:88:a5:62:ff:41:76:b1:5d:4e:c9:77:86:3b:8b:e9:f8:a7:
         44:92:61:63:9b:ab:70:44:9f:4f:1a:dd:4c:37:cb:39:95:29:
         6b:80:b3:9f:38:24:bb:ff:87:c3:a2:2d:bd:90:d9:7f:36:bc:
         fe:66:3a:f4:28:e7:5c:71:0d:8d:9e:ce:08:22:8f:84:e0:13:
         53:10:11:fd:0b:7e:85:a1:cd:c8:f8:18:c6:65:c3:6d:20:b5:
         6a:51:ae:d5:39:42:af:6b:f5:25:33:c6:11:38:6e:56:81:69:
         8d:e6:c5:af:d4:ad:d6:ce:da:ed:0e:ab:1d:44:ea:9d:3a:3f:
         74:7f:e6:58:69:95:60:ac:44:0c:c9:cb:8a:dd:d3:8c:17:cc:
         55:4a:c1:a2:fe:44:f4:2f:ae:72:16:45:ef:e4:31:ac:cf:a3:
         f0:a9:3e:59:78:b5:fd:73:8a:b7:00:81:41:09:28:e3:be:ee:
         04:81:a8:d5:d2:96:1d:8e:05:a4:62:31:1a:11:00:d1:d1:b7:
         1f:17:6b:5f:8c:56:bc:27:24:c4:64:00:e4:ab:4e:46:8d:cd:
         c4:45:48:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:08:17 2026 by rpki-client