Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236/29606450-5510-3938-9536-7cb319bd9af4.roa
File:                     29606450-5510-3938-9536-7cb319bd9af4.roa (raw, json)
Hash identifier:          xebF5UyvI3/ZeM/AcUf/Ctnno8+3eD+2nUPu4REzvvA=
Subject key identifier:   59:DB:8F:F4:A7:93:65:E6:55:CB:11:0F:A0:8D:90:FC:E8:97:CF:8A
Certificate issuer:       /CN=0e007d53-fcbb-4a0a-8679-7323c2a65236
Certificate serial:       010D0C9F4328584F4987A472CA07052868DED780
Authority key identifier: D8:27:85:42:A7:7C:1D:A9:4C:8F:C7:2C:BB:0F:86:A8:27:22:17:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236/29606450-5510-3938-9536-7cb319bd9af4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399526
IP address blocks:        23.134.132.0/24 maxlen: 24
                          2602:f6ec::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236/0e007d53-fcbb-4a0a-8679-7323c2a65236.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236/0e007d53-fcbb-4a0a-8679-7323c2a65236.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:a4:72:ca:07:05:28:68:de:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e007d53-fcbb-4a0a-8679-7323c2a65236
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=01e91b9e-3b65-4862-a408-b96c32d33514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fa:34:5f:e6:bf:58:00:4f:e7:06:7e:56:91:
                    5d:da:a8:85:2d:c4:ae:0d:95:c4:aa:f9:36:74:0e:
                    c8:26:f5:a7:d6:e5:55:d1:10:c0:35:15:e4:6a:48:
                    23:e0:1b:5a:ef:62:a6:e8:4d:60:a4:46:26:ca:0f:
                    3a:31:76:22:00:1b:72:23:13:1a:e1:c6:ba:2b:89:
                    be:0d:fc:83:26:db:cf:5f:cf:01:ac:82:c7:38:8a:
                    9d:4c:2b:60:6c:60:54:d5:b4:45:63:4e:cd:ed:4a:
                    b0:83:b2:bc:a3:ce:34:df:5b:d9:99:0e:a9:64:f2:
                    bd:42:3c:22:86:41:37:e4:37:68:8a:f7:c5:93:08:
                    d5:41:90:f8:31:b2:42:c4:3a:0a:0a:9a:61:1a:df:
                    5c:2f:d9:54:39:b1:ea:a2:03:df:a7:78:ad:f3:70:
                    34:ce:76:20:bd:b3:4c:e5:69:67:52:a0:29:66:5e:
                    b6:2f:7d:be:8a:ca:c7:7c:ec:72:a3:a8:47:37:2a:
                    d3:f6:f2:52:24:80:2f:0f:e2:c1:6a:c2:bd:4c:84:
                    32:46:9b:71:da:81:f1:8e:16:c1:9f:30:74:ed:52:
                    69:e7:bf:07:6a:58:2c:a5:77:fa:2a:c2:58:fa:ff:
                    5d:51:93:03:4f:69:ce:a8:40:ac:3e:f7:64:4b:dc:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DB:8F:F4:A7:93:65:E6:55:CB:11:0F:A0:8D:90:FC:E8:97:CF:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236/29606450-5510-3938-9536-7cb319bd9af4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236/0e007d53-fcbb-4a0a-8679-7323c2a65236.crl

            X509v3 Authority Key Identifier:
                keyid:D8:27:85:42:A7:7C:1D:A9:4C:8F:C7:2C:BB:0F:86:A8:27:22:17:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0e007d53-fcbb-4a0a-8679-7323c2a65236.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.132.0/24
                IPv6:
                  2602:f6ec::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c5:5b:0b:df:c1:c1:fd:c8:7e:91:cb:67:79:4f:d8:8a:9d:
         99:a2:16:f9:78:2d:4b:5b:e4:71:c8:0f:3e:3b:99:74:c3:d4:
         67:f4:0a:26:d9:1f:9e:f8:1e:4b:15:af:e7:c9:4d:af:8e:99:
         3e:23:09:dd:41:80:f6:11:59:bd:ff:6f:fe:42:0f:6d:87:ca:
         a8:c2:9f:3e:3b:9b:c5:c6:43:f1:81:bf:09:48:2e:bd:b6:9a:
         93:87:c9:01:89:a2:0a:d8:18:c7:6b:4f:7c:0d:7a:32:a5:43:
         81:98:f6:4d:38:47:d5:66:5c:c2:87:9d:90:d4:8c:52:93:81:
         00:d9:5f:c2:ee:66:12:7c:19:35:83:71:a6:7c:95:82:7b:10:
         22:d6:89:27:9d:f2:8a:6b:0e:d4:37:6e:8c:d2:c6:77:15:fa:
         c9:51:82:53:da:a4:a7:cc:2b:6c:f2:35:8e:50:3a:3d:63:9e:
         f5:ba:95:32:e3:12:76:a6:f2:ac:e7:8b:ac:68:c6:60:5b:c1:
         1a:a6:81:e5:40:cc:ab:9b:a7:12:0c:a2:71:a6:7b:5b:ec:8e:
         ec:a5:b9:28:ec:fa:73:d6:9f:cc:ea:90:05:3e:59:8f:2c:51:
         50:a3:2d:87:42:26:af:70:52:da:9f:27:22:d9:1f:cf:5c:cf:
         f1:0a:43:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:33:04 2026 by rpki-client