Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa
File:                     d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa (raw, json)
Hash identifier:          le4q7bfIyiP9+Yx4lbUzybVNelZqEF/QuxpnFtF9bYk=
Subject key identifier:   9D:6F:ED:FE:8F:19:E5:74:44:E4:83:0F:FA:DE:2A:63:E3:6F:C3:6C
Certificate issuer:       /CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af
Certificate serial:       010D0C9F4328584FAC8DDB503D273004FF156F80
Authority key identifier: 2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa
Signing time:             Fri 30 Oct 2026 13:00:12 +0000
ROA not before:           Fri 30 Oct 2026 13:00:12 +0000
ROA not after:            Thu 28 Jan 2027 14:00:12 +0000
asID:                     8143
IP address blocks:        23.146.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:ac:8d:db:50:3d:27:30:04:ff:15:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af
        Validity
            Not Before: Oct 30 13:00:12 2026 GMT
            Not After : Jan 28 14:00:12 2027 GMT
        Subject: CN=1458a58f-8263-4390-9157-5d200fa811af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:8b:85:4a:78:f7:86:2d:50:88:df:2b:c9:a1:
                    52:b8:9e:a0:5a:e8:dd:cd:ec:b3:5a:6d:82:1d:1a:
                    f2:09:00:3c:7b:df:79:cc:8d:3e:4a:60:05:ca:71:
                    93:27:f4:e8:07:49:12:d8:6d:b5:58:a8:c9:81:33:
                    90:37:34:76:ca:7b:00:34:09:94:27:47:63:cd:a1:
                    9c:57:ea:54:06:32:4f:f2:02:7c:91:13:74:50:ee:
                    bc:76:a8:f9:a6:f8:7d:a6:e3:02:54:bd:a9:22:4c:
                    0a:a2:99:52:07:4b:80:9a:a0:75:bf:5a:fc:bc:7e:
                    b3:97:56:a1:ef:b1:c2:ef:71:5b:44:80:57:28:4e:
                    40:80:22:c3:2c:25:7c:49:f1:31:44:24:3e:d8:fb:
                    3c:b7:23:d6:10:d2:5f:14:ae:6e:72:b7:61:05:a0:
                    e1:17:60:f3:c5:ea:09:ee:d1:3a:e9:14:3c:90:d6:
                    14:f1:44:a5:09:57:55:f4:2e:b9:cf:03:61:d2:fa:
                    cf:c6:93:81:ad:a3:e4:de:15:a2:c8:c2:6c:06:d2:
                    cb:ff:9c:7c:cd:3d:c2:e8:ed:18:c1:c1:18:63:20:
                    a9:96:7c:5f:35:d2:20:2d:8e:a3:ea:87:91:1f:62:
                    b8:4d:78:b5:b8:ef:bd:67:bf:e9:e4:fc:08:66:00:
                    25:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6F:ED:FE:8F:19:E5:74:44:E4:83:0F:FA:DE:2A:63:E3:6F:C3:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl

            X509v3 Authority Key Identifier:
                keyid:2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:cd:26:ce:af:49:96:26:82:c6:69:79:b0:b6:be:90:7f:ff:
         36:76:15:4b:15:ae:be:ff:cf:7e:c6:94:18:b6:e9:1c:d8:45:
         c2:d2:a1:80:a0:f9:67:c7:02:db:0c:a7:b8:3d:bb:21:e0:25:
         1a:13:52:af:f9:90:30:32:e3:c3:e3:40:47:c9:3f:1b:b4:91:
         57:e4:ca:68:10:a3:33:64:50:36:4b:3e:8b:e7:32:ac:4f:d2:
         00:84:f9:41:31:df:30:76:10:15:4e:b5:2a:8c:38:9f:22:9c:
         9a:9f:8c:fd:54:9c:5b:0a:fe:e5:72:0b:9a:1c:c0:bf:00:bf:
         86:17:56:fe:64:83:c3:79:f4:7f:e2:04:48:fb:79:56:e1:2f:
         22:94:fd:06:73:da:d2:33:74:4a:49:8b:65:fa:25:fe:76:ba:
         23:a4:f0:5b:dc:3f:9e:0e:0a:49:be:f2:2e:1b:cf:34:54:d1:
         02:f6:75:90:09:e5:d2:96:c7:76:33:b4:53:ce:1c:cf:62:10:
         c1:89:a9:02:0a:2e:6a:b0:32:e0:e4:39:ac:b3:eb:69:d3:35:
         67:5d:3c:3c:08:17:6d:70:0d:dd:e0:9d:11:76:aa:32:7a:bb:
         6c:f2:51:fb:50:1d:78:05:c7:73:a7:ee:7c:42:6b:62:7e:a5:
         eb:7d:42:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:27:32 2026 by rpki-client