Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81c65099-fe30-40c1-8271-82b80c41d58b/7f2d2e97-9e90-3388-afab-f709047097c9.roa
File:                     7f2d2e97-9e90-3388-afab-f709047097c9.roa (raw, json)
Hash identifier:          KXNWQO8RwopGy1bCZGrVSRu7mrhgZbrSB010TTCRUeM=
Subject key identifier:   DB:48:AA:AB:EB:49:E5:D4:10:1E:0A:D6:4A:88:15:84:55:FB:A3:09
Certificate issuer:       /CN=81c65099-fe30-40c1-8271-82b80c41d58b
Certificate serial:       010D0C9F4328584E7E95052EF00BD3FCCC592100
Authority key identifier: 25:67:B9:21:C1:24:81:C9:C7:9C:5A:BE:9E:A9:04:47:CA:2F:ED:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81c65099-fe30-40c1-8271-82b80c41d58b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81c65099-fe30-40c1-8271-82b80c41d58b/7f2d2e97-9e90-3388-afab-f709047097c9.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     214483
IP address blocks:        23.150.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81c65099-fe30-40c1-8271-82b80c41d58b/81c65099-fe30-40c1-8271-82b80c41d58b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81c65099-fe30-40c1-8271-82b80c41d58b/81c65099-fe30-40c1-8271-82b80c41d58b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81c65099-fe30-40c1-8271-82b80c41d58b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:95:05:2e:f0:0b:d3:fc:cc:59:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81c65099-fe30-40c1-8271-82b80c41d58b
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=bc233964-1ad0-4c63-952d-7419aa2239c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fa:cd:11:a2:41:51:a0:d0:c9:f7:11:5c:5a:
                    af:56:51:d8:87:d6:88:f7:07:37:79:3c:c9:b5:5b:
                    d5:4c:a0:17:11:5f:66:6d:7f:14:04:7b:70:a8:9f:
                    12:66:b7:10:10:c1:36:40:61:55:47:e0:e9:ec:a5:
                    94:9d:d6:f1:60:06:11:59:80:4f:42:fb:7a:4e:3d:
                    d5:72:02:d3:ef:e9:01:9d:0b:53:e9:84:86:bf:be:
                    d0:61:7b:f6:01:14:a6:6f:e7:22:da:97:23:bb:8e:
                    23:bc:d8:23:3f:cd:6d:e1:a6:11:62:f4:28:f1:b1:
                    b7:b1:f8:d6:b1:00:f4:ba:ae:a7:d1:79:03:65:92:
                    c1:06:84:df:6e:a0:48:db:30:f4:4b:5b:6b:29:83:
                    a4:cb:1a:02:9d:e3:a9:c3:14:76:50:94:e4:f1:c1:
                    ad:73:c3:d7:ba:1a:68:7e:b6:df:db:49:ee:81:35:
                    ec:37:a0:c1:66:52:86:79:61:24:47:94:f0:b0:b4:
                    da:2a:aa:04:5a:64:86:b7:74:62:1a:c3:ee:d1:2b:
                    2c:68:27:e0:22:ab:07:f4:79:6f:a9:54:68:04:d4:
                    26:68:8f:fa:38:bb:b8:6b:4f:c3:51:d0:bb:01:92:
                    94:48:b2:24:81:0e:21:d7:9a:56:73:09:cd:5b:14:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:48:AA:AB:EB:49:E5:D4:10:1E:0A:D6:4A:88:15:84:55:FB:A3:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81c65099-fe30-40c1-8271-82b80c41d58b/7f2d2e97-9e90-3388-afab-f709047097c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81c65099-fe30-40c1-8271-82b80c41d58b/81c65099-fe30-40c1-8271-82b80c41d58b.crl

            X509v3 Authority Key Identifier:
                keyid:25:67:B9:21:C1:24:81:C9:C7:9C:5A:BE:9E:A9:04:47:CA:2F:ED:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/81c65099-fe30-40c1-8271-82b80c41d58b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0b:47:82:e4:f6:f9:e9:4e:fa:9e:28:10:e3:69:df:52:fd:
         94:45:ad:aa:8b:1f:c6:84:27:ef:5d:ef:df:8f:c2:7a:e7:4b:
         aa:ad:bf:02:ae:68:50:0c:77:96:e6:dd:34:d3:c9:7d:f3:fb:
         f5:e8:28:18:d6:ad:3c:8d:14:2e:83:3e:8f:81:15:4d:4b:51:
         8a:1f:66:04:b0:b7:df:49:e3:1a:10:9a:99:aa:f0:ea:f7:4a:
         02:27:d8:2d:0c:45:44:8a:30:4a:56:08:4d:51:17:a2:7f:49:
         40:a5:94:6b:61:24:82:14:40:c2:f1:e2:39:fe:42:1b:16:a0:
         b5:69:ee:98:49:3b:e3:9f:9b:76:51:a4:68:11:9d:52:c3:49:
         61:1b:b4:49:ca:57:13:58:c3:40:25:39:ef:99:00:50:12:55:
         db:f0:19:a0:f2:69:6b:f6:de:ca:65:8e:c4:b2:2c:6c:d2:dd:
         89:49:73:8d:5b:6d:66:a4:bd:c4:d3:29:dc:d8:cc:b3:cd:6c:
         57:f7:7e:17:3e:da:db:06:ba:00:10:dc:ac:58:de:5e:ea:e7:
         05:1e:06:19:21:da:fe:56:81:b1:be:75:57:1d:fe:5e:d1:32:
         9b:54:9e:7d:63:68:89:15:da:15:19:ca:c4:29:1a:7a:76:01:
         cd:ca:c0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:06:11 2026 by rpki-client