Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/71614124-d8cd-3cfc-83ad-fb27d9571197.roa
File:                     71614124-d8cd-3cfc-83ad-fb27d9571197.roa (raw, json)
Hash identifier:          On+CfgeejqRy0c8qNYMwDs6mdD4oIuIPYHRvP2mHPi0=
Subject key identifier:   7E:F4:45:48:D3:E3:2A:DF:80:81:63:E3:C1:89:02:FE:A6:C0:2A:DD
Certificate issuer:       /CN=d978ad6f-4614-4fcf-9d00-9f30e1a82674
Certificate serial:       010D0C9F4328584FC3011ADF238F48A6BB474080
Authority key identifier: F7:D1:FE:EA:1C:EC:BE:6D:45:87:65:7F:4A:53:11:CE:D8:B2:7F:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/71614124-d8cd-3cfc-83ad-fb27d9571197.roa
Signing time:             Sat 07 Nov 2026 14:00:12 +0000
ROA not before:           Sat 07 Nov 2026 14:00:12 +0000
ROA not after:            Fri 05 Feb 2027 14:00:12 +0000
asID:                     8143
IP address blocks:        23.149.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/d978ad6f-4614-4fcf-9d00-9f30e1a82674.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/d978ad6f-4614-4fcf-9d00-9f30e1a82674.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c3:01:1a:df:23:8f:48:a6:bb:47:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d978ad6f-4614-4fcf-9d00-9f30e1a82674
        Validity
            Not Before: Nov  7 14:00:12 2026 GMT
            Not After : Feb  5 14:00:12 2027 GMT
        Subject: CN=c7d07e27-4526-4f9d-96a2-16670ced58fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:12:a2:f7:27:d8:38:a3:cb:08:57:1d:f1:
                    3f:07:45:8a:1f:b8:06:8c:4b:2a:1f:d3:4c:e2:64:
                    ae:14:f3:4a:ed:80:8b:11:f4:84:6d:6c:6c:60:29:
                    bd:61:73:47:20:dc:b9:21:6e:5c:8f:4b:20:e9:08:
                    ce:0e:16:c2:cb:26:50:0d:b8:09:3d:65:07:da:e2:
                    3a:bc:82:f6:3a:7b:3d:24:34:b5:c6:f1:14:b3:62:
                    a1:86:c5:11:bb:ba:20:15:06:79:b5:79:eb:0e:73:
                    10:77:09:eb:43:e3:cb:f2:60:8b:a0:14:ae:e2:aa:
                    5c:7d:8b:a0:63:84:ec:7a:68:47:f8:3b:a5:5c:31:
                    ed:1a:43:25:8c:6d:86:b2:9f:a7:02:d9:57:b3:4f:
                    32:86:1d:8e:ff:92:cd:76:9d:3f:0f:10:1e:51:41:
                    1a:e4:5c:83:f0:a5:7c:b4:90:26:02:ff:f6:ea:d6:
                    5a:84:c6:5c:7e:56:5a:72:64:95:d6:ca:8e:bc:95:
                    de:3b:b0:33:6b:be:26:38:71:3d:0b:59:1c:2d:b7:
                    33:7c:d5:b1:87:07:e6:56:5a:b1:98:93:e2:6e:6f:
                    a6:ea:75:56:1c:4a:48:63:51:26:5f:09:17:58:4e:
                    36:69:fd:f4:07:ed:37:57:b8:ba:71:8b:35:0c:08:
                    f4:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F4:45:48:D3:E3:2A:DF:80:81:63:E3:C1:89:02:FE:A6:C0:2A:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/71614124-d8cd-3cfc-83ad-fb27d9571197.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674/d978ad6f-4614-4fcf-9d00-9f30e1a82674.crl

            X509v3 Authority Key Identifier:
                keyid:F7:D1:FE:EA:1C:EC:BE:6D:45:87:65:7F:4A:53:11:CE:D8:B2:7F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d978ad6f-4614-4fcf-9d00-9f30e1a82674.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:74:ed:cf:68:68:c7:2b:1e:06:e3:6e:50:30:4d:c1:6c:7e:
         97:92:07:f5:97:3e:70:5d:88:48:26:61:86:39:ea:0b:cf:31:
         da:f6:62:fb:5a:83:00:5a:49:30:38:57:fa:ac:62:db:52:6b:
         61:ad:67:d6:87:b3:4c:48:c5:05:ad:e4:8d:d4:a1:63:e8:b6:
         d0:46:06:3e:a3:5d:2a:f9:b6:6e:a6:75:7c:87:35:f2:4e:15:
         6b:45:fd:81:35:a8:60:8e:d7:82:1b:8b:02:c2:b7:31:5b:7d:
         6a:d0:f5:e5:5c:a3:4f:c1:fb:25:78:01:96:e3:25:3d:50:ea:
         87:09:85:f7:56:7c:a4:97:4e:70:a2:89:29:81:42:16:4b:3c:
         39:f4:63:01:64:d9:0d:a5:ed:dc:e8:04:ab:32:9c:11:12:1e:
         3f:04:99:13:c0:20:0a:c0:61:55:0f:34:6e:d9:92:42:4f:31:
         e8:ab:57:10:ac:fe:a0:a6:b5:d8:3f:f6:d7:85:1a:5b:3f:27:
         f7:2e:df:7e:8c:16:d5:c1:0e:45:95:5d:04:db:4a:62:93:a1:
         f0:ef:ea:45:f8:2a:93:a2:93:1b:93:80:db:2c:c9:93:dd:76:
         c9:3d:dc:8e:27:aa:42:1b:06:6c:76:8b:80:6c:e0:5b:23:75:
         7c:94:c2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:40:18 2026 by rpki-client