Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/09f5c911-e2b2-3955-a3bf-e5b22aece251.roa
File:                     09f5c911-e2b2-3955-a3bf-e5b22aece251.roa (raw, json)
Hash identifier:          MyI0YVG5gD+HXjtyjKQcuIuBUJ+BWsT4q1SMkDuDiu4=
Subject key identifier:   B4:4C:30:E7:07:2A:EE:CD:45:40:97:D5:55:BB:C5:82:72:05:9B:CD
Certificate issuer:       /CN=0002cb20-026c-453e-a998-7e9db1f7f47f
Certificate serial:       010D0C9F4328584F454292DCAB72755F45D8B600
Authority key identifier: DF:84:17:17:97:D6:4F:0F:71:6E:56:32:44:E4:D6:73:BA:18:52:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/09f5c911-e2b2-3955-a3bf-e5b22aece251.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     400529
IP address blocks:        23.164.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:92:dc:ab:72:75:5f:45:d8:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0002cb20-026c-453e-a998-7e9db1f7f47f
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=d64755e4-2f34-4b51-83e4-557b47c06fa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a7:5c:75:aa:0e:e2:3e:ad:55:1c:0d:a9:e1:
                    a2:10:0d:a2:b1:52:3d:df:b1:66:ac:72:a0:e0:79:
                    55:67:0f:da:2f:d5:f2:94:f2:c1:7d:2d:0d:40:62:
                    01:20:58:d7:bf:ae:53:bd:e2:dc:bb:2d:da:cc:06:
                    d8:e2:17:0d:43:13:d6:f4:c5:a4:63:df:74:c9:1e:
                    9e:f6:01:1d:94:70:5d:1a:a2:24:c8:0c:14:c1:a1:
                    b5:05:9b:86:2e:03:7a:ac:34:ea:b1:a1:71:12:ba:
                    7d:5a:f7:9b:80:1a:07:db:6c:c9:2d:b1:eb:8e:f7:
                    e9:be:42:3e:43:4a:cc:4c:c2:8b:93:56:2e:e9:0f:
                    ac:05:ac:11:92:a9:eb:e0:44:a7:dc:15:b3:73:53:
                    ca:e2:24:e5:8e:f8:ea:a9:0d:de:55:8e:38:03:ca:
                    2a:71:16:c1:20:97:4f:6f:b5:a4:f2:ec:10:13:5d:
                    ae:c6:34:bc:b5:d8:15:a5:da:49:a6:03:08:77:a2:
                    cd:21:17:21:d5:3f:b4:0e:37:be:a7:77:72:c6:41:
                    a3:a0:ea:1b:5c:91:c0:97:e5:36:5f:8c:47:8a:fc:
                    e1:11:5e:5c:92:8a:90:43:d2:dd:05:e2:56:6e:ab:
                    f3:c2:75:9d:4d:53:1b:74:e3:6e:47:ee:2d:5f:aa:
                    5e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4C:30:E7:07:2A:EE:CD:45:40:97:D5:55:BB:C5:82:72:05:9B:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/09f5c911-e2b2-3955-a3bf-e5b22aece251.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.crl

            X509v3 Authority Key Identifier:
                keyid:DF:84:17:17:97:D6:4F:0F:71:6E:56:32:44:E4:D6:73:BA:18:52:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:47:c4:bf:bb:14:36:c1:84:e8:7a:dc:fa:b4:18:cc:ca:16:
         dc:f6:89:fe:6d:47:9f:67:c2:05:25:3f:a8:4a:26:b5:68:73:
         3b:f5:38:e2:52:b7:a8:f9:40:2f:e1:9e:93:f1:ec:4d:c3:18:
         f0:99:56:dc:68:56:86:22:e3:0d:88:16:ec:22:2b:4f:30:61:
         41:06:c4:94:07:81:76:fb:47:d1:fa:7a:b1:8b:da:9e:b9:91:
         de:3b:cd:26:52:f6:67:69:76:96:7b:84:11:53:50:86:80:01:
         c5:b1:00:f0:06:bf:c8:cb:91:3f:69:a2:57:d1:31:64:dd:41:
         30:f0:b5:29:83:af:f1:6a:6c:40:95:d3:34:2c:d3:3c:2f:95:
         5b:68:c1:bb:4f:62:77:67:72:c5:43:cf:01:5d:7c:46:d7:ed:
         3b:25:27:1c:f9:43:50:f2:aa:77:de:03:e3:48:03:55:8a:bd:
         a5:59:87:de:41:ad:86:30:e4:bb:a0:8f:25:d2:05:ae:f7:c0:
         75:3f:f5:5f:79:cc:c0:15:ff:40:c5:14:4f:ce:80:ac:e7:25:
         be:24:bd:05:05:37:ff:00:82:b6:d6:06:46:7a:e7:51:aa:0e:
         6c:99:32:40:e0:10:0e:18:ad:16:ac:65:17:41:bf:60:f1:94:
         79:52:ca:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:46:42 2026 by rpki-client