Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa
File:                     f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa (raw, json)
Hash identifier:          oNA0ghZPjablzXDDvmjnGCEF+oEywVu912Gfty3WrdQ=
Subject key identifier:   9B:7B:D4:EC:4B:6D:22:91:F8:97:0F:93:CF:C9:30:05:FD:16:BC:4A
Certificate issuer:       /CN=391a6c01-da6c-449a-9b50-ba54fb84039a
Certificate serial:       010D0C9F4328584F49754B41BA8D3BA1C2668BB0
Authority key identifier: D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     209242
IP address blocks:        23.145.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:4b:41:ba:8d:3b:a1:c2:66:8b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=391a6c01-da6c-449a-9b50-ba54fb84039a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=2ea84955-86e4-4ce4-b682-9164b1dc262c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:7c:d7:fc:44:a1:40:06:7b:4f:3f:af:94:e3:
                    60:70:98:fe:58:fe:19:d9:42:7e:19:fd:5f:3a:d6:
                    f7:22:18:58:ae:e4:35:3c:3f:a5:25:c8:2e:e9:3b:
                    b3:87:f9:cc:b5:10:8a:da:84:eb:9b:93:34:98:c2:
                    27:9d:95:89:13:ef:51:d1:40:87:6a:30:cb:6f:7e:
                    9b:0d:89:0b:f9:1e:7b:7e:5d:7a:b9:d2:54:74:e7:
                    16:d1:fe:f0:74:ac:b4:8d:8e:6b:aa:3b:e6:99:ee:
                    f6:d5:ee:ae:0d:a8:00:73:71:42:83:0d:1a:94:9f:
                    a3:ea:07:63:73:50:f9:89:0f:a0:b6:f5:21:a3:8e:
                    2d:34:73:0e:da:68:06:a1:4d:67:97:6b:c8:28:97:
                    ca:60:9e:0a:c9:c0:f4:af:81:22:69:5d:20:d3:de:
                    57:23:27:8d:6d:df:51:f0:e6:d3:ff:b2:9c:c4:9b:
                    8e:41:5c:bb:12:68:62:a8:24:4c:d3:f8:ca:83:94:
                    fb:03:c1:94:3b:56:39:1a:80:30:1f:33:54:81:3d:
                    7f:e3:5c:28:09:06:13:b8:e2:45:af:05:2a:6f:08:
                    b7:e1:94:02:55:e1:bd:1b:9c:29:18:0c:0e:c4:2f:
                    18:fd:96:c2:78:69:d4:1a:9f:9b:82:60:5a:2d:ca:
                    67:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7B:D4:EC:4B:6D:22:91:F8:97:0F:93:CF:C9:30:05:FD:16:BC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl

            X509v3 Authority Key Identifier:
                keyid:D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:1a:44:b0:dc:07:1f:7c:65:eb:62:67:ca:c9:9f:2d:fc:95:
         0e:d4:03:a3:38:f9:fd:aa:9d:a2:d1:91:ec:b8:94:d1:00:f7:
         bc:77:b7:00:1f:f0:72:ba:e4:e2:3c:bb:32:e6:e6:61:69:00:
         30:d3:c7:c7:6a:51:2a:32:f1:33:d8:c4:ae:ec:76:9c:ca:e7:
         06:e6:fe:0c:f7:40:d9:03:50:7f:e9:5e:fd:57:ff:22:65:bc:
         20:d0:00:51:e8:cc:4a:25:1e:70:a6:b5:2c:70:eb:97:5f:e0:
         93:9e:13:76:72:6d:3c:d0:44:1c:2b:14:63:99:ed:e4:24:fe:
         e1:02:35:c8:8b:58:e0:97:bc:74:a7:c6:d9:de:ac:0d:e6:69:
         ee:80:4e:b2:9e:58:25:8e:07:b5:38:78:78:64:1a:ea:21:74:
         c4:16:ef:8d:7f:7b:c7:2d:d0:8b:da:61:fc:7e:d9:f8:f6:f2:
         f4:2d:43:11:52:a8:6f:6a:35:28:0c:6e:07:ee:99:e8:cd:a7:
         1f:41:3f:bc:2c:78:28:d9:ba:3a:73:1a:4f:e3:26:0b:0d:71:
         d4:b8:cd:37:dc:84:38:2d:d9:5f:91:69:9f:2a:86:58:b8:8b:
         66:0e:92:4a:d9:df:3c:64:01:36:f8:8b:29:ed:e2:b6:dc:c2:
         66:4d:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:26:36 2026 by rpki-client