Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/f396775b-4877-3d4c-9ad8-0ef196884b89.roa
File:                     f396775b-4877-3d4c-9ad8-0ef196884b89.roa (raw, json)
Hash identifier:          IlC3WIJKss4ftc1Ox91caKiZa/vbZPNSl9zQWzKo9qQ=
Subject key identifier:   42:55:5E:37:42:E6:57:29:FE:EC:D2:E6:09:67:CC:31:17:92:7D:39
Certificate issuer:       /CN=7aebe767-bae5-4599-9f64-207d0268f48c
Certificate serial:       010D0C9F4328584F15CD05E276949FF73EC1C280
Authority key identifier: B6:65:27:7C:E0:48:B4:D3:52:CC:88:47:97:6D:0A:57:BB:78:65:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/f396775b-4877-3d4c-9ad8-0ef196884b89.roa
Signing time:             Sun 06 Sep 2026 13:00:12 +0000
ROA not before:           Sun 06 Sep 2026 13:00:12 +0000
ROA not after:            Sat 05 Dec 2026 14:00:12 +0000
asID:                     395886
IP address blocks:        23.166.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7aebe767-bae5-4599-9f64-207d0268f48c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7aebe767-bae5-4599-9f64-207d0268f48c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:15:cd:05:e2:76:94:9f:f7:3e:c1:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aebe767-bae5-4599-9f64-207d0268f48c
        Validity
            Not Before: Sep  6 13:00:12 2026 GMT
            Not After : Dec  5 14:00:12 2026 GMT
        Subject: CN=bca793bb-1220-4f20-9d08-b15bc865b0ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a9:f6:2f:db:e2:94:31:20:e0:d4:fb:76:51:
                    20:0e:bf:86:3e:a6:f5:46:26:b5:e3:e2:36:18:42:
                    e4:1b:77:80:70:42:ba:d4:81:74:8b:b7:a5:cc:62:
                    8e:46:c6:e6:41:ef:57:47:37:0d:61:14:87:ef:20:
                    8d:a7:be:70:0f:d5:c9:da:ad:79:26:5e:5a:06:82:
                    69:e2:88:a3:50:1f:25:c3:36:68:d7:a2:4d:29:ff:
                    40:b2:7e:df:8a:27:5f:b5:15:20:80:44:0a:90:dd:
                    82:6a:f9:7a:a7:3b:6c:76:12:2c:e7:39:f8:53:55:
                    98:96:2f:c2:e4:e6:1e:f7:e9:36:41:57:b9:06:bf:
                    38:a3:9a:7e:33:71:85:82:0d:8a:d0:4f:74:db:c5:
                    ad:de:21:db:81:9d:3a:1a:6a:d7:27:10:a2:2f:b2:
                    0c:1e:0d:04:81:e8:8b:dc:c4:c9:9e:f7:a7:b1:12:
                    46:0f:14:4a:c0:2b:cb:02:e4:c5:93:1f:1d:f3:5c:
                    f7:29:bf:d8:b5:de:ed:87:2a:5a:93:43:a8:b6:85:
                    c7:47:e9:7f:bc:7f:41:10:54:ed:c3:9b:fa:64:74:
                    7e:85:ae:50:ae:15:9a:eb:31:91:40:9b:d0:d2:bd:
                    3d:8f:0d:7b:3f:8f:c8:d5:f7:dc:13:d3:5e:d6:90:
                    f3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:55:5E:37:42:E6:57:29:FE:EC:D2:E6:09:67:CC:31:17:92:7D:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/f396775b-4877-3d4c-9ad8-0ef196884b89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c/7aebe767-bae5-4599-9f64-207d0268f48c.crl

            X509v3 Authority Key Identifier:
                keyid:B6:65:27:7C:E0:48:B4:D3:52:CC:88:47:97:6D:0A:57:BB:78:65:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7aebe767-bae5-4599-9f64-207d0268f48c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:26:d0:6f:6b:e0:29:53:59:4d:40:21:3e:cc:7a:23:8e:bf:
         bc:8d:87:34:66:b8:7d:71:7d:2a:2c:5a:e6:64:39:34:07:cc:
         db:f8:da:1b:8f:12:61:57:e6:50:da:db:11:4d:60:a6:06:41:
         b4:ad:4a:47:b0:b8:31:16:ab:70:3f:32:2f:c9:b9:10:86:1f:
         52:d6:42:85:0b:27:cb:9c:fb:ca:18:75:41:c3:3c:30:ac:73:
         3d:c2:3e:2f:a4:7c:59:5b:95:f2:f1:28:bf:37:f9:51:55:54:
         49:ac:73:08:c9:6b:04:fb:15:43:e3:3b:1e:0d:48:7e:e5:b6:
         8d:1b:dd:83:0d:ff:7e:c5:c3:5e:97:60:d8:a8:48:79:3e:69:
         bd:d5:89:d7:7d:c6:e8:bb:67:8a:1c:d5:8a:3d:82:87:15:69:
         34:5c:24:7f:3f:6e:5a:b7:0b:50:be:5e:c6:70:78:07:fa:d8:
         0f:4d:db:e9:56:45:7e:cb:85:6d:46:00:ee:51:60:36:a7:dc:
         77:6d:60:7f:70:ed:d8:0d:9d:53:12:3f:44:b3:bd:86:2f:a8:
         84:f6:7a:65:55:bb:22:50:52:47:76:22:f1:1c:05:83:1f:88:
         ab:65:1d:13:35:c8:11:59:60:7b:18:8a:63:a0:9b:55:ac:1f:
         7e:d1:8b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 18:23:09 2026 by rpki-client