Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/c9a67b93-189b-3a78-a08b-a944dbcd5319.roa
File:                     c9a67b93-189b-3a78-a08b-a944dbcd5319.roa (raw, json)
Hash identifier:          0iJqeLVlNCZigsFJIqhbv6qU0wNffapyOwY3aErImfI=
Subject key identifier:   DE:8F:E5:2C:96:1C:BD:A0:4E:78:5E:2B:4C:16:7A:CD:62:03:A4:90
Certificate issuer:       /CN=d651f6e5-66de-4793-8c12-2261d5e62118
Certificate serial:       010D0C9F4328584F506D492B1A0558B33BB6B5C0
Authority key identifier: 02:93:6E:0E:A1:47:CA:5E:AD:54:25:C2:72:EA:78:EE:DA:C0:3A:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/c9a67b93-189b-3a78-a08b-a944dbcd5319.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     26721
IP address blocks:        23.130.128.0/24 maxlen: 24
                          23.130.129.0/24 maxlen: 24
                          23.168.0.0/24 maxlen: 24
                          162.218.232.0/21 maxlen: 24
                          209.40.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:49:2b:1a:05:58:b3:3b:b6:b5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d651f6e5-66de-4793-8c12-2261d5e62118
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=72c4943b-14c8-457f-b071-949aecd1e2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:59:ed:ed:6e:8c:81:03:96:38:5a:23:2e:b5:
                    f3:b5:83:23:6b:c9:17:f8:ea:48:65:d7:0c:ed:b9:
                    05:97:cb:d9:6d:fc:71:cf:3d:c5:58:0b:55:4c:71:
                    17:04:c6:65:c2:4f:d5:40:61:b8:3f:cb:b2:64:fe:
                    3e:98:e3:c4:ab:7a:53:47:a9:b7:0d:da:2b:16:75:
                    5d:74:7f:44:08:f8:ac:76:3c:26:f2:46:8c:f5:1e:
                    3f:2d:8f:fa:eb:10:c3:4e:8c:08:7a:ea:d4:6e:a9:
                    f1:22:3a:db:4b:e7:8e:4c:47:b4:c3:c8:a3:f7:60:
                    7a:35:7a:c0:a5:f3:87:28:41:84:6d:62:4f:85:4c:
                    b1:82:4e:67:53:11:39:c9:f6:84:7b:0a:7c:41:80:
                    be:22:9b:e5:77:2f:a4:cf:00:51:6d:c2:81:a1:f6:
                    ca:98:b5:7a:20:96:20:fa:71:9f:76:31:48:aa:94:
                    f1:23:3f:bb:5b:16:86:76:74:d8:6e:65:79:83:e3:
                    11:c2:87:aa:f8:ed:70:b9:01:25:66:f7:b1:1c:8e:
                    51:e6:be:50:7a:4c:b6:e0:53:7b:5f:2a:68:cd:37:
                    d9:e5:d1:b1:26:e2:43:9f:6d:a2:95:71:96:b5:3d:
                    9d:30:c4:d6:41:4f:05:de:e4:d2:2e:a1:87:90:e6:
                    65:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8F:E5:2C:96:1C:BD:A0:4E:78:5E:2B:4C:16:7A:CD:62:03:A4:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/c9a67b93-189b-3a78-a08b-a944dbcd5319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118/d651f6e5-66de-4793-8c12-2261d5e62118.crl

            X509v3 Authority Key Identifier:
                keyid:02:93:6E:0E:A1:47:CA:5E:AD:54:25:C2:72:EA:78:EE:DA:C0:3A:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d651f6e5-66de-4793-8c12-2261d5e62118.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.128.0/23
                  23.168.0.0/24
                  162.218.232.0/21
                  209.40.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ea:7e:ae:b2:ba:c5:aa:5a:b9:cc:ef:8f:fd:93:b1:61:86:
         b4:9b:31:f0:61:60:bb:48:87:a3:c7:d8:73:75:92:d0:f7:9e:
         28:ce:01:99:95:74:3e:da:1a:2e:80:4a:74:c7:ed:85:bd:17:
         fa:84:b8:6c:e8:7d:12:54:6b:4a:6c:4f:55:e7:11:5d:f0:25:
         6e:10:08:7b:52:4e:17:4d:fc:3c:53:5e:67:ca:f4:cf:bf:04:
         23:b3:4a:90:bf:9a:97:52:c8:cf:61:ad:d8:ff:e8:79:49:84:
         53:cc:08:10:1e:16:d5:29:63:c3:dc:55:ae:81:ff:fc:a1:72:
         0c:bb:b6:2a:e9:22:5c:9b:17:b7:82:89:0c:f2:42:10:18:6e:
         fc:86:8f:22:a8:5b:b4:f2:0b:c1:02:8a:d8:9b:65:35:5e:75:
         ae:fe:35:a5:bd:89:a2:9a:2b:c9:50:79:26:eb:d4:b7:91:80:
         41:60:f5:bc:03:d4:3c:76:6a:20:5b:ae:f8:30:cf:09:fe:4b:
         16:6b:45:aa:23:c9:f2:c9:ec:b8:fe:6c:77:91:a0:b8:46:e5:
         82:23:91:2b:cd:a7:93:70:db:43:88:f4:f8:71:85:81:18:7e:
         7d:bc:ae:32:8e:d5:a1:51:2c:a5:14:e9:41:a9:03:ea:29:30:
         2c:05:01:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 04:38:27 2026 by rpki-client