Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/91b03562-a425-4a97-88d6-e8fc007d6a4a/e33f95c4-122d-3bb7-a588-c6232209c813.roa
File:                     e33f95c4-122d-3bb7-a588-c6232209c813.roa (raw, json)
Hash identifier:          danXF7dqmclxCb6dRypBp9vbHWt5OVACj5mR6ZJDOVk=
Subject key identifier:   E1:D0:D8:35:22:0E:25:09:C3:C8:B6:73:55:83:CC:69:A8:A6:61:AD
Certificate issuer:       /CN=91b03562-a425-4a97-88d6-e8fc007d6a4a
Certificate serial:       010D0C9F4328584FC4831087B59CF9B5B0621600
Authority key identifier: A7:E6:DC:34:1F:79:39:3A:6D:0F:E1:F6:0D:8C:35:B1:01:C4:7E:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/91b03562-a425-4a97-88d6-e8fc007d6a4a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/91b03562-a425-4a97-88d6-e8fc007d6a4a/e33f95c4-122d-3bb7-a588-c6232209c813.roa
Signing time:             Sun 08 Nov 2026 02:57:58 +0000
ROA not before:           Sun 08 Nov 2026 02:57:58 +0000
ROA not after:            Sat 06 Feb 2027 02:57:58 +0000
asID:                     32205
IP address blocks:        23.167.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/91b03562-a425-4a97-88d6-e8fc007d6a4a/91b03562-a425-4a97-88d6-e8fc007d6a4a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/91b03562-a425-4a97-88d6-e8fc007d6a4a/91b03562-a425-4a97-88d6-e8fc007d6a4a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/91b03562-a425-4a97-88d6-e8fc007d6a4a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:c4:83:10:87:b5:9c:f9:b5:b0:62:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91b03562-a425-4a97-88d6-e8fc007d6a4a
        Validity
            Not Before: Nov  8 02:57:58 2026 GMT
            Not After : Feb  6 02:57:58 2027 GMT
        Subject: CN=3e7d9fe9-8d08-4052-bab3-676da7d6d95b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:e5:1b:7e:cd:8d:c6:da:d6:37:92:4b:e0:
                    a1:d9:5e:1f:86:c7:cc:e4:bf:34:42:68:72:6f:77:
                    39:cb:ca:d0:be:4f:d7:11:05:9d:15:c9:69:d6:d0:
                    05:96:38:44:4d:f8:b4:60:2e:af:c8:cc:c7:31:a5:
                    38:22:a5:24:9b:ba:ec:79:86:48:40:f1:b7:0a:1e:
                    47:e9:38:4e:fa:58:44:1d:db:58:dd:3d:20:a4:82:
                    00:04:33:83:f9:ff:d1:c4:ea:5b:7a:f4:23:b0:cb:
                    12:d8:14:3a:69:13:1a:e2:2c:36:c6:98:13:66:86:
                    72:10:aa:8c:72:af:40:89:b0:6e:f1:d0:46:70:86:
                    ca:53:b6:0f:96:4c:18:cb:4c:4d:53:bc:22:57:74:
                    36:f8:39:7f:1a:36:ed:76:a1:8c:a5:2e:d0:73:a0:
                    9b:1a:9f:da:51:13:59:5b:fd:f2:d8:23:7e:9e:6d:
                    cf:d4:67:4b:7f:e5:fe:92:eb:37:ee:18:ea:d6:22:
                    ae:32:6a:6c:18:a4:e8:be:44:f1:73:88:cc:b4:e5:
                    59:be:0c:f2:2a:82:37:da:8e:c9:26:26:00:29:7e:
                    65:83:d5:80:18:f5:d6:87:da:79:88:dc:d9:db:be:
                    12:f9:04:25:a3:25:bb:bf:b6:04:81:13:30:1a:8c:
                    d8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D0:D8:35:22:0E:25:09:C3:C8:B6:73:55:83:CC:69:A8:A6:61:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/91b03562-a425-4a97-88d6-e8fc007d6a4a/e33f95c4-122d-3bb7-a588-c6232209c813.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/91b03562-a425-4a97-88d6-e8fc007d6a4a/91b03562-a425-4a97-88d6-e8fc007d6a4a.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E6:DC:34:1F:79:39:3A:6D:0F:E1:F6:0D:8C:35:B1:01:C4:7E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/91b03562-a425-4a97-88d6-e8fc007d6a4a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.167.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:f5:fd:01:a2:91:7f:72:12:cd:ae:62:19:90:29:6c:d7:04:
         a5:73:19:bc:cd:2b:46:a2:e0:a6:4c:8c:62:a4:19:6e:79:eb:
         42:20:65:a2:f9:6e:a0:26:44:e8:1e:d4:10:e9:27:ac:b7:1f:
         30:3c:d3:82:97:d4:37:3f:bb:b5:e8:ba:4c:05:0f:c7:13:ff:
         47:9f:d7:39:23:28:86:d4:38:5e:ea:13:3e:18:ba:a6:d9:0c:
         d3:fb:80:e5:b4:7a:06:d0:e1:66:65:30:e8:2f:78:7c:cc:8c:
         d6:52:77:55:ea:c8:62:75:c5:ca:a6:a2:a1:99:4e:7a:b6:84:
         cf:2c:4e:f7:9d:4d:e2:68:da:c9:36:be:e7:0d:7e:76:88:2b:
         3f:a6:bb:31:77:2c:5c:4d:c5:a0:fe:9f:62:24:46:86:8b:a5:
         5d:a2:51:c0:83:ca:8d:65:88:9e:42:bd:76:bd:dc:0b:5c:e8:
         99:f7:29:da:68:c5:d0:ef:22:ae:56:dc:43:f3:3f:0d:57:ab:
         f3:c4:82:ad:b0:41:7e:ef:b7:84:ad:df:50:99:7a:9e:44:b2:
         e1:9b:81:24:22:30:64:bb:3b:32:35:50:04:38:1b:89:3a:6e:
         f0:c4:b7:e8:80:1a:59:3a:9f:93:ff:ef:39:e6:db:f9:df:2e:
         12:00:27:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:36:55 2026 by rpki-client