Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/a16a19b1-64d1-353b-8020-8970bee04bbd.roa
File:                     a16a19b1-64d1-353b-8020-8970bee04bbd.roa (raw, json)
Hash identifier:          IHtiVWZfzSSf0Ym5Rcrxpj+E/5eFYkhPR+APVug/h70=
Subject key identifier:   EB:A6:0A:A9:5F:06:37:B3:E6:2C:25:B4:FF:83:93:18:85:08:AA:17
Certificate issuer:       /CN=b3642034-3a8a-4858-abb3-8e2b429a1376
Certificate serial:       010D0C9F4328584F03A79053D5C357D9674F7F00
Authority key identifier: 35:82:A7:1E:56:7F:83:97:CC:41:D0:90:E0:C3:03:29:B9:29:09:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/a16a19b1-64d1-353b-8020-8970bee04bbd.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     46574
IP address blocks:        23.131.4.0/24 maxlen: 24
                          2602:f76e::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/b3642034-3a8a-4858-abb3-8e2b429a1376.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/b3642034-3a8a-4858-abb3-8e2b429a1376.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:90:53:d5:c3:57:d9:67:4f:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3642034-3a8a-4858-abb3-8e2b429a1376
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=bf67a359-338a-4d6a-9b6e-d05e9f295c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4b:66:ee:25:1b:a0:06:f1:01:bb:bc:29:aa:
                    9a:80:5e:3a:bc:6b:1f:c9:ea:37:e7:8c:5c:b7:23:
                    7d:a4:e1:26:67:16:af:e9:c3:da:96:54:fb:38:8f:
                    d4:b3:68:5a:29:78:34:fb:31:12:7d:e4:79:33:1d:
                    87:f5:93:5f:51:31:fc:54:93:e6:18:f2:25:12:ae:
                    9e:cf:bb:95:29:82:fa:8c:93:db:9c:26:fd:8a:11:
                    54:1d:92:12:b9:0f:03:c7:ed:a8:7b:8b:5e:61:33:
                    52:27:ac:cb:8c:cf:f8:0b:75:d5:bf:89:c2:bd:4b:
                    eb:9d:fa:3c:c5:d7:bc:3d:b6:6c:ac:07:82:61:c7:
                    ac:49:82:5b:0b:e1:a0:0d:9e:7b:3a:99:70:ae:62:
                    0d:a5:0e:d4:1a:58:bc:ad:5d:38:9b:36:cb:92:c8:
                    a9:7f:a3:ba:38:25:9c:ea:62:96:f0:b6:d9:82:99:
                    d6:69:96:42:db:bf:e4:bd:37:98:c3:02:07:a1:b5:
                    6a:fe:be:73:be:2a:d7:2d:9a:82:fb:2e:88:04:a9:
                    33:3f:c7:8f:a3:69:72:b0:47:41:85:1e:c6:e1:95:
                    7e:88:e3:c1:26:78:89:d8:4a:f0:43:09:de:4b:27:
                    36:87:9f:14:69:09:70:20:6b:67:60:de:e3:70:53:
                    13:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A6:0A:A9:5F:06:37:B3:E6:2C:25:B4:FF:83:93:18:85:08:AA:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/a16a19b1-64d1-353b-8020-8970bee04bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/b3642034-3a8a-4858-abb3-8e2b429a1376.crl

            X509v3 Authority Key Identifier:
                keyid:35:82:A7:1E:56:7F:83:97:CC:41:D0:90:E0:C3:03:29:B9:29:09:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.4.0/24
                IPv6:
                  2602:f76e::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:55:c1:90:b5:12:ce:d0:cf:d2:91:15:83:d7:6e:01:99:5c:
         19:da:47:82:85:9c:5a:a3:76:bc:7f:1f:79:59:ae:a5:bc:82:
         7c:5f:cf:d0:e2:93:28:72:2b:f5:7d:78:73:9a:58:db:23:46:
         9c:75:82:ef:9c:7b:38:c5:2e:75:2d:55:e4:b7:6f:b0:79:5a:
         37:f3:75:99:6b:b1:7d:b2:67:7a:1e:a0:8e:76:52:04:60:fa:
         6e:81:66:89:4a:90:74:5f:c4:a0:8f:d8:08:95:12:19:a0:fa:
         49:a7:42:e9:6d:00:b1:46:6e:2d:86:a1:c7:39:9b:96:e6:0f:
         dc:1c:d2:7c:30:a0:aa:43:4b:90:90:a2:15:3d:d2:24:95:17:
         94:2d:24:28:db:14:07:e5:f9:59:35:ae:23:65:f2:13:89:7f:
         f4:33:89:55:65:cd:28:c9:25:6a:f8:07:e6:30:85:27:64:d5:
         a9:29:6c:f2:a4:4a:0a:e7:a1:ed:ae:e1:12:6f:c7:6b:88:5c:
         47:07:c5:61:f4:2c:d0:b1:2d:71:05:be:91:0a:4f:53:96:8c:
         e3:9f:63:0b:12:9a:82:2c:99:0b:06:7d:b5:5e:ce:fe:58:01:
         40:a5:83:c9:33:db:8f:6f:10:91:f8:4c:f0:7b:6b:e9:0b:d0:
         1a:84:b6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:00:14 2026 by rpki-client