Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/fa748556-faf0-30b0-a6b7-1631ab2d0769.roa
File:                     fa748556-faf0-30b0-a6b7-1631ab2d0769.roa (raw, json)
Hash identifier:          AAPJ/vhCN7/7VCUFq1MNs5zJU5sXTH96Nafz1ZP9iKs=
Subject key identifier:   49:FA:DE:86:90:3F:37:4F:4A:B9:88:CE:D1:37:F8:8A:2E:4F:31:04
Certificate issuer:       /CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7
Certificate serial:       010D0C9F4328584E86F50499753BBD3B7511EA10
Authority key identifier: 1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/fa748556-faf0-30b0-a6b7-1631ab2d0769.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     214483
IP address blocks:        23.131.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f5:04:99:75:3b:bd:3b:75:11:ea:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=3e9c7050-05b3-4b1e-99e0-896978ae91ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:36:47:28:1f:84:cb:4f:e8:7d:6f:86:93:3d:
                    3f:00:b0:1e:0d:0a:2c:9d:04:3a:c1:a0:3e:07:c1:
                    f3:ac:d5:a7:d6:3a:5d:cc:23:68:11:66:98:da:5e:
                    38:f6:0a:6b:52:00:da:1c:63:51:84:68:70:62:50:
                    ad:c9:b9:db:82:94:c2:05:af:35:f2:d5:b0:a1:c4:
                    fc:a6:71:a6:f3:dd:11:12:e7:44:bc:45:e5:88:c4:
                    dc:30:6f:54:ce:ed:b5:16:9d:ac:f7:02:e4:b0:ca:
                    f2:13:94:96:71:26:00:13:6b:79:6d:d9:21:b0:45:
                    a0:89:90:8b:fe:a5:ed:d8:33:6a:be:86:54:f4:b4:
                    ce:76:6e:16:ce:21:35:1e:c2:9e:be:5d:de:96:97:
                    af:47:e7:21:02:a4:13:2d:11:ce:45:34:35:18:5b:
                    ae:80:da:cd:76:09:cc:a1:e6:25:17:7b:58:1f:dd:
                    01:06:c2:b9:b6:4a:92:ed:57:76:f1:e6:f3:07:42:
                    dc:a7:a7:ce:44:85:70:14:68:61:38:2b:58:10:e0:
                    d5:9d:52:a1:d9:ab:f2:fc:af:5b:9f:95:80:0c:53:
                    ab:a0:d7:4c:a8:f9:ae:24:1d:bb:1c:83:1c:fc:21:
                    2f:b1:43:a2:e8:82:76:eb:4c:d3:ac:a1:80:d6:b4:
                    13:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FA:DE:86:90:3F:37:4F:4A:B9:88:CE:D1:37:F8:8A:2E:4F:31:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/fa748556-faf0-30b0-a6b7-1631ab2d0769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:7b:85:0c:9f:b0:8f:27:81:a3:64:fc:92:4a:74:55:01:e9:
         ad:bc:80:84:91:ec:b9:c6:3f:a4:11:4e:97:e8:3a:98:49:b1:
         2f:dd:b8:d9:25:57:a3:d5:ec:11:b1:1a:43:cd:5c:e9:8c:3b:
         c5:ba:d6:9d:a1:e1:f3:14:9c:52:34:4e:72:6a:58:0f:7e:7b:
         4c:49:c8:9e:dd:20:cf:8b:8f:92:33:c9:ca:d0:52:c4:59:1d:
         36:b9:0c:a5:1f:0b:d9:2f:bb:13:f5:cd:3c:41:c4:41:ee:5f:
         f3:4c:6c:ac:15:55:e1:e1:7e:08:9b:27:c5:43:0b:6c:46:79:
         83:0e:7d:0d:70:c1:b0:06:6e:55:fa:2e:ed:31:74:ea:46:7b:
         1b:36:85:47:fd:43:d0:f2:94:f8:a9:e2:41:62:3d:bb:fb:49:
         91:6b:96:6d:61:14:a2:0c:df:14:97:eb:9a:18:d1:a7:65:46:
         03:80:f1:85:c4:45:20:c5:d1:b3:0d:76:83:04:27:7f:08:80:
         f5:b3:7c:22:99:01:ec:21:38:bc:0d:3e:1b:18:fb:73:a7:58:
         f3:2a:62:c2:4f:72:0d:62:f6:c8:49:3e:34:a2:43:f9:f0:8a:
         0f:f6:2d:8f:a2:ec:5e:c1:f1:cd:17:e9:b1:e9:a1:2e:53:bc:
         0f:96:1a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:05:53 2026 by rpki-client