Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa
File:                     1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa (raw, json)
Hash identifier:          2VlhFtlVtFLY+yU8FBVnXIDtkLsexC/aMBbs+mfDE1w=
Subject key identifier:   13:37:66:D9:47:18:A2:DE:92:C8:BE:3D:11:3A:27:80:74:1D:0E:29
Certificate issuer:       /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial:       010D0C9F4328584F4277FCEC71363DE4AE7CC780
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     964
IP address blocks:        23.140.96.0/24 maxlen: 24
                          23.140.97.0/24 maxlen: 24
                          23.140.98.0/24 maxlen: 24
                          23.140.99.0/24 maxlen: 24
                          172.111.12.0/22 maxlen: 24
                          204.9.36.0/22 maxlen: 24
                          2602:fe54::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:fc:ec:71:36:3d:e4:ae:7c:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=59bbf844-fcba-4362-8911-8a4c6daceff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a6:13:62:ec:06:75:d4:6d:77:b2:ee:03:25:
                    9c:a2:cf:30:24:ce:6e:f1:6c:e7:73:47:34:4b:c9:
                    d6:ca:9b:7a:a6:74:96:22:5c:96:dc:62:9a:a1:aa:
                    b4:86:52:c3:b6:b8:a0:be:df:1f:c6:64:d6:4d:e3:
                    cd:21:c8:c6:3a:a6:30:e4:ba:b5:77:92:ce:7a:50:
                    77:23:a5:38:61:de:f4:c6:8d:aa:64:d9:31:9b:e0:
                    f7:31:33:66:1a:15:ef:11:e8:70:70:8c:f0:d3:e3:
                    8e:dd:d6:64:56:40:0a:34:1d:94:02:30:8b:c4:89:
                    7e:74:7a:55:35:ff:22:02:e1:5e:c1:12:86:34:55:
                    c7:ed:f2:30:74:c6:c2:ae:ff:12:a0:3e:64:17:e3:
                    98:f1:8b:46:d4:35:d2:89:89:1e:7e:0f:12:e1:66:
                    b5:c0:7d:eb:9f:14:01:e0:f7:d2:62:4b:21:ef:25:
                    dc:49:98:28:2b:ea:71:b8:c1:d9:ef:56:cf:50:40:
                    93:c8:a4:6f:25:2a:25:be:2c:a2:21:9f:7f:82:b0:
                    b9:c7:89:62:a5:ca:aa:05:ca:90:31:1b:f8:a0:5f:
                    7b:42:2a:74:6d:2f:45:d4:59:7d:34:7e:7c:75:14:
                    a8:b7:5a:c5:99:09:78:31:49:36:3c:89:ac:8b:53:
                    33:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:37:66:D9:47:18:A2:DE:92:C8:BE:3D:11:3A:27:80:74:1D:0E:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl

            X509v3 Authority Key Identifier:
                keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.96.0/22
                  172.111.12.0/22
                  204.9.36.0/22
                IPv6:
                  2602:fe54::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:68:23:e8:f1:5a:7c:48:5d:06:01:ba:66:49:3d:c0:e5:8b:
         17:69:b7:ab:ab:47:0f:cd:35:0a:c4:fe:7b:a5:30:80:bd:e2:
         09:2e:0a:82:7a:ef:90:5d:88:e0:d3:8a:16:a9:64:3f:6f:dd:
         af:12:2e:68:68:87:a2:43:9b:c3:80:f1:cd:bf:75:c5:a8:e2:
         77:9d:5d:6e:ed:92:f7:d9:6f:41:84:b5:64:96:f0:ed:06:b4:
         80:88:ec:77:e3:73:58:4e:16:3d:21:9c:22:50:26:b0:07:2c:
         90:3e:e4:ec:38:21:87:09:5b:f5:2e:91:4d:dd:49:31:bb:19:
         1c:bf:83:26:31:1b:cc:0f:29:18:28:e0:d3:e4:fa:49:fc:08:
         d5:8c:a4:5f:73:d6:40:16:2a:23:4b:08:19:d4:7e:ad:75:33:
         b6:28:fd:d3:e1:9c:fc:40:55:6d:a6:97:18:f6:cf:af:55:5f:
         6d:95:7a:2e:fd:7b:8e:d2:9a:40:17:b2:e3:7f:ff:1b:bc:0c:
         a1:28:b3:0b:94:c4:e3:74:65:82:18:0c:25:6a:9f:73:88:2e:
         2e:f0:98:fe:e6:4b:6b:bf:e6:dc:6e:d0:b3:f1:49:cd:0a:c5:
         46:ca:83:db:6b:a9:1e:f6:c3:2d:19:77:85:2c:e1:45:67:ce:
         23:22:fc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:44:58 2026 by rpki-client