Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08/392c442f-4976-38a3-baee-a5ba6a90ffec.roa
File:                     392c442f-4976-38a3-baee-a5ba6a90ffec.roa (raw, json)
Hash identifier:          nfcJmLygnDV1RjIgM3IbVkPvX4RvZn59jwFcqRjpIDc=
Subject key identifier:   F3:77:EE:B4:7C:F2:3B:61:B9:94:9B:92:20:4F:A8:41:69:A3:96:26
Certificate issuer:       /CN=b30fdc34-5ac1-47ab-b516-fc1c3adfaa08
Certificate serial:       010D0C9F4328584F4986F81452A2B64121409500
Authority key identifier: 7A:8C:BB:71:58:E6:E9:72:5A:87:4F:EC:3A:D5:CC:BE:84:19:79:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08/392c442f-4976-38a3-baee-a5ba6a90ffec.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     152179
IP address blocks:        23.141.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:86:f8:14:52:a2:b6:41:21:40:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b30fdc34-5ac1-47ab-b516-fc1c3adfaa08
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=ce73acb7-16ab-41cf-b00a-0dae597c8af9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7e:41:f9:9b:0c:2c:3b:4c:27:5c:05:0b:4f:
                    49:c4:ca:56:95:01:82:98:fe:46:3c:42:6f:73:c4:
                    57:93:cd:aa:d4:f9:8b:56:2b:ba:e2:57:dd:b7:d6:
                    78:c6:e0:6d:a7:ec:71:be:2d:e9:71:f2:e8:98:7d:
                    d6:09:d9:cb:6b:ec:df:6c:1b:2d:9c:b1:54:4b:66:
                    c7:e7:78:7f:80:7f:48:fb:53:18:2d:ef:04:37:0d:
                    83:73:76:02:0b:5b:fd:eb:8e:98:c4:9b:e9:0a:35:
                    98:c6:69:65:3c:d6:ab:58:c3:0c:b0:af:52:7a:19:
                    64:e7:b8:7c:8b:e2:7d:e7:43:83:26:5a:14:6b:b9:
                    8b:4d:1b:bf:69:51:7e:4b:51:5e:40:79:a5:0d:9b:
                    a0:a9:39:08:8c:76:a5:62:d2:24:e2:fc:61:8a:cc:
                    fa:0f:cc:df:a5:8c:3c:a2:61:06:bc:30:d1:3e:3e:
                    76:69:77:1e:b6:d2:c9:7c:9d:7b:c6:57:f2:a7:77:
                    f5:be:0e:87:a5:f4:c1:e2:5b:41:06:11:f3:48:ed:
                    65:81:07:0c:b2:24:9b:d5:d0:0f:01:65:50:95:ce:
                    ae:11:c0:a1:39:52:44:b3:f4:ea:b6:fc:d6:03:02:
                    46:23:27:10:33:fc:09:1d:ca:f6:92:f0:41:5a:50:
                    51:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:77:EE:B4:7C:F2:3B:61:B9:94:9B:92:20:4F:A8:41:69:A3:96:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08/392c442f-4976-38a3-baee-a5ba6a90ffec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08.crl

            X509v3 Authority Key Identifier:
                keyid:7A:8C:BB:71:58:E6:E9:72:5A:87:4F:EC:3A:D5:CC:BE:84:19:79:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b30fdc34-5ac1-47ab-b516-fc1c3adfaa08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c8:b3:84:1f:08:7f:9d:cd:c3:ba:4d:19:98:b5:81:e2:5c:
         62:e2:7f:b9:43:79:85:6a:ba:8e:e3:74:43:6f:5c:4a:0b:d7:
         d3:f6:4a:59:26:79:7a:69:1d:e2:00:11:6c:16:fa:19:e3:e5:
         b0:65:a8:58:2e:ca:a7:37:f3:c5:27:cf:8e:e1:8d:d3:bf:a6:
         12:ae:d1:79:04:95:95:17:3d:8c:cf:d3:15:14:0f:a3:85:69:
         18:46:12:01:da:38:56:90:12:1a:ea:44:fe:c9:2d:34:0c:0a:
         a0:10:db:0c:5a:16:d5:b4:5d:86:33:00:da:21:bb:e8:78:19:
         14:17:b3:a8:f4:c6:8e:64:48:a6:c8:38:6d:a8:2a:76:1a:4e:
         d5:06:39:f1:0b:a0:97:e9:42:10:91:9e:bc:9e:3f:90:91:ac:
         b9:4b:27:83:01:d1:e8:8e:46:c4:cb:8d:dc:2b:e1:83:e7:5e:
         d4:d0:e2:db:b8:98:ec:f8:78:bf:2c:40:e3:1b:e7:47:f5:77:
         cb:2f:b9:4d:f9:47:fb:24:01:aa:3a:65:0a:02:d1:8a:1c:1a:
         47:b1:e0:3a:c8:ca:5a:9b:5d:5f:3b:39:18:ea:b3:0a:83:19:
         14:6e:4b:25:82:c8:3f:48:55:b6:e9:17:91:ed:1e:ad:1e:b7:
         28:72:c9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:45:22 2026 by rpki-client