Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/4a913d81-0e67-3e00-b35d-2050a6f6f72e.roa
File:                     4a913d81-0e67-3e00-b35d-2050a6f6f72e.roa (raw, json)
Hash identifier:          oBx2a+b7/OnCnBziGaNmNamMVfh4AlconPt8HWrbxmA=
Subject key identifier:   89:7D:51:18:2C:C4:73:91:29:92:4D:99:33:91:C1:12:8D:84:28:5D
Certificate issuer:       /CN=23a36039-999e-482c-a907-eb5291746b2b
Certificate serial:       010D0C9F4328584FB3DD85C43976BDE82297DD80
Authority key identifier: FA:B5:3B:D4:74:47:50:BA:0E:F9:B4:9C:98:8C:20:DD:87:78:66:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/4a913d81-0e67-3e00-b35d-2050a6f6f72e.roa
Signing time:             Mon 02 Nov 2026 03:51:29 +0000
ROA not before:           Mon 02 Nov 2026 03:51:29 +0000
ROA not after:            Sun 31 Jan 2027 03:51:29 +0000
asID:                     139613
IP address blocks:        23.166.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/23a36039-999e-482c-a907-eb5291746b2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/23a36039-999e-482c-a907-eb5291746b2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b3:dd:85:c4:39:76:bd:e8:22:97:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a36039-999e-482c-a907-eb5291746b2b
        Validity
            Not Before: Nov  2 03:51:29 2026 GMT
            Not After : Jan 31 03:51:29 2027 GMT
        Subject: CN=5854f42e-e8d8-480d-a427-5e2440dac952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d6:dc:ca:a2:b0:52:1a:43:d5:37:cf:3e:f6:
                    8d:80:e6:77:b8:c8:18:23:48:50:69:c3:e3:8c:4c:
                    3d:21:a4:42:14:dc:78:d0:cc:13:2a:bc:6a:24:5a:
                    a7:e3:b9:28:27:53:15:bf:6e:8a:22:23:5c:14:07:
                    80:6f:45:f2:16:67:ca:b0:7d:c7:d9:19:66:6e:71:
                    17:88:ea:12:78:76:74:a8:25:35:6a:a1:87:1e:38:
                    25:71:51:06:ab:76:a2:02:7e:ca:10:eb:9a:ca:c5:
                    ed:23:13:33:50:d6:18:60:c9:71:8e:94:06:07:e9:
                    82:48:d1:9b:66:aa:c3:dc:4c:47:73:dd:7a:55:53:
                    72:4b:fd:5d:38:64:5b:3c:0f:a9:64:b6:81:13:41:
                    b8:da:54:ba:3a:39:4c:3d:4a:42:9a:a2:78:2b:dc:
                    2f:3a:dd:94:a5:93:50:4e:bb:60:9b:ea:96:42:56:
                    a2:cc:fe:a4:d8:a8:87:ee:27:35:68:5a:7e:7d:0c:
                    a1:94:c2:44:8e:70:bd:f9:4d:20:2b:db:8b:7c:29:
                    4a:81:28:81:8d:54:5e:b0:3d:86:f9:f5:91:5c:8a:
                    f4:50:5b:3a:b9:c8:e4:07:72:09:cd:03:d8:13:bf:
                    44:bb:12:2c:45:86:55:e0:a1:df:f1:dc:68:88:31:
                    a0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7D:51:18:2C:C4:73:91:29:92:4D:99:33:91:C1:12:8D:84:28:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/4a913d81-0e67-3e00-b35d-2050a6f6f72e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b/23a36039-999e-482c-a907-eb5291746b2b.crl

            X509v3 Authority Key Identifier:
                keyid:FA:B5:3B:D4:74:47:50:BA:0E:F9:B4:9C:98:8C:20:DD:87:78:66:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/23a36039-999e-482c-a907-eb5291746b2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:60:5c:ff:9a:04:f8:f3:e4:e2:02:13:ab:ab:3b:6a:65:72:
         d9:96:64:c0:79:48:5a:5d:40:ff:ec:bf:95:6f:05:7c:97:bb:
         80:db:79:1d:dc:90:17:a8:bf:aa:45:a5:cc:e3:75:ed:09:c3:
         fd:d1:99:ff:e2:a4:43:c4:64:e7:c7:e0:ac:97:67:21:bc:48:
         b5:23:39:4c:b3:69:f3:80:e6:14:38:7a:a3:88:71:a8:22:49:
         c9:ff:ec:72:b9:49:01:e6:82:35:f5:3c:27:1a:97:53:a5:36:
         2e:31:e4:b9:c2:b4:0c:af:7a:4b:07:c4:12:61:61:4d:05:e0:
         06:37:0a:92:3b:6f:96:ea:42:56:9f:9c:43:47:68:4c:aa:9c:
         01:90:3c:0b:7b:ec:74:e2:03:91:2c:60:e0:b3:a0:e8:95:bf:
         ab:70:62:35:0c:57:7c:b4:e8:1f:65:15:19:b2:eb:9f:55:13:
         7e:1e:38:be:0e:46:49:c6:cc:05:34:3a:a6:f6:51:76:df:bb:
         68:39:10:d9:af:be:47:68:93:7d:20:bb:8b:56:39:b4:f7:b5:
         b8:4e:fc:84:f7:d9:55:d4:c7:85:f4:7e:71:22:d0:57:4b:f8:
         65:d4:a3:a7:3e:7b:76:06:13:c1:0f:1f:63:2e:66:40:04:02:
         e4:87:12:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 20:25:18 2026 by rpki-client