Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/24771e1a-e156-4817-a1b0-e6a9fc704298/1345440c-045f-35ec-b8eb-54635066ea53.roa
File:                     1345440c-045f-35ec-b8eb-54635066ea53.roa (raw, json)
Hash identifier:          ophEsjxUVieQR6NjT8W2FRsGHqzXBbYoXfb6VBkVA8g=
Subject key identifier:   49:25:AF:2C:C9:F4:8D:06:B0:A7:25:EC:AE:D3:69:02:3E:9D:4D:C6
Certificate issuer:       /CN=24771e1a-e156-4817-a1b0-e6a9fc704298
Certificate serial:       010D0C9F4328584FA39CA966F7252873F15C5E00
Authority key identifier: DE:5D:56:89:39:B6:00:5C:FA:F1:F4:A9:39:5D:17:87:3D:10:4F:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/24771e1a-e156-4817-a1b0-e6a9fc704298.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/24771e1a-e156-4817-a1b0-e6a9fc704298/1345440c-045f-35ec-b8eb-54635066ea53.roa
Signing time:             Tue 27 Oct 2026 08:07:52 +0000
ROA not before:           Tue 27 Oct 2026 08:07:52 +0000
ROA not after:            Mon 25 Jan 2027 09:07:52 +0000
asID:                     32043
IP address blocks:        23.166.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/24771e1a-e156-4817-a1b0-e6a9fc704298/24771e1a-e156-4817-a1b0-e6a9fc704298.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/24771e1a-e156-4817-a1b0-e6a9fc704298/24771e1a-e156-4817-a1b0-e6a9fc704298.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/24771e1a-e156-4817-a1b0-e6a9fc704298.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a3:9c:a9:66:f7:25:28:73:f1:5c:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24771e1a-e156-4817-a1b0-e6a9fc704298
        Validity
            Not Before: Oct 27 08:07:52 2026 GMT
            Not After : Jan 25 09:07:52 2027 GMT
        Subject: CN=c0151618-433c-419d-87a5-bff481509192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b1:9b:e0:f5:cd:f4:0f:c0:b8:0d:33:04:33:
                    66:4b:24:ed:90:8d:45:24:7a:1e:2f:bb:16:10:93:
                    3d:42:50:f0:a9:78:96:b9:48:53:a8:6e:c4:46:a0:
                    81:c8:ab:02:b4:3f:a1:8e:d3:bd:23:49:c0:13:51:
                    cf:66:2e:fa:e5:e5:06:fc:ed:5d:2d:bf:08:b1:73:
                    ed:b0:f8:79:44:f1:75:6d:7a:4d:48:36:01:ad:6f:
                    b1:d7:ca:e9:66:85:56:bd:1a:30:30:88:cf:ca:0a:
                    a4:10:41:fb:ea:90:d1:4f:1f:e5:00:d3:51:b4:15:
                    2d:ac:36:8d:69:d7:ae:1a:f2:f9:b1:79:90:d9:5a:
                    5e:f6:68:a5:a9:51:99:9a:5f:a0:fd:c9:7d:4b:6f:
                    9c:b0:17:f3:2b:bf:4a:7c:22:41:df:f7:c5:f9:6a:
                    b2:0f:00:ba:96:7a:f5:5e:28:88:ea:1f:5b:05:34:
                    14:e2:41:5f:8b:62:de:59:d7:09:12:e0:29:7a:1d:
                    44:4a:11:f5:58:17:8b:8b:c0:f6:82:13:57:ad:ff:
                    2b:95:c4:fd:66:8e:f3:1b:20:82:1c:bb:62:df:50:
                    51:84:88:43:26:b5:f7:93:99:55:77:cd:1b:73:7f:
                    e4:80:d9:49:10:da:ee:2d:86:c0:f6:f7:e2:0c:17:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:25:AF:2C:C9:F4:8D:06:B0:A7:25:EC:AE:D3:69:02:3E:9D:4D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/24771e1a-e156-4817-a1b0-e6a9fc704298/1345440c-045f-35ec-b8eb-54635066ea53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/24771e1a-e156-4817-a1b0-e6a9fc704298/24771e1a-e156-4817-a1b0-e6a9fc704298.crl

            X509v3 Authority Key Identifier:
                keyid:DE:5D:56:89:39:B6:00:5C:FA:F1:F4:A9:39:5D:17:87:3D:10:4F:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/24771e1a-e156-4817-a1b0-e6a9fc704298.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.166.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:21:a7:ac:d4:6f:c0:40:30:c6:10:e4:d1:f4:41:4c:c8:e7:
         44:27:05:cb:de:b7:6c:3a:92:3f:de:d8:2e:32:12:16:39:de:
         27:dc:5b:47:93:e3:10:55:11:82:c7:87:f4:96:e3:34:61:d3:
         4c:4e:6b:24:0f:a9:d8:04:d0:7d:4f:1c:66:a3:05:ce:f9:27:
         4b:cb:21:8c:3d:37:f4:55:00:38:57:e4:52:22:86:02:74:ab:
         89:1b:93:aa:7e:c0:22:93:9b:2c:9f:6c:bc:fa:f4:22:b8:58:
         10:3a:38:90:9d:e3:d5:a2:f4:44:65:cf:e5:b9:02:43:36:40:
         97:f9:41:6a:9c:23:39:c6:2e:e8:13:12:05:eb:1f:76:5e:4b:
         58:8c:18:13:35:15:15:14:22:dd:b6:24:df:d5:a7:24:d3:35:
         7a:a9:d1:41:3b:40:9d:49:95:fa:94:75:b1:6d:e5:4e:83:f8:
         3c:55:17:7a:15:f9:74:7b:16:62:b2:09:8c:fb:d6:d0:43:5d:
         bb:cd:74:9d:ba:57:49:42:a6:08:23:64:b7:b5:bd:44:f8:cc:
         36:34:62:5f:71:bd:77:33:9e:0e:3e:c2:f2:f5:4e:70:6b:44:
         07:31:43:de:31:9c:8d:02:84:83:53:05:91:02:83:97:ee:2c:
         99:01:68:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:42:40 2026 by rpki-client