Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ced5952-32a5-471a-ab64-e11992f7a673/92247b80-0a84-3c82-a27d-e09cff1475a9.roa
File:                     92247b80-0a84-3c82-a27d-e09cff1475a9.roa (raw, json)
Hash identifier:          xlKkxSuhANzYwdV2Fsy1yimZBQOUuxpJtx6Fie2BfOs=
Subject key identifier:   09:6E:F1:EE:87:C4:25:B6:B5:43:19:C8:C4:B9:6A:C7:F6:DC:E2:A3
Certificate issuer:       /CN=2ced5952-32a5-471a-ab64-e11992f7a673
Certificate serial:       010D0C9F4328584F65BB0B8D92CC128BC1A2C730
Authority key identifier: 38:53:66:FE:64:6E:96:3A:51:82:91:C7:90:7E:12:A7:5E:87:A6:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ced5952-32a5-471a-ab64-e11992f7a673.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ced5952-32a5-471a-ab64-e11992f7a673/92247b80-0a84-3c82-a27d-e09cff1475a9.roa
Signing time:             Mon 05 Oct 2026 04:08:58 +0000
ROA not before:           Mon 05 Oct 2026 04:08:58 +0000
ROA not after:            Sun 03 Jan 2027 05:08:58 +0000
asID:                     399797
IP address blocks:        23.158.92.0/24 maxlen: 24
                          2602:f3c0::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ced5952-32a5-471a-ab64-e11992f7a673/2ced5952-32a5-471a-ab64-e11992f7a673.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ced5952-32a5-471a-ab64-e11992f7a673/2ced5952-32a5-471a-ab64-e11992f7a673.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ced5952-32a5-471a-ab64-e11992f7a673.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:bb:0b:8d:92:cc:12:8b:c1:a2:c7:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ced5952-32a5-471a-ab64-e11992f7a673
        Validity
            Not Before: Oct  5 04:08:58 2026 GMT
            Not After : Jan  3 05:08:58 2027 GMT
        Subject: CN=8f1b3e2f-d42c-4b5e-ae75-d5093a7af60f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:75:5e:e6:40:a7:59:da:eb:f8:41:ad:f7:09:
                    0e:33:5f:a8:6e:20:5c:6b:16:45:ef:b8:01:0e:94:
                    19:a4:04:66:38:dd:58:55:58:ab:15:aa:2f:7e:e6:
                    7e:19:76:50:77:cc:15:f9:32:af:03:b9:19:fd:0c:
                    b5:73:43:cd:96:9e:bf:78:22:4e:88:12:fe:53:80:
                    8f:d1:b6:9d:eb:fd:b5:6d:a2:6c:d3:fa:9a:a3:71:
                    b6:94:33:3e:5e:ce:56:2e:1f:ad:8e:57:5c:0a:bf:
                    18:03:b2:4e:84:87:e7:7b:8d:82:2f:e5:63:05:51:
                    00:75:58:d4:58:44:d7:7c:b0:49:30:7e:44:18:d4:
                    8b:c1:61:25:6b:7b:41:34:ca:40:05:e0:d9:92:70:
                    43:40:86:4a:15:56:f1:e4:44:bd:fe:cd:32:09:1a:
                    e8:18:18:f9:d0:67:dc:52:13:38:89:c6:ae:9d:24:
                    50:13:41:fc:a9:60:77:0a:ae:fe:94:d4:c6:ea:62:
                    63:1a:ab:33:f3:90:fc:01:02:27:de:e0:b9:a1:c4:
                    06:00:91:6c:71:20:70:52:ed:54:a7:c1:29:e7:29:
                    48:53:20:c2:a8:30:8d:81:8c:f6:a7:8c:9b:d4:cf:
                    84:e8:c8:13:02:60:a2:c5:bf:99:b5:e7:b9:de:6f:
                    50:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:6E:F1:EE:87:C4:25:B6:B5:43:19:C8:C4:B9:6A:C7:F6:DC:E2:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ced5952-32a5-471a-ab64-e11992f7a673/92247b80-0a84-3c82-a27d-e09cff1475a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ced5952-32a5-471a-ab64-e11992f7a673/2ced5952-32a5-471a-ab64-e11992f7a673.crl

            X509v3 Authority Key Identifier:
                keyid:38:53:66:FE:64:6E:96:3A:51:82:91:C7:90:7E:12:A7:5E:87:A6:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2ced5952-32a5-471a-ab64-e11992f7a673.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.158.92.0/24
                IPv6:
                  2602:f3c0::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:c6:cc:c6:8f:51:98:cc:36:1b:84:5a:63:66:4d:a8:32:e8:
         5c:24:fa:c8:64:d5:bb:80:1d:59:dd:58:a5:59:ea:1b:20:df:
         f2:da:db:a9:03:ee:4a:c7:e5:e4:4b:8a:15:5d:e6:32:d9:25:
         4c:b0:b3:b0:a9:93:f3:12:b9:20:7f:b9:a5:8d:e6:62:0e:29:
         e8:30:a5:39:cd:68:f5:98:52:fc:a0:37:4a:5e:b9:db:d3:d4:
         bb:60:2c:47:85:82:54:25:9d:45:a0:d2:19:cf:b6:90:10:49:
         1b:d5:15:e7:de:b8:7f:ff:1f:7b:dd:b7:59:35:8b:86:29:6a:
         f7:ec:c3:e0:79:c9:63:00:b0:fc:98:92:4f:c3:78:15:17:01:
         aa:05:2b:37:fb:e9:31:7a:87:87:74:fe:94:b5:94:04:10:7f:
         47:74:f9:67:57:0a:ab:68:76:4e:dc:33:16:b1:53:f5:54:0f:
         2f:4f:88:08:d8:23:0e:1c:bd:39:6c:19:65:42:87:2a:42:fd:
         ae:db:62:5f:81:92:bf:99:7b:12:c4:8f:68:8c:b5:31:dd:25:
         de:be:ab:f2:90:78:12:ad:b9:62:43:e0:0c:3a:bb:31:b6:5e:
         63:ad:1b:af:b8:ea:ca:21:d9:b5:65:7e:a3:9b:e1:05:11:f4:
         4c:92:4c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 04:14:36 2026 by rpki-client