Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f31153f-4459-3a12-a530-9b6389f776dd.roa
File:                     6f31153f-4459-3a12-a530-9b6389f776dd.roa (raw, json)
Hash identifier:          bjgMPnd5abFZM27iQdnec5R8kBhMm4tLkG8l4H1X6Ps=
Subject key identifier:   F6:13:78:CA:73:25:93:46:23:7C:66:A8:47:E6:3C:0D:83:01:A5:94
Certificate issuer:       /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial:       010D0C9F4328584F4972D5A13ACEEDF46BF3E280
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f31153f-4459-3a12-a530-9b6389f776dd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     401783
IP address blocks:        23.26.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:d5:a1:3a:ce:ed:f4:6b:f3:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=94785f84-188c-4d6d-8988-b3f00d5b340a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:3f:17:06:ab:2d:7e:9f:92:72:69:a4:bb:c1:
                    29:6e:18:44:70:dd:3e:b2:05:02:4d:13:8d:64:31:
                    30:57:75:10:7d:1b:7b:5c:01:dc:1c:7d:e9:1c:1e:
                    fb:84:8e:ea:25:e1:bd:d8:cb:52:d1:86:5d:fc:b1:
                    1e:81:9b:f5:d1:35:9f:a1:4c:ee:5e:9e:dc:57:27:
                    ba:04:5f:a2:74:f0:60:96:c8:f6:42:9a:55:16:6a:
                    ec:3b:04:b2:89:99:0c:4b:71:d3:a1:1c:be:65:7a:
                    97:30:62:28:e7:bb:2f:b3:61:16:f2:ad:d9:95:f0:
                    07:dd:7c:51:fa:e0:96:0c:29:44:2c:61:47:21:ab:
                    98:ef:d7:32:ab:fa:e1:76:f1:a4:c2:08:7c:b0:63:
                    c4:86:62:78:a9:90:a5:84:c5:a6:9c:c9:ff:6b:64:
                    d4:87:bd:76:4d:af:39:56:41:e8:4f:6a:9f:07:9f:
                    28:08:66:7e:df:91:82:2b:d0:0b:a0:cb:4c:92:b0:
                    03:34:28:39:73:ca:8f:d4:82:53:2a:d6:d0:6a:16:
                    68:d5:7f:2d:ce:7e:25:3f:b0:c5:b4:95:9e:cb:69:
                    ce:a7:79:b5:5c:64:6c:c5:7d:74:df:16:1c:36:68:
                    d4:da:f1:71:f8:7c:86:d0:62:45:3f:3e:55:65:2e:
                    0e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:13:78:CA:73:25:93:46:23:7C:66:A8:47:E6:3C:0D:83:01:A5:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/6f31153f-4459-3a12-a530-9b6389f776dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl

            X509v3 Authority Key Identifier:
                keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.26.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:92:3e:74:0b:0d:95:b2:48:06:cd:07:ed:1c:77:de:fa:b9:
         7b:e5:fe:b0:03:c4:9e:2a:ee:e6:93:f6:60:12:fc:15:7b:02:
         b5:f4:2f:dc:b5:f6:9c:27:31:90:a6:36:f4:10:e1:2f:d3:de:
         c0:1d:17:c9:d2:c9:73:9a:41:50:dd:6f:9d:73:f3:c0:32:b2:
         ce:15:d4:43:c7:e9:06:a2:c8:e7:08:df:49:b1:4b:fd:a3:93:
         b3:c0:f1:83:ca:84:5a:92:24:3c:88:7b:f0:15:8f:92:b2:8d:
         8b:a7:b7:39:0b:6a:38:72:d4:db:cf:e0:c6:bd:d2:f0:75:d8:
         6c:85:00:f7:a9:98:88:ea:b4:80:44:95:8a:bb:db:e7:b1:7b:
         6e:29:db:e8:03:5c:a6:92:86:6d:ba:f5:7e:02:7f:f6:81:94:
         e2:49:7b:28:92:3c:91:4d:d9:d3:7e:42:ad:4c:7b:13:f7:0e:
         04:57:a6:ea:d4:8c:40:e6:c0:00:b1:19:47:d1:84:df:d3:6c:
         e9:46:e0:cc:b9:9e:88:4d:d7:11:90:c9:4b:c7:de:09:6f:ea:
         c2:5b:5a:f1:8c:b2:88:54:a3:8e:3d:f9:91:d7:19:a8:e5:9d:
         7e:fa:a7:6a:ab:a4:89:29:1b:76:0d:dc:a4:06:75:42:3d:f3:
         37:80:e0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:25:59 2026 by rpki-client