Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa
File:                     2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa (raw, json)
Hash identifier:          BsXBveuRQAnUfgGLo5UQaX6Ag9t61IFJ9g3l2y/1ih4=
Subject key identifier:   A6:A5:AA:0C:85:D7:04:46:D0:BA:68:27:91:06:E9:32:FE:A7:96:1E
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328584F497512A87D9AAC988F2D8D80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     399641
IP address blocks:        165.254.23.224/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:12:a8:7d:9a:ac:98:8f:2d:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=b2010c43-5df4-450d-8236-eae4cf9250e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8d:97:be:cf:4b:c9:ca:77:59:6e:f5:f4:6f:
                    dc:26:63:ce:bd:e9:29:d6:15:bf:24:a1:5a:eb:0e:
                    cc:a7:e0:81:62:75:5f:9e:e8:07:a7:20:a8:48:30:
                    9d:17:13:92:8b:ee:81:f2:ad:78:bb:c2:88:1a:65:
                    c7:7d:3e:64:c7:e0:a6:5f:84:6d:96:4b:5c:71:6a:
                    59:01:47:d3:27:22:2c:d5:46:90:af:f8:e8:bb:f7:
                    3c:36:b5:e0:a7:93:95:00:55:4a:18:31:57:3c:c2:
                    1c:ef:0b:0c:4f:87:6a:84:76:52:05:8a:b4:3b:05:
                    7a:07:ef:ec:a9:18:21:66:c9:39:b5:94:84:e2:d4:
                    1f:3e:e6:38:cd:b8:12:41:07:87:e3:5f:0a:61:0a:
                    53:38:2c:38:48:d2:3f:b5:0f:40:f7:f1:d7:ad:60:
                    a3:d0:aa:d9:27:31:24:fc:20:f2:91:bb:48:65:7f:
                    26:f4:28:7d:b4:c3:79:19:05:55:f2:e4:e5:89:b1:
                    b5:ec:12:91:5d:fd:c3:fe:db:5c:7d:2d:54:cb:65:
                    49:42:92:61:87:c7:fa:4b:52:e7:9f:4f:60:a8:09:
                    fb:d2:f7:f9:ed:40:04:8f:8e:06:53:4a:9d:88:6b:
                    6d:b6:58:cb:0a:1f:c6:be:86:b8:bf:81:a6:bd:0a:
                    7a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A5:AA:0C:85:D7:04:46:D0:BA:68:27:91:06:E9:32:FE:A7:96:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/2ff0b98b-c8b7-37b3-b6bb-27d75997dbe7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.254.23.224/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:4c:cc:10:a4:8b:db:d1:a0:09:ac:09:65:46:a8:4a:2f:75:
         41:0a:ff:47:13:1f:b7:a9:41:8c:91:bb:01:4c:c0:3d:29:8f:
         3a:12:f1:a3:99:03:3c:9d:3c:08:02:d2:6a:1d:1b:fb:dc:07:
         49:3c:1f:f8:8e:48:43:72:f5:82:df:5f:1a:86:cb:ab:3f:49:
         4e:22:05:94:24:2d:ab:b2:5a:07:13:35:84:01:62:d1:aa:c6:
         c8:15:fe:39:37:3f:dd:b3:6a:4c:32:fb:87:19:38:3b:6b:e6:
         8a:0c:0b:61:14:d0:bb:4e:db:37:92:75:41:28:78:dc:40:1b:
         09:d9:a7:fe:84:31:b7:d1:aa:82:c4:b9:fd:b7:10:ce:4c:d1:
         71:54:5c:b3:ea:4b:f0:e9:03:95:ab:54:54:72:d5:0a:72:f4:
         4a:a7:60:e0:c5:12:21:92:ee:08:44:38:c5:2d:0c:18:1f:f7:
         db:4d:e0:3c:94:fb:c0:06:e0:83:d0:ba:a3:06:c7:17:3a:1b:
         09:41:9e:aa:fd:b4:ef:43:82:2d:38:bb:07:20:45:99:c7:0c:
         f8:09:97:69:c8:76:a2:1a:bb:ba:ff:a0:0f:32:8c:4a:c3:89:
         55:d3:72:5d:b8:58:bf:6a:10:d1:6d:91:65:4c:a7:3c:23:41:
         75:e2:d4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:51:25 2026 by rpki-client