Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/44213fe5-ccf1-31e5-af09-d84820c70b85.roa
File:                     44213fe5-ccf1-31e5-af09-d84820c70b85.roa (raw, json)
Hash identifier:          s4ndX0W+qstVBUfdyorvvciQOnv1jVTblqTdA2SULn4=
Subject key identifier:   2B:29:AD:14:15:DE:33:D0:08:1E:4B:7E:A8:3F:07:BE:B6:FF:C9:6C
Certificate issuer:       /CN=64e40858-5cbf-4756-8298-1db55fc66d82
Certificate serial:       010D0C9F4328584EA79169A91E4DB2E5F43F3180
Authority key identifier: 7D:A4:50:27:DF:44:D3:CB:6C:9C:6B:9B:CC:4B:99:72:B3:93:A7:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/44213fe5-ccf1-31e5-af09-d84820c70b85.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21859
IP address blocks:        23.154.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/64e40858-5cbf-4756-8298-1db55fc66d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/64e40858-5cbf-4756-8298-1db55fc66d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:69:a9:1e:4d:b2:e5:f4:3f:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64e40858-5cbf-4756-8298-1db55fc66d82
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=53c352f3-fca1-427d-b185-e954aefd5f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:37:46:69:37:a6:65:a0:f5:3c:44:f4:e6:29:
                    9a:36:5a:ef:46:da:0a:39:aa:5f:2c:8a:fa:b9:7d:
                    e7:64:7b:a7:bd:d9:e8:c6:34:d7:fb:77:b1:c6:39:
                    92:97:36:17:04:62:da:b0:3b:cd:ba:bd:6e:75:ad:
                    20:58:ba:b8:d1:86:86:89:45:98:4f:c0:37:90:21:
                    b3:09:79:a9:50:f6:6b:f3:75:2e:4b:ff:dd:76:66:
                    cf:91:f7:ca:a5:42:84:43:16:d1:3e:6f:36:a3:ad:
                    da:8b:cf:bd:51:54:e5:12:2b:0e:0d:41:92:2b:06:
                    0b:fa:40:b4:be:2d:be:95:f3:63:e5:f7:01:a6:5f:
                    cd:af:78:65:03:60:f6:de:90:13:c6:49:fb:f5:5a:
                    95:a5:04:7f:17:b4:d4:09:af:c3:0b:71:89:58:92:
                    fe:aa:e0:d0:16:97:d0:af:78:29:15:45:78:7d:96:
                    ab:d1:42:0e:2b:f6:16:67:fa:fb:58:55:48:69:6c:
                    1b:fd:12:bc:92:98:b1:4a:2d:45:fa:b9:51:c5:46:
                    97:9e:98:1d:aa:b8:37:7e:d6:e2:7b:29:0f:a0:88:
                    6f:f8:ab:08:b5:08:3b:3b:5c:04:79:93:51:a7:75:
                    15:cb:eb:52:51:7b:c1:c1:df:a0:c3:d8:e5:7e:01:
                    a8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:29:AD:14:15:DE:33:D0:08:1E:4B:7E:A8:3F:07:BE:B6:FF:C9:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/44213fe5-ccf1-31e5-af09-d84820c70b85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82/64e40858-5cbf-4756-8298-1db55fc66d82.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A4:50:27:DF:44:D3:CB:6C:9C:6B:9B:CC:4B:99:72:B3:93:A7:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/64e40858-5cbf-4756-8298-1db55fc66d82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:95:ea:e1:23:35:dd:94:e1:f1:ef:6f:98:4f:3d:9b:dd:7b:
         03:65:91:d0:d2:e3:fe:5e:88:bc:fb:15:d8:c4:85:58:80:2e:
         a4:42:9c:2e:95:54:2c:99:c7:7b:d9:0a:59:0b:3f:62:a4:3b:
         fb:e4:2b:ce:8c:24:73:db:89:a9:3b:d4:13:06:98:24:5a:ff:
         3e:d4:60:99:66:28:91:54:f2:4d:fe:02:50:10:e2:3f:c4:45:
         37:bb:70:8c:a5:c7:2f:43:58:19:be:9b:76:ac:b2:7e:f0:16:
         96:57:08:70:91:92:54:03:f9:8d:da:4c:6a:74:d6:02:03:fa:
         74:82:e4:46:91:38:83:ec:4a:4b:45:4d:c0:d7:9c:6e:9c:00:
         30:75:9b:0c:dd:9b:61:86:b0:2a:ef:ec:df:17:f6:cd:e1:98:
         ef:fa:11:87:83:c4:24:ed:df:a8:13:5c:ae:8b:ea:ed:72:4f:
         fb:ab:9d:64:29:74:00:1c:24:cf:d6:85:b0:45:79:b3:19:51:
         2c:66:13:2b:12:ca:0a:a6:f6:4e:52:08:25:58:51:c9:df:74:
         96:07:bf:9b:fa:21:84:00:2b:49:b8:87:9c:e2:90:70:36:48:
         e5:d0:7c:89:3e:f9:a4:5f:97:7a:96:cd:81:c9:56:63:07:a7:
         d8:e7:9b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 22:36:12 2026 by rpki-client