Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa
File:                     3a59a8dd-9438-357b-9270-804aa380967c.roa (raw, json)
Hash identifier:          mh3Ik5xBw9eKZTF3z/a3WNN4XkQrg7WWu0TeBZdJhCM=
Subject key identifier:   BA:53:18:D0:D3:5D:1D:23:63:4A:DE:1D:89:CE:36:C6:56:21:29:25
Certificate issuer:       /CN=997f5b04-998c-4e8a-bf3e-fd9ab96a2d28
Certificate serial:       010D0C9F4328584ECBD1DFF770A59698FC00BD80
Authority key identifier: 9B:13:2D:08:76:48:2B:5E:06:EB:06:C4:77:22:20:F0:09:CD:3E:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     395549
IP address blocks:        23.129.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:df:f7:70:a5:96:98:fc:00:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997f5b04-998c-4e8a-bf3e-fd9ab96a2d28
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=f11015d4-a039-4a3a-b896-51639b759f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:05:a5:38:61:81:f1:92:04:22:e7:b1:3d:d6:
                    9b:a5:e8:4b:97:c7:e6:96:49:de:97:19:12:3e:a5:
                    79:11:15:c2:91:b1:86:ee:cf:04:73:56:f5:ab:3d:
                    e9:d4:4b:61:88:e3:23:d4:55:17:eb:8e:47:99:04:
                    3c:a0:ab:a8:bf:bf:76:60:96:f2:8c:ae:52:f9:23:
                    fa:52:b3:c8:c7:bd:f6:2c:38:ba:20:db:76:c0:84:
                    31:e9:5f:21:66:dc:ce:24:b0:24:e0:a3:9d:5a:cc:
                    15:9d:1a:73:1f:3f:35:8c:81:a4:7c:0d:b3:62:82:
                    b2:ce:1f:32:64:40:83:ec:71:17:0c:25:4d:47:df:
                    73:fd:a4:e1:93:ab:2a:ce:e1:1c:c4:85:c5:3a:44:
                    e8:be:12:64:00:d6:ce:9b:65:b8:3e:8d:ba:3f:38:
                    e8:c1:c8:22:31:c4:50:8f:fd:4d:4f:88:ac:9e:10:
                    33:65:47:1b:1c:df:77:1b:08:b5:66:b3:6e:62:5e:
                    67:aa:8b:f4:a8:8c:46:a3:da:00:17:de:51:2e:00:
                    93:d6:0a:77:f7:41:d6:25:c3:40:8d:ab:80:20:21:
                    76:0c:21:19:c0:44:d2:55:3c:44:b7:4b:42:e4:74:
                    77:66:a3:ad:5b:17:76:a6:64:5e:ba:38:cb:b2:d0:
                    97:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:53:18:D0:D3:5D:1D:23:63:4A:DE:1D:89:CE:36:C6:56:21:29:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.crl

            X509v3 Authority Key Identifier:
                keyid:9B:13:2D:08:76:48:2B:5E:06:EB:06:C4:77:22:20:F0:09:CD:3E:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:37:7b:0a:6c:18:c2:b7:7e:b8:ae:96:b0:89:50:04:a4:6b:
         ee:e9:3d:bf:31:6e:b7:93:be:74:d6:e3:0d:59:86:6c:18:8a:
         29:04:3b:93:c2:2f:7e:98:97:f5:58:6f:8c:43:98:97:39:06:
         7d:bc:09:99:d0:5b:47:d7:93:02:4b:d9:a9:06:c7:ca:f6:20:
         b7:fc:3c:53:00:00:5a:9c:e6:3e:7d:43:c0:c1:8b:a1:db:bb:
         2b:65:e9:2e:78:20:64:7d:c2:94:77:88:82:bf:a5:c0:3b:e5:
         93:3e:1a:c7:c4:2f:38:5f:59:e3:b3:8a:44:42:f4:d9:0e:0b:
         e0:f3:55:c1:5d:48:ee:b4:71:d2:49:d4:16:b9:43:28:aa:a5:
         eb:5b:92:6e:76:e2:50:b1:da:a7:ab:db:ed:89:00:73:19:53:
         64:2a:4f:ba:71:31:06:70:57:6a:61:37:84:fd:0a:86:97:6b:
         2c:c5:73:14:e6:25:07:03:a3:78:df:9d:bd:3d:fe:91:00:e1:
         da:26:6d:68:c5:b6:39:52:26:39:a1:68:88:eb:18:1a:79:d4:
         bf:37:9f:24:0c:6e:34:92:0c:5d:36:85:4d:19:aa:71:e3:a7:
         6d:86:e3:58:e3:57:38:68:7c:01:d5:1f:0f:12:b1:29:e9:03:
         85:95:8f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 05:55:27 2026 by rpki-client