Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/1f7365bc-776d-3900-8121-8e55925843b8.roa
File:                     1f7365bc-776d-3900-8121-8e55925843b8.roa (raw, json)
Hash identifier:          YBkrpKPzr/uvxoGayHdlShxuo9HblDYiqXyzqs3mIio=
Subject key identifier:   25:3D:27:AB:38:34:BC:02:88:01:3F:3F:9F:DC:05:EB:E2:73:E1:87
Certificate issuer:       /CN=bc769cb3-6db0-473f-8d72-194e7017b9ce
Certificate serial:       010D0C9F4328584EFF776C1381C3D9C6B6FF9880
Authority key identifier: 02:65:3A:B1:13:02:34:70:05:B4:E5:BC:F2:49:FD:65:84:67:34:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/1f7365bc-776d-3900-8121-8e55925843b8.roa
Signing time:             Sat 29 Aug 2026 13:00:12 +0000
ROA not before:           Sat 29 Aug 2026 13:00:12 +0000
ROA not after:            Fri 27 Nov 2026 14:00:12 +0000
asID:                     32340
IP address blocks:        23.142.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/bc769cb3-6db0-473f-8d72-194e7017b9ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/bc769cb3-6db0-473f-8d72-194e7017b9ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ff:77:6c:13:81:c3:d9:c6:b6:ff:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc769cb3-6db0-473f-8d72-194e7017b9ce
        Validity
            Not Before: Aug 29 13:00:12 2026 GMT
            Not After : Nov 27 14:00:12 2026 GMT
        Subject: CN=5b43c3f6-6fa8-4eb4-87a2-41ebaeb919c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0d:59:92:03:24:74:b8:16:57:65:28:7a:ed:
                    b5:29:2a:9b:59:9d:52:b5:d3:de:f3:8b:25:33:bc:
                    28:7e:d4:d6:fb:02:ff:38:01:8d:e3:18:3e:20:cd:
                    8d:ef:00:81:61:49:47:bf:37:b7:25:9d:2b:23:8d:
                    c2:a3:59:09:74:9c:27:49:99:6a:e5:02:49:ff:57:
                    1a:de:92:02:6c:9c:ee:04:fe:c3:bd:a1:dc:c3:55:
                    26:6f:6c:23:d8:b8:fb:8b:11:0e:9d:c9:00:53:b4:
                    9d:8f:f1:cf:1d:c2:b3:1e:e7:03:63:a7:ee:be:f0:
                    c2:92:e9:f6:67:a1:03:84:bd:6d:d3:2e:7a:1c:54:
                    1c:f9:b1:36:3f:bb:4b:26:b8:8a:76:88:27:56:23:
                    3e:fb:37:59:5c:21:0c:84:7d:d2:2b:62:13:86:07:
                    07:96:8c:21:15:72:07:08:92:1c:e8:d6:9b:c5:e7:
                    85:03:bf:d0:5d:94:3c:59:bf:0a:ff:d7:a6:02:96:
                    c9:8e:e1:a4:80:39:76:63:d2:ff:bd:c4:98:08:c9:
                    f9:26:8a:61:69:8a:69:f5:bc:ae:ba:72:80:5f:08:
                    cb:25:d9:17:62:37:58:40:d0:db:65:c1:5c:aa:fa:
                    c3:41:27:85:14:48:b7:7f:1a:f8:62:2e:5c:2a:75:
                    5c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:3D:27:AB:38:34:BC:02:88:01:3F:3F:9F:DC:05:EB:E2:73:E1:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/1f7365bc-776d-3900-8121-8e55925843b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/bc769cb3-6db0-473f-8d72-194e7017b9ce.crl

            X509v3 Authority Key Identifier:
                keyid:02:65:3A:B1:13:02:34:70:05:B4:E5:BC:F2:49:FD:65:84:67:34:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ee:13:32:b3:5a:5e:c0:53:8a:b5:b4:ae:56:1b:78:52:8a:
         66:39:3f:cf:9e:e2:f7:8a:f7:cd:dd:ee:47:b3:82:5d:24:f4:
         6d:0a:3e:9a:91:4a:3f:24:19:b9:82:81:5a:ee:ac:63:5a:f8:
         ac:c9:1b:84:25:69:75:a1:12:9e:d4:aa:ae:05:a4:31:45:e6:
         cf:f5:5d:9c:63:1f:70:be:5b:90:5a:31:43:e7:3b:c4:85:13:
         ed:a7:29:be:0f:91:a4:e4:7e:e0:c1:26:51:87:5a:12:c7:83:
         91:a8:6a:80:1d:ac:4b:11:7e:67:0b:a5:ae:b4:ed:78:84:b4:
         7e:a4:eb:28:43:88:d7:1b:dc:a0:c3:78:85:16:1b:c2:d9:bf:
         87:28:e1:a8:08:d9:94:fc:02:77:4a:99:7a:9c:3f:6d:a5:d3:
         31:55:e1:9b:8e:08:11:ce:e9:ec:3a:43:f2:b7:68:91:a1:1a:
         0c:6e:1a:10:3a:4f:b9:e9:a8:0a:dd:bc:c0:85:96:79:15:c9:
         10:9e:ca:f8:b3:e1:9d:ec:08:f6:23:3e:09:43:9c:f8:de:ff:
         66:be:ab:0c:92:50:4b:d8:ea:38:86:de:48:b3:6b:70:bf:41:
         6e:45:66:1c:8b:d1:9b:df:40:a3:15:d5:cf:7f:39:75:2f:96:
         ab:c3:be:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:17:47 2026 by rpki-client