Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/66dc2402-87f5-3219-9d90-edde17daef32.roa
File:                     66dc2402-87f5-3219-9d90-edde17daef32.roa (raw, json)
Hash identifier:          JsFLdmz8kN+Su5AGbtT82E5xP4mGMIHuEf6WWMnjKIg=
Subject key identifier:   28:93:44:98:78:24:63:0B:3E:5B:A5:13:FB:C3:79:A9:7C:5D:98:E7
Certificate issuer:       /CN=ceabafc1-2de6-4194-a43b-862ad745c553
Certificate serial:       010D0C9F4328584EA787DBCDE93798A759553EC0
Authority key identifier: F8:33:24:2F:9F:2F:81:01:B2:59:60:AC:16:B7:CF:BC:B4:BB:52:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/66dc2402-87f5-3219-9d90-edde17daef32.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     53740
IP address blocks:        23.159.32.0/24 maxlen: 24
                          23.159.33.0/24 maxlen: 24
                          98.142.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ceabafc1-2de6-4194-a43b-862ad745c553.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ceabafc1-2de6-4194-a43b-862ad745c553.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:db:cd:e9:37:98:a7:59:55:3e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceabafc1-2de6-4194-a43b-862ad745c553
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=206f097b-4c2d-43ce-8ebb-b5746c2f2ec2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b5:ba:6d:32:49:db:3a:4c:48:ab:c5:db:ad:
                    c6:38:21:22:23:79:18:d7:56:50:b8:e4:b2:1c:d5:
                    00:3c:c2:39:1c:a7:c3:69:8a:e8:1f:71:e7:e2:29:
                    94:1d:34:03:f4:ee:f3:4d:98:bc:23:78:6a:66:ba:
                    95:51:ad:da:b4:22:3a:48:c2:90:bd:1d:87:b2:1a:
                    de:6f:79:dd:ce:7f:04:72:22:9d:b4:b6:d8:48:d6:
                    e6:0f:3d:1e:1a:86:88:d5:73:fc:fc:36:e9:76:e4:
                    e4:cd:4e:d1:12:58:72:76:85:18:94:f4:ac:a0:3a:
                    b1:2c:4b:56:4d:cd:ce:45:a1:68:04:1c:01:b0:0a:
                    35:95:3b:5c:61:04:ba:9c:bd:46:eb:ca:63:93:ec:
                    dd:3b:21:74:ec:97:c3:c6:e3:6c:fb:0b:e0:d4:4d:
                    76:9f:2f:0d:70:63:7a:10:11:63:60:2f:cb:1d:5d:
                    e2:a9:a6:2e:4a:8c:01:e6:49:92:54:b5:a7:45:9b:
                    bb:31:58:b8:ae:f5:ce:b4:93:f7:85:6b:89:93:01:
                    56:97:90:77:04:d8:db:a1:05:28:51:e4:1b:13:54:
                    eb:7f:f4:9a:c0:20:06:94:c3:63:e9:05:ae:d1:ad:
                    d0:a1:23:c4:16:2d:9c:da:89:c9:62:86:93:7f:de:
                    b5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:93:44:98:78:24:63:0B:3E:5B:A5:13:FB:C3:79:A9:7C:5D:98:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/66dc2402-87f5-3219-9d90-edde17daef32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553/ceabafc1-2de6-4194-a43b-862ad745c553.crl

            X509v3 Authority Key Identifier:
                keyid:F8:33:24:2F:9F:2F:81:01:B2:59:60:AC:16:B7:CF:BC:B4:BB:52:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ceabafc1-2de6-4194-a43b-862ad745c553.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.32.0/23
                  98.142.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:32:ef:5b:2b:a0:9d:84:48:b3:fb:80:de:fa:23:39:51:f1:
         d4:83:38:21:53:03:d6:e9:cf:ea:22:a5:4f:1b:39:ab:f1:ab:
         83:cb:36:9c:5d:7f:33:99:b8:9f:94:77:6d:02:07:12:18:2e:
         cc:1b:5d:ff:cb:19:25:6a:0e:13:ef:13:21:35:a5:4d:d6:a0:
         71:f4:ea:d7:61:02:db:55:29:0c:9a:31:db:3d:c9:d8:57:e0:
         74:ce:a9:e6:0b:88:77:e6:d0:ac:c6:e1:19:43:13:ee:12:34:
         68:78:52:a1:7a:3f:92:83:41:e5:0c:fa:55:cf:34:02:f4:13:
         d4:12:71:14:1c:c7:dc:51:eb:3b:1f:65:32:63:96:78:08:da:
         f6:1b:39:95:b4:c6:64:64:73:7e:a6:ba:31:50:18:54:f3:82:
         b7:35:d6:bf:9b:9f:f4:f6:89:e6:c3:e3:8c:5a:37:b8:28:ee:
         56:1c:f3:b4:b9:f6:54:1a:29:98:2e:e5:5e:27:ac:64:de:a2:
         ca:09:98:fb:6d:7a:fa:e4:0b:0a:c6:f2:ba:4c:99:71:cd:f2:
         f4:d6:2d:12:e6:19:b2:ca:d4:32:10:c3:e6:68:67:72:b0:cf:
         b3:e6:72:b3:c1:cd:fa:00:47:09:66:2e:78:03:85:3d:f6:78:
         78:96:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 05:38:18 2026 by rpki-client