Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa
File:                     c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa (raw, json)
Hash identifier:          QRqz8E+hRs6JReE6vkJToPiBA9HzwaCe8O92hlTVa8o=
Subject key identifier:   74:2F:AA:B0:C3:D3:FF:E8:56:D9:AE:EF:AE:5B:73:AD:81:15:B0:CC
Certificate issuer:       /CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251
Certificate serial:       010D0C9F4328584EA787368B47FA8D570385D680
Authority key identifier: C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401474
IP address blocks:        23.130.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Sep 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:36:8b:47:fa:8d:57:03:85:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=d5ebd2ae-a5fd-4912-a3ef-3359348e9aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:85:76:bd:f6:ca:48:e3:cf:89:e4:42:5b:f1:
                    34:c2:1c:1a:bc:01:d0:e4:3b:ae:59:f3:08:c9:bc:
                    d4:00:64:22:28:ee:d7:07:c9:02:ca:d3:a0:7f:32:
                    23:e4:b0:e0:4f:14:45:49:b6:1b:25:b5:fd:b0:b2:
                    4e:6d:eb:18:df:79:0c:b4:c8:ed:a9:87:26:c7:71:
                    63:02:61:17:42:aa:7a:a3:27:bd:2d:72:1b:fd:ae:
                    2a:c7:0d:ee:56:23:b8:b9:4d:f7:77:17:0a:db:18:
                    cc:66:28:27:e9:2a:e6:00:29:64:9c:e9:92:d3:c1:
                    b2:be:d8:93:a2:58:3f:a1:01:7d:e0:5f:ac:e9:43:
                    c8:be:47:47:d1:ca:6f:98:39:76:24:f4:f8:4a:31:
                    32:1d:b9:24:94:46:fb:c4:cf:af:ec:73:94:a1:ad:
                    bb:a4:52:1f:7e:2c:19:4f:f7:f3:d6:d8:5e:3c:e1:
                    e4:e4:08:ee:8b:35:55:96:f8:9a:38:47:c1:ba:6f:
                    09:ad:ab:01:c0:84:80:e4:30:a7:29:e0:4f:99:43:
                    2a:bb:0f:e1:49:2b:72:5a:6e:dd:4f:5d:f7:18:3c:
                    53:92:74:a4:16:f9:45:b4:60:77:b6:c1:0f:03:e7:
                    59:e5:89:50:07:82:3e:c1:24:61:ae:c7:3d:98:22:
                    33:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2F:AA:B0:C3:D3:FF:E8:56:D9:AE:EF:AE:5B:73:AD:81:15:B0:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:4e:3c:b0:e9:0e:49:5d:74:46:7e:b9:e3:49:2e:6c:49:c2:
         46:19:7e:b1:11:b4:2b:29:35:77:40:4d:63:a4:12:f0:14:63:
         b8:2f:89:62:5c:4a:c3:e5:5c:5b:13:83:29:c7:ca:c0:7e:03:
         12:dc:ac:14:25:8b:75:27:e0:82:c2:76:8f:6b:79:59:07:c3:
         16:43:13:e2:f9:56:8e:24:2f:29:a9:86:e2:5d:51:69:00:14:
         28:32:e0:29:36:6e:fa:0c:58:0d:d8:85:1f:b2:50:06:2f:98:
         25:c5:ab:7f:0e:f0:19:d3:61:3a:9b:4a:e3:f6:e7:a4:d4:48:
         78:84:d9:b1:f5:80:fb:47:0b:cd:0d:3f:b7:9e:a4:42:cf:f6:
         fe:bb:55:b9:89:b9:5d:73:25:be:87:b9:53:ae:f9:59:d6:b4:
         e6:9d:13:a2:95:e3:a1:e9:f5:66:f2:e6:9c:4a:01:55:39:0a:
         e6:dc:51:70:73:1a:73:6c:18:62:3f:b4:fa:b7:3e:94:fb:0c:
         b6:c7:24:6d:d1:1f:c2:23:5a:b1:1a:78:35:2c:b9:21:09:ac:
         32:eb:9f:36:31:c8:51:09:4a:b5:3b:24:48:18:7b:64:2d:bb:
         09:ff:e9:bd:8e:26:b1:19:22:30:fb:5a:67:35:7d:c3:22:67:
         8f:b2:75:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 20:31:03 2026 by rpki-client