Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/7ddfb354-b597-37d0-bfdb-628be097f8f5.roa
File:                     7ddfb354-b597-37d0-bfdb-628be097f8f5.roa (raw, json)
Hash identifier:          rir9vCE0qPQsXry/jPShm3RZwEmuUdwZr/Kxq9BjoCE=
Subject key identifier:   91:30:E0:2C:71:F1:00:81:48:03:AE:26:4B:69:7C:02:DE:56:1B:37
Certificate issuer:       /CN=e1029eed-2e88-4036-a7d9-ea093001f5cc
Certificate serial:       010D0C9F4328584EFCACC4A23C22A6035F049A40
Authority key identifier: 05:84:31:C0:C7:EB:DD:93:4A:82:99:B7:04:58:4B:4C:06:FD:54:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/7ddfb354-b597-37d0-bfdb-628be097f8f5.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     400148
IP address blocks:        23.190.16.0/24 maxlen: 24
                          2602:fc0f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c4:a2:3c:22:a6:03:5f:04:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1029eed-2e88-4036-a7d9-ea093001f5cc
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=f6915f2c-1b3a-4083-a6c3-ca80cab01c4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:ff:9b:22:15:83:b4:74:ce:ba:a3:0d:ae:
                    c3:90:21:e8:2c:16:ef:59:31:8f:5c:df:48:55:11:
                    ef:2c:3d:0d:ba:d3:b4:78:b3:33:cd:6c:0e:cc:ea:
                    40:3e:7d:08:64:2c:ab:2c:0a:fb:42:c0:df:21:56:
                    34:24:db:de:a0:0f:4f:84:fb:4a:ee:55:3f:e7:87:
                    5e:2a:16:20:da:2f:22:ec:b6:1d:3c:79:6f:78:3f:
                    b7:f3:84:13:04:71:10:ed:d5:eb:6c:75:6f:45:e3:
                    47:23:64:56:4b:80:fa:4b:fb:bc:c2:4a:60:12:42:
                    59:34:7b:d2:7a:b0:47:9c:29:96:bc:2a:b7:aa:f0:
                    7f:d6:2b:c0:5f:6a:f1:3b:67:46:fd:07:d5:7b:87:
                    14:09:d4:f7:57:8b:3b:02:1c:80:84:78:39:0a:6e:
                    1e:41:a7:56:38:2d:f8:b7:87:23:41:7c:59:ea:ae:
                    71:84:2d:a1:16:2e:da:32:8a:b4:f1:a4:76:a5:d2:
                    49:1f:b4:49:66:f5:d1:b3:4c:cf:52:97:dd:54:54:
                    30:27:dd:a8:97:c1:5e:5a:99:20:18:c1:f2:d7:3e:
                    77:a3:a5:86:4f:9e:56:ec:d2:23:9b:50:99:8c:0d:
                    9c:8f:d6:cc:2a:67:63:d4:4c:62:42:9a:e3:32:6b:
                    e1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:30:E0:2C:71:F1:00:81:48:03:AE:26:4B:69:7C:02:DE:56:1B:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/7ddfb354-b597-37d0-bfdb-628be097f8f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc/e1029eed-2e88-4036-a7d9-ea093001f5cc.crl

            X509v3 Authority Key Identifier:
                keyid:05:84:31:C0:C7:EB:DD:93:4A:82:99:B7:04:58:4B:4C:06:FD:54:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e1029eed-2e88-4036-a7d9-ea093001f5cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.16.0/24
                IPv6:
                  2602:fc0f::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:87:91:1a:12:53:ac:2e:e7:75:e3:2e:fc:e8:59:1d:f4:7f:
         90:67:e4:50:2b:d8:0e:c2:8a:ef:8a:55:1f:b1:69:be:6b:d9:
         a1:77:e6:79:f3:1d:59:a7:55:ee:d1:cd:00:9f:2e:50:25:25:
         22:8e:35:58:9b:41:0a:06:b4:8e:d5:17:b3:07:27:66:8e:93:
         8f:4e:cf:28:b2:6c:83:c9:4d:58:38:2f:32:70:2a:a0:12:06:
         14:42:42:12:56:7f:c0:f3:2c:e1:3e:3e:43:96:73:d1:3b:b2:
         75:df:db:e1:e2:27:e7:38:98:66:f0:2e:b3:a5:82:f2:3c:dd:
         d7:d1:38:08:e8:6e:f8:9f:98:c1:d1:cb:54:68:4e:92:22:40:
         a4:fa:87:ec:55:b2:9e:19:ef:42:d3:b8:7e:f6:3d:ad:a8:12:
         73:0b:f8:b7:25:94:08:79:d0:61:2f:e5:7d:90:ac:6e:b5:be:
         09:ce:89:12:f2:a2:df:f6:35:d2:07:68:81:16:90:b7:c0:f2:
         0c:8d:45:69:72:2c:aa:0e:d2:cd:55:48:a7:f0:16:92:de:e1:
         07:8b:b9:7e:00:59:1c:df:d0:03:5b:f9:eb:04:90:c1:98:7f:
         ba:6e:95:1d:41:e9:94:8f:92:82:26:e8:83:88:11:cc:72:15:
         22:64:89:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:48:55 2026 by rpki-client