Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa
File:                     0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa (raw, json)
Hash identifier:          LTIutwhDGpG3c8Kvj3Q9kKUHg+2J2rNbXGTimXiwQQ8=
Subject key identifier:   A8:8A:DA:97:77:4F:66:78:E6:9C:DA:DE:98:C4:AA:66:E0:31:22:A3
Certificate issuer:       /CN=7905c321-789d-4866-a23f-9f01c7b24cf4
Certificate serial:       010D0C9F4328584F8F3DC9787F3AEBBB668A2E40
Authority key identifier: 95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     395886
IP address blocks:        23.170.48.0/24 maxlen: 24
                          23.170.49.0/24 maxlen: 24
                          64.112.28.0/24 maxlen: 24
                          104.167.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:c9:78:7f:3a:eb:bb:66:8a:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7905c321-789d-4866-a23f-9f01c7b24cf4
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=c439f513-e5dc-4a6e-b311-177e1138e24c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:be:49:5a:5f:b5:cc:ed:81:a4:86:ac:d7:1e:
                    08:82:5b:c6:bb:08:79:8d:c8:f1:c2:a2:95:eb:3a:
                    ea:40:73:69:4b:dd:ba:65:b8:f3:0b:ef:bc:b2:29:
                    90:fa:24:e0:38:47:3a:1d:ba:13:30:9e:32:38:d4:
                    64:97:91:95:e8:bb:8b:ed:06:83:27:d1:58:6f:07:
                    39:02:84:8a:10:70:d0:b5:61:fd:47:00:2f:fc:08:
                    f0:38:ec:77:01:8c:7b:ed:40:ff:31:ba:27:28:04:
                    d3:07:45:de:c4:85:5e:34:cb:6c:81:b6:1d:02:7d:
                    85:f1:e0:ac:63:bb:b3:d6:97:c7:3a:39:98:66:53:
                    1d:b7:3f:0e:53:2c:7a:62:1c:e4:dd:a8:09:44:03:
                    19:83:c0:20:72:d1:81:f5:44:2e:49:60:60:a2:11:
                    17:8f:79:2c:63:6f:25:dc:68:9a:a6:4d:43:30:fb:
                    ec:7d:ae:af:32:d5:4b:17:ed:56:3c:0c:e5:16:17:
                    12:8a:5a:09:76:27:73:6b:43:99:85:12:ab:f5:00:
                    1a:a7:12:b6:90:32:aa:ed:91:07:b1:0f:91:68:89:
                    d7:ec:a8:1e:44:68:2a:50:55:5e:1f:a0:75:f1:4b:
                    eb:42:8e:44:c9:36:e0:de:f8:3c:a5:e9:1e:84:3f:
                    db:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:8A:DA:97:77:4F:66:78:E6:9C:DA:DE:98:C4:AA:66:E0:31:22:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/0d952aa2-dc60-3c5e-a225-feac8a749bbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4/7905c321-789d-4866-a23f-9f01c7b24cf4.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:CB:C3:EF:54:4A:7A:B9:52:F1:EC:87:8D:79:88:28:E5:14:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7905c321-789d-4866-a23f-9f01c7b24cf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.170.48.0/23
                  64.112.28.0/24
                  104.167.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:36:69:3e:72:1e:dd:10:4e:56:2c:08:ce:fd:5b:63:bd:64:
         47:19:6a:3b:6a:7f:9d:3a:58:4b:55:fa:9b:65:45:06:7b:ba:
         e0:cb:2e:1a:02:8e:18:90:22:f3:d7:c4:5f:f8:1e:8c:e6:6a:
         90:57:8d:78:8c:d7:76:ad:ad:59:05:ba:a9:c9:b8:94:45:00:
         00:86:f6:84:bf:98:98:ad:2e:3c:36:8f:a9:c2:ef:e6:73:bf:
         39:dd:13:37:ef:19:37:8f:86:8a:07:38:15:87:46:14:a0:1d:
         2b:e3:0a:c2:e1:6d:0a:37:66:b2:25:94:e8:14:f2:2f:a0:09:
         f2:d5:6f:0d:4d:25:44:1f:35:cb:7e:1b:a3:16:8b:0e:78:e7:
         7c:5c:29:4f:ea:59:d6:19:3d:61:de:7e:a0:34:74:43:2c:25:
         51:28:73:d9:2d:15:ca:6c:ec:f6:93:64:58:73:55:48:17:11:
         73:e2:38:32:b5:4b:37:0e:b0:10:8c:37:27:f2:88:bd:07:f7:
         2f:46:a5:db:70:4a:ec:45:c4:19:28:94:a9:f2:d1:39:3d:7b:
         9b:1d:6f:d6:8c:bb:58:b9:e7:fc:5f:13:5c:d7:4e:cb:4f:df:
         3b:ed:a8:72:de:db:b1:f2:da:13:bb:9c:09:af:f0:9f:52:4e:
         7f:15:1c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:40 2026 by rpki-client