Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa
File:                     340b93af-d882-36e8-acb4-1af84b9fcca3.roa (raw, json)
Hash identifier:          KqTf8J0H+0X0IolB7UleAmdd7hCfXiebeaZRENtTJS0=
Subject key identifier:   63:CB:F6:14:31:BB:69:38:EB:3C:C0:34:78:41:91:53:E4:F4:52:8A
Certificate issuer:       /CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169
Certificate serial:       010D0C9F4328584F4975B5FE58A960F76B882380
Authority key identifier: D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     395886
IP address blocks:        23.185.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:b5:fe:58:a9:60:f7:6b:88:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e0dbbb1b-602c-4d40-8d79-9198ca060937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2f:f3:48:f5:0a:11:7a:46:eb:14:59:05:43:
                    c6:d6:01:d6:73:f5:a5:bf:3e:79:0b:0f:65:b0:0d:
                    42:b8:21:96:01:23:1d:48:94:0a:31:b9:ca:2e:12:
                    8c:0e:c6:eb:15:43:35:46:19:65:8d:85:56:76:d4:
                    c1:51:2c:3e:f7:2b:94:13:cd:0e:79:d5:b6:95:f8:
                    ef:c7:be:9d:fa:76:c1:52:98:b6:66:7f:5a:e0:39:
                    d1:28:62:8f:c5:b6:52:e0:b8:f7:dc:dc:b2:ac:44:
                    b2:9d:23:2a:3f:d8:36:5d:0e:7e:53:c7:9a:fe:80:
                    1a:2e:fe:c9:ba:1e:9f:eb:07:b2:9f:4b:95:79:df:
                    71:a4:4b:06:7a:f8:7e:db:8d:f7:eb:23:69:6d:69:
                    5d:eb:db:56:6d:c9:4b:f8:7d:3a:04:47:f8:7b:63:
                    19:e3:9f:1b:b0:51:2f:d7:64:3b:b5:4f:34:14:34:
                    f8:36:d9:fb:4c:9f:bc:f9:3d:07:23:06:68:7f:73:
                    76:9a:ce:a0:b6:c5:bb:d7:b7:c2:be:3a:3f:d8:bd:
                    07:16:4f:cd:b7:89:c5:84:93:8b:af:71:a1:07:48:
                    39:71:b8:e5:89:d8:2b:21:6a:25:d0:75:4f:90:06:
                    c1:18:2d:9e:a7:5c:83:03:8f:15:41:49:ed:5d:51:
                    dd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:CB:F6:14:31:BB:69:38:EB:3C:C0:34:78:41:91:53:E4:F4:52:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl

            X509v3 Authority Key Identifier:
                keyid:D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:a8:5f:14:6c:53:a6:72:22:36:f9:3d:bf:d2:80:82:35:03:
         dc:60:03:27:e6:74:a6:fc:7b:77:c0:00:7e:0f:b9:0d:cf:d1:
         9f:89:eb:70:53:46:27:d8:0a:36:14:dd:8e:02:92:87:03:19:
         82:c9:65:e7:65:c6:a7:17:39:67:54:4a:bf:55:5d:55:a2:3f:
         5a:91:d1:90:0d:91:de:68:d1:47:62:9e:9e:aa:7e:87:1c:e2:
         c5:1e:91:0d:bc:39:62:75:e0:f1:ca:d2:81:d3:da:ec:4d:23:
         3f:ba:f9:ec:7d:bc:80:32:49:de:72:e5:75:00:9f:f9:0d:e5:
         cb:fc:b0:39:62:56:68:ba:e0:ed:3e:7d:53:7d:1c:fc:60:56:
         31:b4:ed:a2:01:5a:81:c2:6a:f9:1b:7d:57:e3:58:ef:0e:48:
         99:b2:2b:45:0c:64:87:b0:ae:eb:7f:59:4f:c2:c6:80:e7:6e:
         57:1e:92:c9:2a:55:ac:fb:d4:21:4b:d8:ad:14:05:0e:e9:95:
         82:4f:57:ac:23:93:b4:58:08:34:1b:4c:01:a6:94:0d:32:1b:
         2c:e1:27:db:9e:23:62:3b:36:df:20:a3:1b:b1:e0:7a:d1:b0:
         60:52:e6:97:46:d8:32:94:7c:4e:67:e5:99:b0:40:e8:e0:fb:
         5d:7d:ce:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 03:18:52 2026 by rpki-client