Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/a51347c5-ef6b-363d-845a-2e49de178bbd.roa
File:                     a51347c5-ef6b-363d-845a-2e49de178bbd.roa (raw, json)
Hash identifier:          NpYbGa6NeQrRkiPFQoyQUih/1a8dl24r6lh+Xtj2jmE=
Subject key identifier:   2B:CB:44:A2:F5:6D:39:98:F4:67:2B:63:34:A8:C9:FC:A2:59:C4:BE
Certificate issuer:       /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b
Certificate serial:       010D0C9F4328584F979DC57A4924569FBE975E80
Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/a51347c5-ef6b-363d-845a-2e49de178bbd.roa
Signing time:             Fri 23 Oct 2026 01:00:12 +0000
ROA not before:           Fri 23 Oct 2026 01:00:12 +0000
ROA not after:            Thu 21 Jan 2027 02:00:12 +0000
asID:                     400992
IP address blocks:        23.172.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:97:9d:c5:7a:49:24:56:9f:be:97:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b
        Validity
            Not Before: Oct 23 01:00:12 2026 GMT
            Not After : Jan 21 02:00:12 2027 GMT
        Subject: CN=82470d6e-7b42-46aa-9b0a-a3a903b3542b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ed:5d:9d:78:5d:45:a8:cc:8d:14:3f:7d:3f:
                    95:56:50:7a:ac:59:55:db:5f:6e:97:f0:89:b1:d9:
                    95:a1:8f:f6:7c:a8:7f:9f:c3:04:5f:fd:71:4d:a3:
                    2e:2f:d0:96:fc:9b:7d:e5:01:09:94:a8:53:d1:1b:
                    de:37:85:7c:f3:9a:62:52:e3:1d:66:63:a6:f4:9c:
                    80:15:66:d1:94:30:81:ff:31:10:f8:5f:48:fb:10:
                    53:b6:38:6d:50:cd:cb:5b:e4:d0:79:f1:1b:8c:5f:
                    8a:39:af:f1:73:22:71:be:ed:e0:1e:55:8b:ba:16:
                    b2:dc:b2:7d:78:18:29:a0:f8:8b:5e:34:7d:c8:6d:
                    b5:18:7a:1c:47:7e:6f:9b:ee:1d:3d:a2:23:97:19:
                    13:c1:1f:9f:8f:68:c4:cb:80:5c:cf:10:60:20:86:
                    7a:7b:69:2d:33:59:44:3d:a7:c6:ec:39:b6:af:1a:
                    fb:25:21:36:5b:da:db:42:e0:47:fa:13:c6:b5:6c:
                    65:2d:e6:4a:91:8a:d6:4a:af:af:ec:a1:bd:00:13:
                    49:74:2f:d4:34:a6:a3:fe:a8:5e:77:01:5e:c3:6e:
                    0b:68:de:ba:24:8c:00:d2:60:98:64:13:1c:93:7e:
                    17:9f:b2:9a:12:4a:d5:61:e9:56:27:c7:5b:38:4a:
                    ee:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:CB:44:A2:F5:6D:39:98:F4:67:2B:63:34:A8:C9:FC:A2:59:C4:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/a51347c5-ef6b-363d-845a-2e49de178bbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl

            X509v3 Authority Key Identifier:
                keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9a:05:1c:8b:be:89:0a:84:a3:83:0a:cf:ef:2d:c9:4c:f3:
         9c:5f:96:ac:85:1f:8f:8d:49:b4:23:f1:1b:5e:9f:4e:87:dd:
         7c:ad:43:26:e4:4e:6c:3b:fe:2d:75:c6:9b:38:5c:ab:e6:9b:
         59:41:52:1d:2c:58:6e:fb:d0:c4:3b:d5:cb:de:1c:f9:d4:10:
         35:8c:84:e5:f8:f2:b6:64:7c:3a:25:49:6b:a0:a4:4e:d3:10:
         75:c0:aa:b2:47:56:68:f6:d3:73:0f:cd:61:44:ce:59:93:65:
         7e:f9:98:04:b0:89:63:79:92:27:bb:d2:3e:e8:40:74:94:3f:
         2e:83:ef:77:b7:91:2a:49:89:39:23:c5:1d:a5:8f:2c:4d:c9:
         3a:2c:e8:3d:29:86:06:67:9d:e5:2a:3d:e7:f2:af:bf:f9:f7:
         24:96:b0:92:e3:fb:8b:6f:78:6b:a4:d1:7f:ad:e6:dc:da:ce:
         f3:c5:b7:bc:c9:ab:d1:7c:f7:1c:a1:e1:6e:c2:ba:c5:79:35:
         13:69:cf:dd:db:e4:aa:ba:63:37:72:30:c9:e1:cf:48:18:16:
         9b:dd:3f:af:1e:d8:a1:18:a7:3b:21:27:a8:1b:89:1e:bb:fa:
         b7:40:9e:ec:45:2d:0c:11:7a:01:39:8e:99:91:df:eb:cb:2a:
         d8:a8:4f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:58:24 2026 by rpki-client