Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f7dcd71d-ccb6-3cda-bcef-22389e30ec37.roa
File:                     f7dcd71d-ccb6-3cda-bcef-22389e30ec37.roa (raw, json)
Hash identifier:          5V6lh4AlMzN5RAN4kxqcHcjzixNtroOuj9hI91P4nr8=
Subject key identifier:   C8:D0:8B:8B:D5:45:3D:6E:EC:93:11:A8:0D:72:C7:7F:00:8F:1C:EC
Certificate issuer:       /CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
Certificate serial:       010D0C9F4328584F94D34F5CB2752F88AB026280
Authority key identifier: FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f7dcd71d-ccb6-3cda-bcef-22389e30ec37.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     13506
IP address blocks:        166.123.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:4f:5c:b2:75:2f:88:ab:02:62:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=023aff41-84dc-4808-a5d9-7e011d4c3e3a
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=2b74c56e-2ff4-4a29-a49d-b552059ab189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:77:e0:6d:6e:62:d7:32:9d:0f:9d:6f:79:75:
                    07:8e:3b:86:40:47:6d:9a:72:d2:6b:ca:a0:09:0e:
                    be:fd:22:0a:bc:12:5e:05:6e:79:44:d9:53:11:4d:
                    21:3f:dc:38:5b:1d:51:79:a1:3c:11:e8:a7:88:85:
                    49:48:43:90:93:2b:99:dd:25:91:63:4c:e6:7c:89:
                    a8:92:ff:76:6b:8a:6a:44:10:57:be:70:fa:cf:dc:
                    38:e8:50:12:c9:fd:a7:c0:41:e2:9d:db:c6:b0:00:
                    3b:cf:8e:a5:86:3d:39:52:d3:2d:6f:7a:20:2e:41:
                    cc:32:37:55:d5:d7:70:f8:b9:3b:56:ba:61:8d:52:
                    07:c0:c9:6a:53:e5:a2:ee:a7:76:aa:17:cd:e5:0e:
                    ca:d3:ef:a5:e7:3e:59:86:17:0b:f5:55:16:25:94:
                    b6:fd:c0:87:b2:e6:94:25:20:19:8f:16:5b:97:01:
                    95:37:b6:95:d6:43:94:b6:19:35:48:18:52:da:97:
                    3f:d1:d0:32:20:6a:ee:46:f1:b8:f0:ab:33:5c:ac:
                    fb:16:0d:69:4d:96:48:89:2e:ee:2a:63:bc:24:32:
                    bc:f1:79:bb:35:c1:c8:d4:1b:77:fa:25:92:7f:77:
                    8a:b5:f0:0b:4b:52:59:ba:61:45:91:4a:e3:aa:0d:
                    01:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D0:8B:8B:D5:45:3D:6E:EC:93:11:A8:0D:72:C7:7F:00:8F:1C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/f7dcd71d-ccb6-3cda-bcef-22389e30ec37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a/023aff41-84dc-4808-a5d9-7e011d4c3e3a.crl

            X509v3 Authority Key Identifier:
                keyid:FC:30:F7:AF:E6:D1:07:33:BD:50:BF:0A:4F:D8:B6:56:37:20:00:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/023aff41-84dc-4808-a5d9-7e011d4c3e3a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  166.123.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ef:32:f5:f3:6d:0c:61:39:41:5e:f9:f4:3e:fa:ea:77:04:
         87:a2:c3:98:01:a0:13:32:26:6e:97:ad:74:d1:41:df:95:9a:
         2e:3e:18:8b:86:eb:2f:79:7f:11:17:8c:f8:ab:3f:54:96:0f:
         32:22:f6:b5:72:9d:29:b9:75:e0:9c:dd:a7:89:08:ef:3c:bf:
         25:97:f5:67:4f:2c:41:35:85:70:6e:57:1e:ec:69:4f:e5:30:
         17:25:4f:6b:22:28:68:be:08:19:37:8e:38:b4:15:fb:fa:97:
         1b:9d:83:03:c8:fa:a1:99:a5:c9:4e:79:69:a7:15:a0:d4:0c:
         f0:1c:6e:d3:25:41:12:1d:79:a3:64:f1:6e:8e:47:05:bc:dc:
         67:dd:a5:e9:8a:71:e5:32:96:6e:2a:57:ff:57:75:d3:60:74:
         36:7e:0a:80:38:9e:bd:2c:e6:2e:5d:18:3c:ff:96:ec:86:c8:
         23:8d:f9:00:d6:1a:64:5d:92:d7:3c:48:99:94:8d:65:99:87:
         c8:5f:65:c1:8b:d7:9c:9b:d7:fe:60:39:9d:f5:16:9e:81:bf:
         f5:00:9d:60:69:5d:5a:af:c6:67:42:43:12:47:af:97:3f:7a:
         70:ac:b5:ad:42:a8:87:69:ee:e2:d4:1f:ef:f5:5e:8c:80:fe:
         8d:a8:e3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 10:02:08 2026 by rpki-client