Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
File:                     5cc65789-e006-3aa4-ab5b-31603ba48809.roa (raw, json)
Hash identifier:          a/728wCA42CSQHlTX+2HePbaZZ5JljEtD5dI7/TyOvI=
Subject key identifier:   3E:C7:C4:29:24:00:A0:80:41:72:48:63:6E:4C:9E:24:68:1B:85:65
Certificate issuer:       /CN=af7885f2-5b14-4ded-b2dd-7befe215db07
Certificate serial:       010D0C9F4328584F82ADBB412EDAAA1F116B7000
Authority key identifier: BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
Signing time:             Thu 15 Oct 2026 13:00:13 +0000
ROA not before:           Thu 15 Oct 2026 13:00:13 +0000
ROA not after:            Wed 13 Jan 2027 14:00:13 +0000
asID:                     20067
IP address blocks:        23.148.8.0/24 maxlen: 24
                          2602:811:c000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:82:ad:bb:41:2e:da:aa:1f:11:6b:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af7885f2-5b14-4ded-b2dd-7befe215db07
        Validity
            Not Before: Oct 15 13:00:13 2026 GMT
            Not After : Jan 13 14:00:13 2027 GMT
        Subject: CN=eee1514d-b244-45ca-8307-fca063b2189e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:5c:42:78:07:6b:2a:b5:a2:34:a3:fb:05:
                    f4:ee:d5:9f:31:2c:d4:c3:61:5e:6a:93:4a:96:70:
                    a3:5d:60:db:3a:5f:bf:c1:a1:69:0a:a5:c4:98:96:
                    b5:3f:eb:74:77:09:cf:27:45:c7:56:4e:90:4e:27:
                    31:f4:aa:a2:90:60:96:9c:d0:dc:02:bb:82:e0:cc:
                    38:c1:a0:7b:d8:a5:77:09:73:3c:08:5c:98:df:13:
                    49:fb:df:df:8f:4b:9b:35:74:ef:6e:09:65:7d:55:
                    47:f2:6f:27:6d:02:7d:6c:a0:73:c5:02:24:28:cc:
                    91:4d:98:c7:0b:07:6e:c5:ee:15:cf:db:25:ae:d1:
                    8a:6b:c6:c7:e3:b3:ae:26:3f:18:b0:bf:a0:dd:89:
                    12:fb:98:66:1b:34:59:bd:84:5e:73:1d:f4:09:29:
                    61:52:8a:d9:ac:05:16:d6:e3:fe:36:8f:e1:2c:5b:
                    d0:a2:36:6c:7e:d7:b0:25:24:9b:1b:8c:29:e7:11:
                    a4:05:59:fa:00:4c:5f:fb:26:89:b7:1f:76:24:1b:
                    d9:41:de:b2:d4:45:b1:eb:e1:f2:92:1e:b9:26:11:
                    f3:39:99:d1:4d:8f:a7:04:ca:fa:d6:c9:fb:f7:8a:
                    4b:cf:c0:ba:5a:38:b8:43:2a:ac:06:65:7d:95:c6:
                    57:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C7:C4:29:24:00:A0:80:41:72:48:63:6E:4C:9E:24:68:1B:85:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl

            X509v3 Authority Key Identifier:
                keyid:BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.8.0/24
                IPv6:
                  2602:811:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:e2:43:89:57:a6:8b:66:95:1a:19:ca:04:4e:da:6f:79:57:
         57:f6:de:03:b9:c1:8c:e3:b9:7e:5c:0d:3f:85:16:b2:9d:88:
         f3:06:37:95:09:43:c2:12:96:a9:8f:2f:13:8b:fa:a7:0d:c2:
         ff:52:2b:9f:3c:b2:b8:21:d5:91:10:4b:3c:d7:f3:8d:ca:9d:
         c2:5d:65:d3:a9:b3:fb:11:d8:cc:27:04:46:10:e5:7d:6b:c2:
         61:5a:a4:3a:d1:e4:8b:63:bc:4f:3f:a9:7f:64:0b:1b:6d:f8:
         72:2d:a4:f6:79:78:35:e8:00:41:4c:f1:41:fb:7d:1a:96:c8:
         87:4c:53:2a:30:c8:74:eb:40:8a:4e:52:e6:72:0d:6d:58:87:
         cd:ef:30:c2:55:6c:18:b2:79:ea:07:2b:62:1e:c9:6f:57:1e:
         6b:0f:fd:57:83:8f:fa:36:f3:d2:a4:5c:15:4b:eb:ec:7e:91:
         e7:5a:43:d1:da:cb:ad:d6:af:4b:8e:57:16:cf:80:47:9b:22:
         9a:a1:7e:db:95:54:e2:84:9e:70:74:e5:0b:9d:66:9d:9a:95:
         3d:4e:2c:99:2f:46:df:9c:dd:27:46:fa:b3:80:ee:88:01:1c:
         55:95:01:f1:fb:28:5b:d0:16:a7:3e:d2:95:dd:d7:9b:8c:6f:
         c1:1d:7d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:52:18 2026 by rpki-client