Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa
File:                     9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa (raw, json)
Hash identifier:          QnJjX4B7cZMqtUJphVwI9hwFK2V2AdkD7j9o3mtv9RA=
Subject key identifier:   7D:65:11:36:EB:B5:0C:4F:1A:9D:C8:17:06:85:FB:44:B2:E4:F2:14
Certificate issuer:       /CN=b1341766-e680-439c-a8dc-fb35f8f84ed2
Certificate serial:       010D0C9F4328584EFCACCB0167A04D7B0AF17C60
Authority key identifier: 58:32:47:89:EB:BC:F9:31:B7:07:4D:E0:55:B4:EC:B4:DF:3D:08:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     53680
IP address blocks:        23.176.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:cb:01:67:a0:4d:7b:0a:f1:7c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1341766-e680-439c-a8dc-fb35f8f84ed2
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=5857fdec-8470-4b99-aa05-dc1c5f2dabd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:6e:74:82:67:83:e8:82:50:0c:0c:b3:a5:
                    dd:c0:c3:b8:1e:76:80:f6:61:66:96:92:be:98:9e:
                    3a:bd:8e:ce:6c:f0:49:8e:6e:29:b8:80:75:ec:ab:
                    00:d2:29:cd:df:3e:8c:b3:80:33:88:96:23:52:1f:
                    f0:1c:1a:5a:33:13:81:5a:91:9f:28:a3:da:83:f1:
                    83:4a:95:05:ea:e0:4d:e2:db:f3:ec:21:5f:eb:6e:
                    fc:a1:06:52:39:e6:5d:06:73:04:8a:8a:08:81:23:
                    90:98:67:19:44:97:bd:81:1e:16:7b:a3:6a:67:5c:
                    1a:32:da:02:24:90:49:93:7f:2a:14:62:22:98:80:
                    25:66:44:8b:e9:96:5e:89:bc:61:ab:14:a7:ef:3f:
                    c9:8d:8c:1e:b4:53:b2:11:73:10:d8:a5:c8:29:a6:
                    d1:c7:80:12:05:f4:75:da:1a:ca:ad:ca:92:de:68:
                    fe:9f:df:51:76:95:dc:d3:ec:61:d8:16:cb:83:bc:
                    38:7e:a8:1c:87:5a:fd:72:3d:d5:df:a1:a9:fe:c8:
                    f8:28:e7:63:43:63:7c:a0:46:a3:c8:ee:c3:49:b7:
                    7a:d0:86:79:87:a3:7e:f9:90:ce:bd:58:d4:87:70:
                    04:13:8f:99:8a:6c:55:4e:f7:aa:e2:ec:6d:a2:95:
                    59:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:65:11:36:EB:B5:0C:4F:1A:9D:C8:17:06:85:FB:44:B2:E4:F2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/9fc60738-a4a7-391f-b6eb-0f82b7de9105.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2/b1341766-e680-439c-a8dc-fb35f8f84ed2.crl

            X509v3 Authority Key Identifier:
                keyid:58:32:47:89:EB:BC:F9:31:B7:07:4D:E0:55:B4:EC:B4:DF:3D:08:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b1341766-e680-439c-a8dc-fb35f8f84ed2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.176.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:eb:e8:9e:fe:d4:9e:c4:d3:e3:b6:c9:b0:ab:22:e7:0e:5b:
         04:ea:20:69:39:ba:71:f7:6f:08:89:b1:de:7b:51:ff:da:b2:
         1f:09:e7:a0:5b:89:9e:42:c8:41:aa:5e:de:05:5f:8a:77:de:
         21:4f:47:d0:af:ac:1b:e6:c7:ca:c9:8c:10:8c:e1:82:7d:03:
         6a:6a:ce:b2:fe:00:75:89:43:4b:7c:7b:e4:c9:b8:98:ea:17:
         88:e6:ee:df:90:22:f6:91:2d:ca:ff:23:67:18:99:b0:d9:23:
         98:30:3f:48:8e:dc:6e:c9:0f:61:b6:56:df:eb:73:5a:51:da:
         e3:5d:60:ea:4a:4b:63:73:4b:3c:f0:44:95:4e:dd:94:cd:63:
         42:e8:1e:47:57:af:a7:78:d5:3a:e1:80:8a:98:32:31:2f:dd:
         a7:ab:70:ba:07:80:5e:6e:4a:4a:17:8e:35:6f:54:c3:03:c8:
         11:fc:df:da:7a:b2:0d:e4:6b:ca:d3:90:a6:40:c8:7c:ce:f4:
         58:fa:6e:af:8f:33:e5:9a:72:e9:57:4f:ba:1e:c1:df:d5:da:
         ba:01:21:4b:f5:ec:26:f7:07:ab:96:93:23:3c:0e:97:5d:94:
         75:11:b8:32:9b:4f:05:28:9e:d0:c6:d6:a3:cd:fe:d1:b7:37:
         9b:9a:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:34:21 2026 by rpki-client