Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf08b24a-fd8a-307f-a4c3-a5311af84d72.roa
File:                     bf08b24a-fd8a-307f-a4c3-a5311af84d72.roa (raw, json)
Hash identifier:          6MQPWkJrQiL3+sv6zqz5Bf3EjY1wsSwdytpeBneGmNo=
Subject key identifier:   ED:3F:79:67:1D:10:30:95:C1:36:00:30:E2:89:6E:82:CC:70:22:D8
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584F655D8B81E311B6C7DB166640
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf08b24a-fd8a-307f-a4c3-a5311af84d72.roa
Signing time:             Mon 05 Oct 2026 01:00:13 +0000
ROA not before:           Mon 05 Oct 2026 01:00:13 +0000
ROA not after:            Sun 03 Jan 2027 02:00:13 +0000
asID:                     10796
IP address blocks:        24.123.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:65:5d:8b:81:e3:11:b6:c7:db:16:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Oct  5 01:00:13 2026 GMT
            Not After : Jan  3 02:00:13 2027 GMT
        Subject: CN=18969ec2-909e-4fba-9df1-d11adf3319dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a9:26:ce:1b:97:a9:1a:e0:a0:f5:d8:71:2b:
                    c8:e0:69:25:89:32:32:4a:a0:88:e9:78:e7:74:70:
                    1b:3e:1e:c7:fc:b2:1e:fe:37:71:6b:a5:3c:15:e2:
                    2a:ad:3a:e6:53:ed:0b:9d:6a:9c:0d:0b:fa:5e:24:
                    84:ed:07:63:95:06:c5:f6:01:8e:4a:16:e4:48:84:
                    4a:50:4b:07:48:cc:52:65:0d:66:0d:a4:cc:31:b4:
                    23:16:9f:fe:4e:ab:9c:ca:cf:ee:b9:48:ea:43:f1:
                    4f:85:08:f4:e1:49:0e:1f:24:3b:96:1d:da:e8:d7:
                    6e:23:ec:71:e6:08:fa:61:bf:97:bc:0c:58:1a:e4:
                    03:36:c9:d2:bc:17:0e:ab:53:00:a6:4e:8c:95:a7:
                    39:52:ba:0d:2e:65:88:8b:6c:10:54:87:57:24:f3:
                    95:e6:59:0d:8f:45:90:02:77:df:ca:66:ec:c8:25:
                    84:b5:7b:94:4a:f9:90:8c:08:42:e6:23:71:c1:1e:
                    f7:45:57:dd:c4:9f:9c:b8:82:1f:3c:87:1c:f4:88:
                    b5:82:9c:e1:24:b9:51:d3:11:1a:ef:27:27:11:ad:
                    fd:64:66:54:35:bd:f9:d6:53:39:9f:cb:9d:fe:00:
                    9f:7d:52:3f:89:aa:8a:cc:ae:ce:d8:fd:5e:ff:a0:
                    d5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:3F:79:67:1D:10:30:95:C1:36:00:30:E2:89:6E:82:CC:70:22:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/bf08b24a-fd8a-307f-a4c3-a5311af84d72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.123.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:cd:af:4a:48:f7:28:73:d0:1f:11:ab:ec:79:3b:03:4a:07:
         38:35:50:dd:2a:8c:09:33:0b:73:55:0b:5f:f2:89:40:df:df:
         c1:fe:e9:6c:06:f1:76:b1:a3:9b:f5:57:eb:46:99:4c:af:de:
         49:22:31:ec:60:19:60:7c:65:9a:3c:f5:d4:2d:d0:55:13:be:
         16:f3:0d:f7:2b:8a:77:83:4f:eb:32:bc:22:ac:49:12:8f:03:
         33:f4:bf:99:38:86:92:6c:ca:ce:3a:0b:cf:d7:64:a9:b3:9b:
         ee:f4:80:d7:79:8d:0f:a6:7a:c3:cc:8c:a0:b9:f4:75:91:fe:
         aa:42:9b:43:50:ac:f2:b9:1c:b3:36:0e:94:88:5f:e5:7d:a3:
         4f:ae:6a:1e:76:1b:37:95:e4:0c:c5:7a:29:f4:aa:46:5f:af:
         d6:b7:80:89:35:d7:09:ae:40:a4:54:11:ea:f5:bd:1a:0f:08:
         20:53:14:0a:0c:35:82:49:80:84:e5:52:4f:96:61:14:89:07:
         16:b9:38:30:9c:4c:cf:ff:b1:ba:ee:e2:fa:cf:37:1a:b7:d9:
         51:1e:0d:04:ad:ad:d1:da:f0:dc:4b:23:a3:ca:16:c3:ae:61:
         7a:88:4e:0e:81:ce:fa:77:77:31:b4:cd:1e:9c:6c:58:57:07:
         bd:92:7c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:35:49 2026 by rpki-client