Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/c90ab03d-58cf-370f-906d-b31be90f3034.roa
File:                     c90ab03d-58cf-370f-906d-b31be90f3034.roa (raw, json)
Hash identifier:          PHtjMykha8DeourB3vfNMy79rYnsrk5720RtUFmsrNQ=
Subject key identifier:   3E:10:62:79:8D:59:9D:14:3D:1E:25:D3:E1:6B:1C:26:0F:D3:EC:F2
Certificate issuer:       /CN=67f18c85-4b4b-447b-99f3-764300e28398
Certificate serial:       010D0C9F4328584F1897A3B097428D3B5A42AA6A
Authority key identifier: 6C:C1:CA:14:20:93:95:EF:8B:4F:61:26:36:8B:1C:9E:04:AF:F4:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/c90ab03d-58cf-370f-906d-b31be90f3034.roa
Signing time:             Mon 07 Sep 2026 13:00:12 +0000
ROA not before:           Mon 07 Sep 2026 13:00:12 +0000
ROA not after:            Sun 06 Dec 2026 14:00:12 +0000
asID:                     18792
IP address blocks:        23.160.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/67f18c85-4b4b-447b-99f3-764300e28398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/67f18c85-4b4b-447b-99f3-764300e28398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:18:97:a3:b0:97:42:8d:3b:5a:42:aa:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67f18c85-4b4b-447b-99f3-764300e28398
        Validity
            Not Before: Sep  7 13:00:12 2026 GMT
            Not After : Dec  6 14:00:12 2026 GMT
        Subject: CN=ba3fb0f9-03a2-4c7e-a52c-c9eb187eaa27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:69:64:6b:fc:a4:6d:e7:a6:b3:fa:ac:0f:ca:
                    81:d2:a9:ae:c1:b5:c9:f9:53:89:72:ac:a0:f4:68:
                    2f:05:a4:e6:11:c5:6a:08:53:a9:d2:04:20:07:08:
                    88:a8:f9:ac:04:db:a5:55:9b:cd:69:01:49:0d:7d:
                    6d:0a:af:35:a5:f2:40:37:5f:1d:40:15:db:aa:ab:
                    77:b1:0a:17:4c:a9:64:ed:e1:fa:16:75:56:e5:2d:
                    e3:c3:18:36:1c:c0:88:68:8a:d0:2d:48:a4:25:fc:
                    3c:ba:32:5a:7a:70:76:67:34:ed:17:08:62:03:2a:
                    ea:85:31:c9:b2:3d:c9:d6:1a:74:64:25:76:74:ee:
                    76:f4:4d:68:35:bf:9d:06:65:66:c8:b3:9c:df:97:
                    1a:7f:b6:78:9a:e4:62:e3:ff:e2:b2:65:a4:42:ae:
                    5a:83:82:96:04:18:83:d1:1f:7e:f5:2e:23:1a:cf:
                    68:69:b5:c6:d2:89:e9:14:7c:fd:d3:d5:4e:74:34:
                    6e:62:ce:3f:1b:fb:3a:7d:ed:a3:3b:3f:6f:5d:c2:
                    d0:79:fa:9e:d2:c8:e8:dd:b5:3e:26:6f:7c:fa:2f:
                    7f:e6:29:59:c2:ba:0c:4a:da:48:23:e7:7b:74:3b:
                    03:91:63:1d:45:df:32:d7:50:44:19:cf:bb:ad:9a:
                    20:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:10:62:79:8D:59:9D:14:3D:1E:25:D3:E1:6B:1C:26:0F:D3:EC:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/c90ab03d-58cf-370f-906d-b31be90f3034.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398/67f18c85-4b4b-447b-99f3-764300e28398.crl

            X509v3 Authority Key Identifier:
                keyid:6C:C1:CA:14:20:93:95:EF:8B:4F:61:26:36:8B:1C:9E:04:AF:F4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/67f18c85-4b4b-447b-99f3-764300e28398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:3b:08:82:d7:5c:cb:ed:f6:c2:f7:e7:bb:79:5d:20:6e:f5:
         49:73:27:17:33:ae:2f:e1:a1:50:51:dc:eb:d7:2d:b6:7b:8a:
         36:22:23:11:69:08:6a:4a:9e:e6:be:ca:38:e7:3a:9a:e8:08:
         eb:b0:ab:fd:df:51:fd:a3:36:d6:d2:3e:6b:e9:6e:0d:75:51:
         2a:1e:7b:b7:b0:a6:8c:e5:58:c4:cb:de:2c:d7:10:9e:1c:ab:
         16:8c:be:90:1e:70:ff:83:d9:b0:5b:40:05:64:77:cc:c1:47:
         62:25:7a:98:d5:68:ba:c3:8e:60:ec:3e:e1:d9:1c:51:84:71:
         7b:5e:79:61:ff:d4:9b:51:01:b1:03:0f:92:bd:21:a9:81:da:
         09:37:50:a8:ed:7d:da:a4:79:33:90:5f:8d:ac:c8:b1:17:92:
         c4:b3:21:65:2c:89:d3:a9:60:17:06:31:e6:0f:b0:6a:32:8d:
         97:ff:5d:2d:71:ff:58:93:82:0b:6f:61:5e:b6:17:ea:7f:e4:
         ad:85:23:ae:44:f1:f0:1c:62:58:c4:b7:31:39:cf:ba:49:0f:
         bf:cc:ec:fe:66:12:3e:a0:ec:c7:3b:d0:b7:37:fd:22:23:a3:
         22:94:9b:cd:cc:46:fa:55:da:a2:ca:fd:0f:ac:d5:a9:79:d4:
         19:9f:34:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:59:03 2026 by rpki-client