Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/288a1076-d5fb-399e-bc00-4c210be5bed2.roa
File:                     288a1076-d5fb-399e-bc00-4c210be5bed2.roa (raw, json)
Hash identifier:          b5twh2TrOx2DtpI3zzO0BRV4q4Fdi0XMIQezH79OK/o=
Subject key identifier:   EA:44:11:13:E2:40:B4:BF:BD:A7:7A:1C:8C:07:16:1B:DE:8A:74:7C
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584F6C58515E8349D0667C3C7FA0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/288a1076-d5fb-399e-bc00-4c210be5bed2.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     19157
IP address blocks:        23.86.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:51:5e:83:49:d0:66:7c:3c:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=e394240e-e73e-4c7e-89f8-21cc6af5700d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b5:88:2d:5c:58:9f:34:e0:2e:c6:4a:bd:4d:
                    82:37:24:de:d8:23:d4:4d:86:b6:c0:00:54:e8:cd:
                    c9:5a:fa:ec:f6:c1:fc:f9:9f:3b:3e:f0:36:2a:c0:
                    c6:55:d0:5b:c9:eb:ab:82:3c:a7:7c:8e:5f:c6:f9:
                    8b:2f:78:59:34:73:1e:7e:58:23:a4:66:94:f4:a7:
                    91:7c:09:a6:fc:cf:61:9a:1c:9c:25:1e:1b:88:c7:
                    bc:d6:67:82:ff:a0:95:dc:de:24:a1:54:6f:05:17:
                    ef:48:9c:31:15:64:f3:b2:56:5d:e3:f7:a5:b7:c6:
                    97:e5:51:43:9c:36:8f:cf:ad:7d:71:a3:7d:d8:17:
                    b8:e6:46:34:4e:34:f1:b3:74:82:f4:75:c4:18:eb:
                    55:de:e6:16:f7:e6:ff:9c:ff:a0:33:d8:19:06:5e:
                    32:74:b6:e6:8e:b4:f2:34:b4:d2:c6:13:fd:d1:20:
                    24:8f:d9:a1:bb:72:3e:09:71:db:3f:19:37:4a:97:
                    53:90:bd:a5:d7:f6:5f:0b:d3:08:83:ec:9b:47:b9:
                    ed:a9:b4:72:9d:6c:15:59:41:60:7c:ba:e8:cd:b5:
                    8b:af:f3:a2:60:a2:9c:44:8a:dc:61:73:18:97:39:
                    5f:92:c3:c6:44:67:40:8c:3d:c8:63:6f:97:46:c3:
                    ab:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:44:11:13:E2:40:B4:BF:BD:A7:7A:1C:8C:07:16:1B:DE:8A:74:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/288a1076-d5fb-399e-bc00-4c210be5bed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:3e:a9:f6:c9:c7:c6:ef:81:b2:6b:cb:c3:36:3f:a2:a0:e5:
         cb:39:aa:7c:98:c9:52:16:a5:e9:be:1b:92:ab:15:7c:69:2a:
         6b:b0:92:2c:02:66:df:87:ce:ec:1f:45:35:f9:17:7f:38:f8:
         b4:24:2f:84:e7:3f:fa:ef:2d:b5:2e:9b:51:c1:d1:09:2f:ed:
         e2:5f:1a:bc:37:9e:6f:5d:e0:69:36:d6:a7:11:e6:5c:be:7d:
         03:f4:f7:e3:5a:68:66:15:3c:a6:a5:9c:7a:ea:2a:c2:69:a3:
         77:f1:f4:d9:77:63:b9:ec:99:26:9b:07:6e:79:0f:6a:e9:2f:
         51:a3:22:6c:70:61:14:f0:e7:06:59:72:8d:25:7f:be:e6:4c:
         c4:3a:18:cc:b3:6b:7a:4b:ca:14:cc:5b:f0:94:be:10:f6:50:
         f0:52:87:9a:d4:0c:e8:1e:4e:2c:a0:3a:10:cc:1f:29:6b:40:
         70:ae:20:5a:0f:92:54:0c:af:c1:35:cb:e9:24:0c:df:97:87:
         e5:9e:47:1e:13:42:e7:6e:da:c5:b6:e1:90:25:91:73:83:ab:
         b8:16:c6:22:2f:c4:e9:6e:2c:db:15:5f:09:13:f4:15:d5:43:
         ee:d5:8f:d5:ad:fb:b4:83:b0:44:9f:e3:e3:59:4c:50:be:fe:
         fb:a8:13:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:34:28 2026 by rpki-client