Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/80d58c62-259d-3869-b8c1-d9be9521f3ef.roa
File:                     80d58c62-259d-3869-b8c1-d9be9521f3ef.roa (raw, json)
Hash identifier:          VNmuJnaB7J3nufPjYZpSZSH0COfanHzy+5Ar5XZ0pOs=
Subject key identifier:   B7:C4:0F:92:EA:61:74:3D:C8:35:84:93:7E:4A:06:32:93:1D:8E:F8
Certificate issuer:       /CN=543031bb-b48b-4efb-ae26-4035688199f7
Certificate serial:       010D0C9F4328584F9BCDC04AB55F10C9764DFDD0
Authority key identifier: 2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/80d58c62-259d-3869-b8c1-d9be9521f3ef.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     46918
IP address blocks:        23.161.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:c0:4a:b5:5f:10:c9:76:4d:fd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543031bb-b48b-4efb-ae26-4035688199f7
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=550a749b-0778-4f14-8601-a293f93f97f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:41:78:f5:5e:ab:a6:77:f6:8d:70:e9:f3:97:
                    c6:09:7e:d5:91:01:b4:74:c0:23:9b:d9:36:63:cd:
                    5f:35:7d:52:33:80:25:ea:5d:01:a1:3b:fe:10:bd:
                    d8:a0:f0:4f:29:cb:59:59:66:f4:27:ae:1e:34:30:
                    0b:6a:b2:64:5a:da:8a:7b:73:cc:36:32:95:1e:98:
                    7a:c0:05:32:0d:3b:64:df:2c:1e:6a:4d:c0:da:d1:
                    32:d0:98:c8:58:cb:67:f4:1c:aa:6a:45:6e:0c:1a:
                    1b:a5:6a:2f:79:4a:4a:19:65:a7:ff:b0:2b:76:6b:
                    d6:00:fc:f2:3a:44:2c:d6:5f:5d:44:32:a2:eb:25:
                    48:cf:ba:09:37:5a:f6:91:6d:55:9c:78:e7:d9:8d:
                    2c:1a:c2:7d:35:55:53:63:79:54:ec:74:50:63:1d:
                    a5:fa:27:8b:71:e4:2d:64:a8:1e:09:87:2d:8a:bf:
                    84:d3:b5:de:57:76:48:a9:2e:bb:60:9f:fd:25:20:
                    a5:ef:a2:74:d8:30:e2:e8:58:8a:03:9a:b1:4f:50:
                    46:ad:ba:ca:65:87:df:2c:a0:9c:a3:b9:1e:64:1d:
                    3d:31:8b:db:73:77:d0:46:e2:c0:c8:72:c2:02:f5:
                    5a:5a:02:55:0e:e4:ee:73:05:c6:d7:7c:54:60:be:
                    73:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C4:0F:92:EA:61:74:3D:C8:35:84:93:7E:4A:06:32:93:1D:8E:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/80d58c62-259d-3869-b8c1-d9be9521f3ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7/543031bb-b48b-4efb-ae26-4035688199f7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:2F:7D:F2:35:FF:0E:F9:30:77:87:20:41:F4:80:D2:3E:08:D8:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/543031bb-b48b-4efb-ae26-4035688199f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:68:30:0b:27:55:ed:d9:ee:b1:1c:42:d5:69:80:66:58:05:
         ad:7a:96:c3:d7:0e:60:3c:c4:71:14:ad:a2:36:d7:d7:87:68:
         56:b4:65:8b:a9:db:c1:b2:0e:a5:0e:20:07:ab:1e:10:05:e4:
         b8:b0:f1:ca:8e:01:47:12:79:12:b2:cf:e7:dc:af:96:42:8c:
         92:ab:2f:f2:4f:e5:02:61:7a:c6:c3:5c:9f:79:0a:59:37:02:
         07:00:f5:cf:d6:89:7e:b2:35:81:91:7d:52:ee:8f:a9:25:af:
         3b:44:91:60:1c:ef:a1:ee:37:e5:65:ea:e8:ec:b9:66:af:b9:
         21:27:fe:5d:bc:ad:72:da:c0:57:14:ad:dc:0a:12:92:54:29:
         5c:4b:6c:42:86:18:9e:ec:cd:63:87:5a:80:bc:15:a1:ad:1e:
         8b:eb:e5:3f:9e:6f:06:70:51:69:a9:d5:e2:eb:73:57:8d:f0:
         80:09:3f:bd:13:7b:fa:ce:80:e7:89:12:0b:b9:8d:e5:bc:23:
         26:5d:37:aa:79:77:ab:51:36:5a:07:90:09:cb:50:c9:f3:26:
         52:16:d8:32:aa:04:29:f7:7f:ef:62:cb:1f:8a:96:f2:d3:ed:
         7e:0c:d9:7d:7b:a3:63:3f:e5:0e:0e:ff:b6:0f:36:04:c1:27:
         9f:bd:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 08:04:52 2026 by rpki-client