Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/0323e24c-cbd7-363a-a1e1-f7f870a24e4a.roa
File:                     0323e24c-cbd7-363a-a1e1-f7f870a24e4a.roa (raw, json)
Hash identifier:          bjQeDZZ7cn2Xz4kJzGmCstxA9YXPCcx5FK9u4meGZYU=
Subject key identifier:   6D:BE:EC:62:A8:9F:1E:3B:A7:D2:D6:18:E9:0E:B9:8E:EE:2C:70:76
Certificate issuer:       /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial:       010D0C9F4328584F00DCCF39574D283326213660
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/0323e24c-cbd7-363a-a1e1-f7f870a24e4a.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     137081
IP address blocks:        149.106.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:cf:39:57:4d:28:33:26:21:36:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=3679c4a5-7364-47b2-a9bd-da61ba675fdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8e:b7:30:23:8e:c6:11:41:9c:0e:38:cb:8f:
                    91:74:a4:bc:fc:95:5f:ef:b6:07:08:72:ad:89:4e:
                    8b:b8:db:d1:d2:51:2b:16:23:83:1f:0d:3a:3e:65:
                    aa:2c:d4:ae:1e:71:8f:d1:b9:9c:31:a2:34:a3:4d:
                    96:7f:1f:a2:0f:af:27:b7:1e:77:6b:51:32:b7:e5:
                    ae:8e:b3:6f:13:67:4f:01:d7:21:c9:1c:4a:05:d0:
                    0e:3e:c5:7f:ce:aa:9b:c2:1c:cb:d4:ff:bf:fa:b6:
                    7d:42:ef:7b:6f:2f:3f:4a:fb:c7:6d:ca:55:5a:96:
                    33:c3:5c:51:56:9d:e3:df:87:a1:a4:74:40:3c:31:
                    92:f5:da:8e:dd:cc:db:56:da:5e:c6:39:e9:9d:5f:
                    d0:65:cf:8b:e6:84:7f:bd:9c:d8:eb:b3:8d:d5:5b:
                    8e:cf:17:f1:c7:48:b2:12:47:ad:cc:b7:27:b6:e6:
                    82:be:34:bc:68:fd:60:ab:3d:7d:19:4a:e0:96:df:
                    00:8d:22:3c:bd:8e:46:da:fc:04:8a:01:a1:2b:c6:
                    28:15:74:2a:c9:98:58:e0:d3:f3:5a:32:22:1f:10:
                    e2:e5:ca:9f:69:80:37:fc:1a:b1:bf:1f:f4:c0:08:
                    77:71:fc:bf:45:f3:9f:fe:81:ba:37:3d:c5:d3:6c:
                    b4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BE:EC:62:A8:9F:1E:3B:A7:D2:D6:18:E9:0E:B9:8E:EE:2C:70:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/0323e24c-cbd7-363a-a1e1-f7f870a24e4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl

            X509v3 Authority Key Identifier:
                keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.106.212.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:de:2c:8e:4b:22:ad:d9:ec:92:f9:94:c9:7e:8c:da:c8:e1:
         1b:7a:60:49:79:d0:85:b1:60:d3:be:a3:29:23:85:c3:f6:76:
         2c:6d:bd:f1:32:09:63:dc:ef:71:d1:0a:8c:0f:9c:14:1f:22:
         fc:a4:bb:2e:9f:8d:32:2b:0c:45:e6:89:a8:9a:1a:5d:16:5d:
         9e:30:fa:36:29:b5:b3:af:d3:04:11:90:d1:e4:ef:e3:2c:21:
         32:e0:a0:4e:50:c4:7b:4d:96:ea:01:41:72:db:3e:06:64:36:
         3b:6d:5e:39:cb:22:f1:4d:93:65:d6:c0:da:de:4f:4e:5a:66:
         70:79:c3:7e:79:20:e7:12:40:ba:ff:46:b4:d4:9d:8d:ce:1b:
         87:46:65:b8:a8:ae:e5:5b:ee:f3:59:30:9a:45:b8:ed:b9:c6:
         44:de:88:35:8a:3b:39:3f:a8:bb:8b:e2:c3:07:5e:6f:e5:5d:
         7e:30:e6:53:2c:c5:8c:d2:47:12:44:62:8f:f6:ef:05:f0:0e:
         79:0f:78:11:d2:31:d6:0e:fc:6d:c2:3f:9e:f8:c8:c9:b1:bc:
         49:a7:86:d0:3b:78:6f:d3:c5:21:9b:88:6b:06:e1:03:28:a4:
         1e:fa:1f:c5:01:af:b5:c8:78:fb:eb:4d:f7:1c:8e:ff:68:06:
         eb:75:fa:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:07:21 2026 by rpki-client