Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/f892866d-30f5-3571-8c05-96164e674d1f.roa
File:                     f892866d-30f5-3571-8c05-96164e674d1f.roa (raw, json)
Hash identifier:          j9vlZG4c5LEHjJAHxwaXLEctne5gKPFfmQ5EZOTK4Qk=
Subject key identifier:   39:BE:33:5B:5D:6B:CF:12:79:16:24:46:71:23:B3:C1:B2:F5:FA:54
Certificate issuer:       /CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
Certificate serial:       010D0C9F4328584F81BB6A6E2A4B51D54C9D3A00
Authority key identifier: F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/f892866d-30f5-3571-8c05-96164e674d1f.roa
Signing time:             Thu 15 Oct 2026 04:52:21 +0000
ROA not before:           Thu 15 Oct 2026 04:52:21 +0000
ROA not after:            Mon 07 Dec 2026 02:00:12 +0000
asID:                     40806
IP address blocks:        23.149.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:81:bb:6a:6e:2a:4b:51:d5:4c:9d:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea0cb92-050e-479f-bff4-dddd68eb4e04
        Validity
            Not Before: Oct 15 04:52:21 2026 GMT
            Not After : Dec  7 02:00:12 2026 GMT
        Subject: CN=ab2c71cc-9bdb-4270-b84c-2cd7de06986b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:40:6b:13:fe:f1:b1:39:d2:e2:19:f0:c7:71:
                    83:e8:9b:34:fe:b2:6c:b8:b8:42:78:3d:e8:dd:be:
                    c3:e4:71:86:b9:1e:3c:a9:a9:6a:a2:44:2f:f4:85:
                    2d:2f:14:80:89:bf:9f:c8:5c:a2:76:33:ed:f3:3f:
                    20:bb:76:d5:09:92:98:48:83:0d:78:a2:c8:8a:ac:
                    1c:95:47:07:49:c4:b4:5f:14:88:dc:36:6d:a3:3e:
                    82:25:03:7e:3e:7d:cd:bc:b3:81:c7:7a:f9:73:e5:
                    8b:23:15:a1:e6:14:5c:6f:2c:f8:e8:ba:e2:40:d3:
                    8b:f3:31:b5:0f:cd:42:ef:98:e1:2f:90:f6:64:d8:
                    4c:6a:83:74:f6:e5:1a:04:d3:37:93:2a:f1:57:5e:
                    3e:57:4f:4a:94:fd:b8:8e:72:7f:60:a0:be:ec:c8:
                    d5:e1:75:30:6e:af:66:b4:02:ed:3b:c7:0b:69:49:
                    ac:62:f6:2a:91:c1:94:0c:8b:88:44:4f:7b:da:0f:
                    6f:35:89:78:4b:69:26:bd:00:ef:7c:35:54:16:19:
                    f7:8f:0f:c5:5f:bf:fe:9a:ca:81:10:a4:89:f3:4f:
                    ea:44:85:ea:39:91:77:45:db:1a:0c:d0:b7:0e:cd:
                    23:a4:27:47:bf:34:cb:98:4b:a1:4d:60:b9:a8:1b:
                    42:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:BE:33:5B:5D:6B:CF:12:79:16:24:46:71:23:B3:C1:B2:F5:FA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/f892866d-30f5-3571-8c05-96164e674d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04/eea0cb92-050e-479f-bff4-dddd68eb4e04.crl

            X509v3 Authority Key Identifier:
                keyid:F8:B6:CA:B8:C6:2D:14:6D:0B:16:82:3C:35:57:84:26:9C:01:0E:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/eea0cb92-050e-479f-bff4-dddd68eb4e04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:0d:ee:13:aa:39:3e:a6:a7:e0:c2:65:d1:d6:ee:ba:f4:a7:
         0d:bc:e8:0b:7e:10:83:8a:b3:ac:ff:cb:9a:53:41:31:e1:7e:
         ce:ce:2d:ca:61:ef:9b:a4:8e:41:ae:a2:ef:c7:1f:b0:55:2f:
         7d:c9:2c:65:8d:79:fc:d0:fc:14:41:85:09:5d:bb:68:04:12:
         2e:21:9f:15:a6:ff:26:ee:7a:8d:6c:67:d4:40:da:4a:6e:11:
         16:2b:96:a3:0f:43:14:20:2a:7e:b2:69:2a:8d:a7:7e:a4:0b:
         fe:99:19:af:1f:61:aa:5a:45:14:0d:3f:e7:20:ce:85:1c:ef:
         45:9f:03:e0:ea:74:9d:7a:8b:b6:ae:6a:1e:5d:c0:18:d3:05:
         84:7f:db:fc:fe:1e:80:e9:fe:ce:c1:77:66:b0:d3:a6:cf:9e:
         81:fc:52:06:81:25:6f:73:d0:0f:07:12:cd:71:f7:3d:48:d1:
         e1:76:b5:0f:14:b2:c2:91:22:49:f0:72:7c:b1:ba:f3:67:62:
         33:35:4a:55:c6:49:59:40:fe:90:d5:f4:79:36:29:b4:d3:37:
         3a:80:7d:b8:e6:14:f2:21:a4:da:e9:d9:1b:9a:61:d1:f1:aa:
         57:b8:2f:65:d2:c3:81:31:3f:d0:24:56:fe:bf:1b:dd:8b:54:
         2f:dc:ea:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:35:55 2026 by rpki-client