Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/01394ce9-423d-3813-8b46-d3af69cd9d37.roa
File:                     01394ce9-423d-3813-8b46-d3af69cd9d37.roa (raw, json)
Hash identifier:          K0qMga+ypS3uf3X/YiNUGYysI2fo4Rah55RrbGUM9o8=
Subject key identifier:   F9:20:DB:F5:84:22:18:3F:06:96:D7:07:B9:55:D3:60:34:36:93:9E
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EB9C1E30A0C3E4A940AF6E000
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/01394ce9-423d-3813-8b46-d3af69cd9d37.roa
Signing time:             Tue 04 Aug 2026 13:43:43 +0000
ROA not before:           Tue 04 Aug 2026 13:43:43 +0000
ROA not after:            Mon 02 Nov 2026 14:43:43 +0000
asID:                     7203
IP address blocks:        23.108.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:c1:e3:0a:0c:3e:4a:94:0a:f6:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  4 13:43:43 2026 GMT
            Not After : Nov  2 14:43:43 2026 GMT
        Subject: CN=d7978382-6e4b-4d73-a2ad-34d610a8df4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:22:41:d9:db:d4:de:5a:3c:43:d3:56:3d:09:
                    63:43:48:c8:6a:fa:b9:c5:b2:5a:71:59:56:c6:32:
                    0c:bb:2e:64:b5:b8:dc:90:9e:de:29:4a:0b:8b:41:
                    b4:50:a5:d6:10:67:ef:5d:81:79:54:0b:9b:b1:c9:
                    31:17:89:83:a9:b4:f2:2d:0a:66:a1:bb:cb:8a:ea:
                    57:0a:04:f0:0b:1c:da:23:68:7c:ba:31:78:55:85:
                    2e:1e:a3:85:fe:79:7a:50:ef:7f:5a:81:7c:19:cf:
                    8d:01:ca:cd:bf:6b:57:a5:25:ff:62:62:a8:28:69:
                    15:24:55:03:b3:38:9e:18:da:5e:e5:01:7a:5e:07:
                    33:2e:0d:22:78:31:56:a4:2a:4d:79:ea:6d:46:b4:
                    01:fe:db:8e:81:e8:d9:35:d3:c2:d3:26:4b:1f:4c:
                    17:1e:15:62:53:e8:cb:c0:de:17:93:05:9f:2f:ad:
                    ca:90:92:7c:c3:ab:fc:46:12:79:84:5d:44:bd:1b:
                    d8:34:2f:6a:0d:0e:a4:58:85:3e:9a:cd:e9:cc:48:
                    77:29:0a:50:be:06:3e:a4:6b:11:c8:d9:57:ff:3d:
                    fc:d6:87:ec:e0:7f:99:b6:ea:8a:25:54:20:d4:53:
                    9b:a8:bd:ec:7a:d9:dd:b9:ac:2a:2b:ce:84:27:11:
                    8f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:20:DB:F5:84:22:18:3F:06:96:D7:07:B9:55:D3:60:34:36:93:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/01394ce9-423d-3813-8b46-d3af69cd9d37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.108.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:74:1c:91:30:cb:36:48:c7:34:5e:70:b2:75:c4:e5:57:02:
         7a:1b:fe:22:02:a4:8e:33:a0:1b:88:6f:d5:ef:98:49:3e:55:
         5c:c2:86:dd:99:50:a8:ca:73:b5:ce:aa:33:27:aa:86:b4:ea:
         04:27:78:9c:4d:6f:5f:25:b3:83:20:07:4a:c6:60:0f:ec:63:
         55:17:13:0a:55:8d:d7:35:1e:cd:a6:5b:77:90:6b:44:35:74:
         92:86:f1:6d:40:37:04:68:51:90:48:2f:de:2d:12:b2:58:17:
         6b:36:94:02:c3:1f:7d:da:5d:3b:81:9f:d9:03:a3:82:c1:48:
         93:3a:84:aa:fb:b6:43:a1:01:f6:b4:a2:da:d1:0a:0e:e3:ec:
         16:27:b8:cf:1b:8f:eb:b8:f8:e9:23:00:e7:4e:74:a9:f4:58:
         d4:ab:0d:5e:16:a4:20:5e:70:8f:5b:3d:45:9a:42:6e:e0:f4:
         b6:09:35:97:ab:fc:35:e1:2f:14:2b:57:2c:43:80:fe:1d:da:
         af:97:b9:50:f5:5c:ae:a2:b5:4d:ba:85:1f:51:3c:8f:92:87:
         30:c5:bd:44:e2:04:10:cf:33:ca:e8:bb:7e:db:3c:1a:3d:3c:
         09:de:2c:b3:69:b0:a5:83:46:7e:9d:7d:53:9e:8d:79:39:f7:
         25:86:95:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:39:21 2026 by rpki-client