Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa
File:                     0a42a172-0f73-3008-af81-6fbc4d92431b.roa (raw, json)
Hash identifier:          uuuG9RSERQnpFaLf1L/qISEVJ/8sVHvxsp5PZ6WXEiU=
Subject key identifier:   64:62:73:13:3C:C7:74:B0:D4:6A:6F:B1:49:D1:08:06:4F:BE:E3:82
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584ED9C75CB9B4C77BAE7E381E00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     133752
IP address blocks:        23.19.52.0/24 maxlen: 24
                          23.19.53.0/24 maxlen: 24
                          2607:f5b5:2::/48 maxlen: 48
                          2607:f5b5:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:5c:b9:b4:c7:7b:ae:7e:38:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=9f3d277c-f456-42d3-9639-2ec857a961ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:38:58:ac:e0:c0:4d:da:bf:2c:09:16:36:21:
                    a1:7c:52:28:fe:8c:2a:1e:1a:3a:a8:f4:52:a3:82:
                    f4:93:0c:1e:ca:29:62:37:b3:22:e2:e5:70:90:33:
                    08:6b:67:ec:ff:7d:de:8b:ab:74:ed:f0:ab:9f:62:
                    21:b8:cd:b0:29:f7:cd:89:ca:14:d1:2d:48:28:d9:
                    f4:8e:a8:16:3e:b0:3c:6c:ff:59:d7:78:34:ec:46:
                    b1:50:36:fb:b3:cf:23:79:c0:4a:63:ff:ad:5c:82:
                    12:5a:8c:48:da:e8:28:67:0b:6f:07:3c:b6:53:93:
                    16:61:f2:2c:ad:f4:89:08:79:3b:a9:8f:4d:99:d7:
                    28:cc:a5:8f:fd:9e:a7:7f:f8:a5:2d:d9:1a:ef:17:
                    40:b0:ee:9c:d1:1e:12:c5:4b:74:17:fb:5c:60:b7:
                    df:f2:20:e3:6f:10:df:33:c9:39:bf:2e:cb:7e:c4:
                    af:18:83:bc:17:ce:3a:11:30:b5:a8:18:37:10:69:
                    c8:0f:1f:7a:eb:c4:46:aa:8f:88:43:35:55:cd:67:
                    ad:7f:44:76:7c:42:f3:1e:a6:37:e3:25:0e:25:8e:
                    36:0a:87:f7:c8:d5:f9:9c:7c:fb:0e:f3:dd:bf:49:
                    c4:d3:14:d5:b1:d6:3f:4e:3e:27:52:89:74:c4:68:
                    7f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:62:73:13:3C:C7:74:B0:D4:6A:6F:B1:49:D1:08:06:4F:BE:E3:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/0a42a172-0f73-3008-af81-6fbc4d92431b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.52.0/23
                IPv6:
                  2607:f5b5:2::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:5a:4b:53:04:d5:32:3f:7c:9a:ca:d5:db:76:e4:3f:fc:
         06:6b:20:73:8e:59:31:3b:51:5e:9a:bd:a1:83:c7:60:11:09:
         5b:03:35:0c:2e:3e:6c:a4:d0:1b:b1:7c:b9:46:4e:70:4c:18:
         6d:63:3d:f6:da:34:2e:03:79:75:de:d5:3f:b0:0e:73:98:a0:
         5d:7b:24:14:b9:80:8e:6e:d1:91:15:cb:74:9c:bd:e0:44:ca:
         ed:00:96:46:0c:b1:57:a5:06:e4:af:63:2c:a7:07:07:ec:17:
         ca:04:ed:86:da:c4:cc:42:59:66:a5:22:44:80:4e:e8:b8:84:
         db:7d:01:8b:5d:a7:2f:be:17:44:b0:46:70:4f:ad:fe:3d:ce:
         13:92:dc:bf:0b:0e:23:0d:7b:a1:53:c7:50:9e:60:42:59:69:
         20:fb:45:96:d5:f5:95:be:a9:c2:bc:6f:91:eb:61:70:85:46:
         27:d6:dd:5e:c4:47:d3:fb:c5:e3:a8:32:ce:bf:a1:e8:0b:2b:
         9d:b1:cb:b5:7a:cf:f0:f0:e0:fe:2e:5a:59:47:1c:4b:e4:72:
         e3:48:5c:a7:62:df:31:43:4e:04:a6:4e:1d:4a:fb:f0:6b:98:
         39:2c:65:5b:14:0e:a3:89:0b:00:c4:1c:5f:4c:8d:78:83:89:
         05:0d:2d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:23:50 2026 by rpki-client