Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb834c26-6af8-345b-987c-726bee37be68.roa
File:                     bb834c26-6af8-345b-987c-726bee37be68.roa (raw, json)
Hash identifier:          kG2nVq/p0pwpqFyOeP5G5+yX9vAxgcLcNy9Vzm4vrjA=
Subject key identifier:   30:F9:49:C3:E2:F9:80:8D:FE:09:0D:63:78:54:5E:B0:FB:BC:4D:2B
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F7BB300BDAB80FAFEC7BCF700
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb834c26-6af8-345b-987c-726bee37be68.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     59253
IP address blocks:        23.19.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b3:00:bd:ab:80:fa:fe:c7:bc:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=f145355f-cba5-4b75-a45e-f9e2a4ff2e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c9:41:87:5b:59:e3:18:e3:21:24:9c:e2:c7:
                    12:61:f1:13:c0:97:72:f6:b1:49:76:08:5b:5e:72:
                    cc:2f:29:e6:9c:43:43:ec:cf:71:42:d6:df:86:78:
                    58:97:22:32:94:b6:02:74:a8:1c:65:d6:b9:f7:68:
                    d5:98:8c:cb:20:f5:05:63:58:72:dd:2b:8d:66:b6:
                    70:00:bf:10:86:e6:94:7e:0a:bc:27:04:6a:8f:5c:
                    10:fb:f6:2a:04:c4:f6:7a:c2:f5:b8:65:c0:55:45:
                    bd:00:26:77:0b:33:87:3b:25:58:b8:f3:93:ba:fc:
                    61:31:e4:72:6f:f0:c2:ef:b1:ed:04:48:a2:71:e8:
                    42:ec:7d:10:18:71:a4:5f:ff:33:71:2a:5b:f8:00:
                    66:a5:da:36:e8:78:1e:03:9c:d7:b3:d9:22:41:03:
                    5b:20:0f:38:ef:d8:c5:ca:eb:70:f4:f8:34:0e:37:
                    7c:ed:c9:a4:74:96:31:e7:c4:32:cd:73:f2:80:a2:
                    e5:1f:8b:d5:04:2c:6f:14:ab:66:06:0e:b1:04:56:
                    42:1e:f3:d0:c8:bf:1a:58:67:b6:06:14:84:ef:16:
                    aa:0d:4a:87:f0:6b:02:84:a7:fa:6b:42:cf:ab:8f:
                    cb:9a:c9:b4:50:48:da:14:f6:c0:c8:22:1c:2a:d3:
                    b8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F9:49:C3:E2:F9:80:8D:FE:09:0D:63:78:54:5E:B0:FB:BC:4D:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/bb834c26-6af8-345b-987c-726bee37be68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:93:95:26:5a:d7:ba:12:76:00:18:d3:73:f7:70:b9:45:be:
         c1:7d:b5:69:83:e8:e7:d5:2a:7e:45:17:d5:4e:23:a5:18:07:
         9f:50:07:0e:46:eb:4f:af:2c:c6:3f:9b:89:a9:ac:aa:07:4e:
         fc:87:b6:27:9a:09:2d:49:72:95:fe:f1:aa:6c:77:17:60:ce:
         b7:18:25:f8:a5:33:4f:10:07:70:1b:61:bf:c9:26:d7:8c:bb:
         9d:80:8d:23:41:7d:cf:1c:50:60:05:80:8e:80:51:a2:eb:0f:
         2d:e2:a0:bb:31:f7:f6:0f:53:b6:bd:0e:41:81:09:d4:ed:2e:
         02:16:6c:46:26:51:e6:31:34:7d:c9:0d:4b:a9:6f:76:8c:b1:
         3a:a7:96:83:42:25:a4:07:37:31:6d:6e:fd:99:f4:cc:7f:28:
         6d:08:a3:5b:0d:55:ef:34:47:94:97:cc:95:54:a1:87:78:f2:
         02:a0:86:49:dd:ee:55:5f:7e:ad:cb:43:ec:e6:7c:ef:65:3f:
         a9:f1:30:9f:cd:db:c0:f5:1a:2d:95:3a:ed:42:4c:6f:94:8a:
         15:4e:c4:01:80:a6:bb:7d:7a:0c:22:28:a7:ad:53:6d:d8:cd:
         ac:12:d3:39:63:0c:2a:39:04:a9:d2:69:64:0c:ae:bf:67:7d:
         43:3f:d2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:16:15 2026 by rpki-client