Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d5fb9ffe-b2c8-3355-a766-49af1d9db026.roa
File:                     d5fb9ffe-b2c8-3355-a766-49af1d9db026.roa (raw, json)
Hash identifier:          KtyccrNGPYGy/XaYF295aCT47CKXxzlFLTO7jUTE0CQ=
Subject key identifier:   35:B8:B4:3E:85:15:CC:5E:29:33:F2:44:79:A3:DA:5A:E8:42:36:B5
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EB9C45F1868B85951E8591100
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d5fb9ffe-b2c8-3355-a766-49af1d9db026.roa
Signing time:             Tue 04 Aug 2026 13:48:43 +0000
ROA not before:           Tue 04 Aug 2026 13:48:43 +0000
ROA not after:            Mon 02 Nov 2026 14:48:43 +0000
asID:                     7203
IP address blocks:        23.81.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:c4:5f:18:68:b8:59:51:e8:59:11:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  4 13:48:43 2026 GMT
            Not After : Nov  2 14:48:43 2026 GMT
        Subject: CN=a6dbdc1b-d91d-454b-9fdd-d82a029278f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ba:c2:ac:c6:d4:8e:83:39:69:85:1a:4b:a5:
                    db:08:c9:1c:52:3d:23:09:33:91:85:ed:cf:05:d5:
                    85:e6:72:a8:c0:c8:51:35:39:16:bd:53:80:83:41:
                    50:3c:56:a3:65:d8:0e:ea:e0:ee:94:d9:5d:d1:3d:
                    00:60:33:79:3f:16:55:a6:43:b4:41:fa:ed:4d:e6:
                    29:2d:bd:20:87:ac:12:6c:fe:d6:ee:83:56:56:3b:
                    c7:c5:e0:4e:21:95:64:fd:fe:9d:52:17:26:6d:d8:
                    eb:d5:c2:2c:98:b8:59:0d:80:92:07:ec:ed:dc:8d:
                    3f:c7:96:ac:e1:3c:bb:04:2e:b0:43:ad:75:b2:ad:
                    4c:77:a0:d1:3b:a8:b7:54:b6:e5:a8:fd:70:c4:5e:
                    9f:e7:55:1f:3b:ca:09:e0:25:ef:92:5f:ba:c1:ba:
                    ed:3b:b0:cf:c4:ef:34:3a:38:a3:27:04:ea:64:87:
                    41:4d:fe:94:47:d0:eb:e6:38:b8:2b:ef:62:f1:90:
                    76:5e:64:ed:fa:74:35:a1:80:54:c7:50:c2:8e:e2:
                    85:26:1c:7c:f0:80:2d:75:72:a2:e1:7a:79:5d:a5:
                    69:2b:fe:ca:57:54:95:d3:93:62:6d:36:0b:92:3f:
                    bd:2e:67:6b:96:d0:74:b0:86:a6:90:19:6e:8e:dc:
                    58:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:B8:B4:3E:85:15:CC:5E:29:33:F2:44:79:A3:DA:5A:E8:42:36:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/d5fb9ffe-b2c8-3355-a766-49af1d9db026.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.81.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:55:45:d5:dd:06:45:2c:44:e5:da:32:f9:4c:55:38:f3:
         59:9e:94:42:e8:45:f7:5b:92:6c:fb:9f:91:f8:43:cc:65:8a:
         3d:b1:e7:c7:c2:fe:1f:11:01:a0:c5:a9:28:b3:3c:e9:cd:24:
         ad:a7:52:c7:fb:91:ae:36:1e:93:e8:1c:04:c8:f1:75:13:62:
         e6:34:22:9c:c4:8d:db:47:5e:81:ce:e3:d8:c2:8d:84:f3:de:
         cf:0b:a0:db:c9:a2:a4:b1:72:f6:35:2d:05:dd:3e:2f:5f:6f:
         58:ff:12:fc:bf:2f:76:b0:3b:26:a8:9e:02:43:71:fe:27:cb:
         90:01:92:0a:88:e5:90:8d:10:fb:86:76:61:a8:fc:ad:8a:ee:
         52:05:80:b9:50:ec:28:7f:b7:c1:55:88:bf:a9:1f:74:94:a5:
         48:fa:a3:20:45:a7:86:b3:6d:e1:e2:f3:d7:08:19:0b:c4:89:
         0e:04:b4:4a:3a:f2:77:18:85:90:d3:ff:e1:cb:c0:9f:9b:86:
         27:da:9d:7d:af:80:bf:8a:94:95:4d:f6:55:f5:dd:61:0d:fb:
         e7:b8:19:72:dc:9f:96:4c:60:50:d1:6f:3a:46:58:95:3b:70:
         83:50:ef:ea:56:73:db:9b:76:f5:90:9e:7f:55:08:ce:51:e7:
         db:54:81:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:37:27 2026 by rpki-client