Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa
File:                     dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa (raw, json)
Hash identifier:          gok+x03zuwl60RLpnDwM0F08kAJMcBG8V3BzrHiyP2Q=
Subject key identifier:   03:F9:EB:0F:C1:A7:65:85:7F:27:27:59:7E:39:B6:2F:1D:7F:5C:A9
Certificate issuer:       /CN=cf2b524b-14b9-47ee-b938-34b0cc40ec5e
Certificate serial:       010D0C9F4328584F497538358CE29B5309741700
Authority key identifier: 58:75:2F:2C:FB:91:D0:C5:D6:87:B1:CE:3C:32:B6:4E:17:85:EF:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400289
IP address blocks:        23.132.40.0/24 maxlen: 24
                          23.152.8.0/24 maxlen: 24
                          2606:9440::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:38:35:8c:e2:9b:53:09:74:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2b524b-14b9-47ee-b938-34b0cc40ec5e
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=3d80bf85-18ae-45ee-bd9c-d80fbece59ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:91:cc:2b:49:41:f7:cb:a7:e4:c5:e1:2d:5d:
                    a4:a8:39:aa:45:a7:fa:a1:d7:8b:23:2e:d9:11:58:
                    42:42:86:89:eb:ac:6c:74:e2:05:76:72:5f:8e:46:
                    ca:4e:6a:f1:d3:16:2b:d8:80:27:ab:41:ea:b6:9a:
                    89:0e:5c:f0:87:bb:2c:7a:41:89:f6:51:b2:01:cb:
                    80:60:e6:48:a2:4a:5d:a4:e9:7f:07:b3:56:60:71:
                    a9:ab:b5:3e:3e:57:d1:37:d4:f1:89:b9:56:42:34:
                    20:fd:22:5f:14:26:3b:fc:19:0b:7b:16:9a:ce:65:
                    60:ca:73:af:bf:a7:94:84:9b:58:ef:1c:1b:18:74:
                    83:45:f4:cf:7b:b1:91:34:62:d8:59:87:38:21:a0:
                    c8:37:52:eb:13:d1:83:bb:af:90:16:6c:a6:66:24:
                    39:f4:bb:cc:14:8e:26:84:6b:37:1b:4a:20:26:82:
                    60:8b:71:38:63:e4:22:c7:d2:f1:03:ff:3d:94:14:
                    44:a5:16:c7:33:ab:1e:dd:8f:54:59:3c:6f:3c:0b:
                    54:bb:ab:6e:d1:71:d4:6a:2f:fb:f4:b3:a1:df:ff:
                    b2:06:6f:41:57:3f:0e:35:bd:95:9b:68:57:11:fd:
                    fa:a3:fa:30:3f:bc:9e:46:51:fa:41:e8:c9:51:95:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F9:EB:0F:C1:A7:65:85:7F:27:27:59:7E:39:B6:2F:1D:7F:5C:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/dba63869-4b1a-3e23-9b17-f38a9a8e30a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.crl

            X509v3 Authority Key Identifier:
                keyid:58:75:2F:2C:FB:91:D0:C5:D6:87:B1:CE:3C:32:B6:4E:17:85:EF:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf2b524b-14b9-47ee-b938-34b0cc40ec5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.40.0/24
                  23.152.8.0/24
                IPv6:
                  2606:9440::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:0a:d7:51:04:38:51:84:ce:35:5f:8c:ad:ba:f4:79:a1:2f:
         6f:1c:d5:7f:58:55:df:73:1e:df:bd:3f:2d:94:ee:32:5b:93:
         2c:51:df:34:ac:c9:b6:6e:a6:4b:0f:68:c6:4e:b9:d7:a2:55:
         d3:9a:22:c2:2c:85:d5:eb:03:d3:08:54:26:e7:fa:99:e9:92:
         5a:a2:ca:7a:06:22:79:bb:37:28:80:1d:09:60:d9:7f:4b:ea:
         19:e1:67:3f:f9:d3:96:3d:ad:cb:28:97:9e:a2:ed:6b:5b:e6:
         05:23:c7:a6:be:0b:2a:94:1a:99:21:ec:bf:6f:25:9f:81:4a:
         0e:c4:8a:c2:b0:73:54:3c:4b:b1:7a:9f:12:08:8b:f0:40:6a:
         16:c0:3f:7b:21:1b:9b:1e:e6:8d:af:7c:75:67:3a:13:07:ac:
         51:9f:57:95:04:df:ea:f4:8d:cb:59:e9:40:4b:6a:a7:fa:8b:
         93:f0:88:98:1a:c6:18:3b:47:63:b0:be:60:0f:24:51:ab:3e:
         17:c0:6c:f0:a2:a2:c6:fe:94:d1:dd:c0:9a:0a:e6:65:79:b0:
         ed:83:25:07:4a:66:32:74:43:4d:62:35:8a:df:1f:2e:51:9a:
         61:b1:59:1a:c8:e8:95:1c:08:da:b1:81:eb:f9:56:36:e9:6f:
         44:5b:f8:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:15:14 2026 by rpki-client