Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/053e21d2-df36-3335-adc2-8524bf1355a2.roa
File:                     053e21d2-df36-3335-adc2-8524bf1355a2.roa (raw, json)
Hash identifier:          4edG0o+2qnsquAxkEjFeYgk/oNnq949bj+1X0HgR8gU=
Subject key identifier:   61:AA:2F:47:2C:CB:C4:B5:DE:9D:D8:3B:A9:5D:F5:23:E2:82:AF:0B
Certificate issuer:       /CN=13c2bd37-5092-4959-a489-318c7da33b9d
Certificate serial:       010D0C9F4328584EC7A1CF9B1F5E16E50E92AC80
Authority key identifier: 4F:3C:1C:3D:A6:CA:80:4F:31:8F:EE:4D:80:6D:31:87:3E:86:E6:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/053e21d2-df36-3335-adc2-8524bf1355a2.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     151338
IP address blocks:        23.145.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/13c2bd37-5092-4959-a489-318c7da33b9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/13c2bd37-5092-4959-a489-318c7da33b9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:cf:9b:1f:5e:16:e5:0e:92:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c2bd37-5092-4959-a489-318c7da33b9d
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=1fed01fa-c5f4-4cb8-81a1-bb740a977619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:17:07:1a:2b:3b:da:e9:0c:1c:29:cd:68:9d:
                    16:14:d9:a0:de:3b:b3:bd:6b:f5:0f:58:9e:43:b3:
                    12:4a:a4:b5:86:11:0e:ca:69:b4:de:c9:5f:8b:8d:
                    ea:dd:4d:ae:7c:0d:0f:4b:fd:93:df:fa:b0:51:6b:
                    9b:84:18:90:f0:d2:a3:ff:1e:87:7a:e0:90:a4:73:
                    71:14:47:eb:a2:2d:61:b7:f6:e5:9a:4f:b4:a7:14:
                    e4:3a:69:7c:3c:26:fa:49:99:66:d9:37:7c:ac:d1:
                    77:92:55:86:35:b7:a6:4d:3f:f8:a7:f8:3a:e5:c8:
                    67:3f:4a:67:35:09:42:03:0a:50:8b:b8:bf:b1:c8:
                    4e:12:52:35:e0:27:b9:55:13:2a:23:3b:a8:55:ca:
                    12:a5:ba:58:9c:eb:ac:e6:18:8e:20:ef:80:fa:cf:
                    51:d8:49:33:40:22:14:93:22:e8:00:d6:ce:20:dc:
                    9e:b0:de:59:4b:f7:38:c5:e0:0c:6c:40:44:54:e2:
                    14:e3:1f:2d:fe:f5:1e:f8:87:4a:34:1f:4e:e9:cc:
                    c9:51:83:68:ec:fe:ba:33:93:ea:99:7c:46:b0:45:
                    4c:ec:86:7b:37:05:00:e1:37:67:ad:99:cd:e9:7a:
                    d4:93:a0:a8:e1:09:ab:e4:a2:51:0f:dc:11:03:d6:
                    2b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:AA:2F:47:2C:CB:C4:B5:DE:9D:D8:3B:A9:5D:F5:23:E2:82:AF:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/053e21d2-df36-3335-adc2-8524bf1355a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d/13c2bd37-5092-4959-a489-318c7da33b9d.crl

            X509v3 Authority Key Identifier:
                keyid:4F:3C:1C:3D:A6:CA:80:4F:31:8F:EE:4D:80:6D:31:87:3E:86:E6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/13c2bd37-5092-4959-a489-318c7da33b9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:1d:bc:09:d0:d3:c6:60:c5:96:70:e0:61:a7:d2:40:75:60:
         ca:86:63:60:d1:9a:4c:ba:c6:90:41:fa:8c:d0:03:d0:57:d5:
         a3:41:dc:fb:72:c9:47:fd:18:99:b1:0b:66:fb:53:25:5b:df:
         ec:d7:d0:ea:69:8b:e8:24:cf:c5:d5:a8:42:5e:01:a6:5e:a0:
         3c:5e:4e:5c:12:af:31:46:b3:c0:83:6e:01:e2:53:c3:fe:2f:
         f3:18:45:15:d1:08:c0:6f:2b:c6:41:6d:5a:2f:13:2f:49:db:
         18:c6:b9:4b:ab:07:90:a1:9a:74:36:a3:36:a5:c7:cb:3e:75:
         9d:21:8d:63:91:14:2d:f5:17:f0:94:4e:1c:fb:0a:37:64:c6:
         c4:6f:98:90:fa:76:06:5a:15:01:39:50:1f:3e:c7:e8:3d:60:
         19:3b:43:e7:ce:14:f2:2a:89:ad:f2:78:38:6b:9e:14:cb:92:
         89:3a:69:aa:a3:b2:21:0a:50:35:56:08:b3:fc:2f:1f:a9:fa:
         74:aa:3f:f4:96:38:dc:81:09:f1:dc:de:8a:c9:be:59:9d:7a:
         f3:0e:f1:dd:73:53:dc:80:ec:6a:28:75:23:d8:b5:07:4f:5e:
         f8:6f:0c:f2:cf:a2:9f:ac:a8:f3:46:59:31:94:f4:96:84:59:
         d8:1d:28:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:36:31 2026 by rpki-client