Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa
File:                     309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa (raw, json)
Hash identifier:          r+2q5i0WNHc/U8+R9FqCPi8EH2XH6pYxAxO1r7YfWiM=
Subject key identifier:   D8:F2:C3:41:7F:7B:78:FA:01:77:77:77:89:B7:7D:08:77:27:05:90
Certificate issuer:       /CN=7afbb48a-7a41-422c-a27b-4b92e0907153
Certificate serial:       010D0C9F4328584EA787E82430E0AEB84BC87540
Authority key identifier: 23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     8095
IP address blocks:        23.180.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:e8:24:30:e0:ae:b8:4b:c8:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afbb48a-7a41-422c-a27b-4b92e0907153
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=04313317-41da-497a-8c0f-4aa208ce4ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:af:2e:bb:00:37:52:2a:a1:27:87:0f:c4:72:
                    b5:5d:47:14:8c:c6:b4:08:11:ec:e8:65:69:df:74:
                    c9:fd:57:1d:53:ec:cf:16:d6:b5:6d:2d:c2:37:75:
                    61:25:93:1f:a8:63:02:fe:03:44:27:4f:45:2d:33:
                    11:b6:24:ea:e7:66:58:dc:37:5c:a9:34:6a:6d:82:
                    96:d1:df:5b:b8:f1:e0:a5:a1:a9:dc:29:b3:06:10:
                    5e:b1:9b:04:20:51:2a:27:85:ba:3f:74:3e:25:ea:
                    2e:a5:09:53:da:f7:44:90:fb:1c:e6:8c:84:97:a9:
                    5f:b7:04:9b:f4:a5:bf:88:3f:b3:3b:4a:10:e9:69:
                    77:5f:52:7a:e6:e2:a2:9b:1e:8a:dd:0b:37:d9:cb:
                    d3:0d:a5:b9:b9:11:5f:70:19:1a:ed:72:a4:a6:a0:
                    86:8f:de:51:31:21:eb:e0:ab:ef:d2:37:58:a9:a4:
                    dc:fa:4c:dd:e8:a0:2c:34:bb:65:3f:2b:a5:e9:0d:
                    45:a8:ff:1a:8e:ec:56:72:70:1f:3d:ff:23:c8:ad:
                    ac:ad:ca:3a:ee:75:e9:31:74:64:82:4b:3c:31:77:
                    16:ac:f6:2c:c4:e0:11:fa:4f:61:bf:dc:35:9b:d5:
                    e5:77:88:b6:7f:ca:8a:30:16:9a:3e:ad:25:5f:23:
                    4b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F2:C3:41:7F:7B:78:FA:01:77:77:77:89:B7:7D:08:77:27:05:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/309bcb01-4990-3882-b777-7ed5f4bfdf7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153/7afbb48a-7a41-422c-a27b-4b92e0907153.crl

            X509v3 Authority Key Identifier:
                keyid:23:32:75:32:B4:3D:3A:70:02:BE:7C:A1:E6:FA:99:78:DC:8B:79:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7afbb48a-7a41-422c-a27b-4b92e0907153.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:d6:05:3f:94:f9:dc:e7:7f:aa:9f:77:f4:21:6d:9f:56:35:
         f0:3e:4c:78:6c:39:da:6c:e3:ba:a8:9e:a0:da:11:9b:4a:5c:
         3c:9d:38:f3:31:cd:4b:4b:0e:a7:94:f9:09:8a:c8:85:e1:d2:
         5f:8a:e5:d5:91:8c:e6:19:34:a3:a8:d4:a8:71:12:70:2f:22:
         a9:41:d2:fa:d2:73:7c:4b:06:eb:23:74:2b:56:57:d8:b4:28:
         c1:14:12:86:4a:ae:ed:61:45:00:73:e8:b6:6f:2e:45:5e:65:
         2d:8d:80:a9:dc:0d:8f:46:01:bc:58:64:dc:57:ca:5c:f4:c1:
         04:bf:0b:ab:03:64:ef:da:09:5b:59:0d:35:08:2d:28:e6:7a:
         46:d6:1e:6c:ef:44:ba:73:7a:b2:fa:94:d8:ca:11:01:1f:79:
         c3:5e:0c:1d:31:73:21:d2:6e:84:ab:08:8b:34:6b:6a:5f:fd:
         0b:31:8f:92:c6:be:45:48:91:52:1a:45:9c:e1:c0:ae:83:76:
         a1:8f:19:97:19:bb:c5:c2:ad:09:ad:9b:ce:01:a7:e1:04:8e:
         76:38:25:ac:84:d4:35:7c:77:f4:35:74:fe:6e:b8:7c:bf:2a:
         47:e4:c8:28:8f:ec:3e:b0:28:14:54:6c:c2:98:f8:02:47:4d:
         5a:4c:6f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 09:34:54 2026 by rpki-client