Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/03a1f876-96a4-30bb-80b8-4e90fb71c43a.roa
File:                     03a1f876-96a4-30bb-80b8-4e90fb71c43a.roa (raw, json)
Hash identifier:          ZoeW7c3ECa65AUiZY8JQh7kYmlfzSxcrjIwFPcHXK8U=
Subject key identifier:   C3:82:2F:DE:B5:6A:5E:B4:E4:BC:F1:3D:B7:12:DE:B0:0C:1C:4C:54
Certificate issuer:       /CN=d190027d-4989-490f-90d8-74213ed3a98e
Certificate serial:       010D0C9F4328584EA787129BD355047C05155880
Authority key identifier: 41:5A:1D:48:72:6D:15:F2:14:92:BC:12:4B:A0:B7:8B:06:D6:25:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/03a1f876-96a4-30bb-80b8-4e90fb71c43a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     21626
IP address blocks:        23.140.100.0/24 maxlen: 24
                          2602:f612::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/d190027d-4989-490f-90d8-74213ed3a98e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/d190027d-4989-490f-90d8-74213ed3a98e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:12:9b:d3:55:04:7c:05:15:58:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d190027d-4989-490f-90d8-74213ed3a98e
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0e8fccfb-4542-4a19-8333-ed6809c10b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:c3:ee:49:0e:43:76:45:71:5b:93:71:c4:
                    d7:fc:e3:f1:3a:2c:a1:03:25:01:40:29:50:21:44:
                    a5:d4:8c:9d:34:1a:47:45:bd:8a:96:da:e3:7b:d8:
                    dc:7e:68:8f:88:b3:50:f2:00:37:c4:9d:27:b5:15:
                    24:c4:45:99:c0:99:6b:5c:44:ee:d1:28:82:ed:39:
                    89:b4:45:f6:e8:38:8d:c9:2c:ff:f6:32:76:6c:1c:
                    77:64:fa:e4:e9:e8:19:5a:df:4a:16:c7:6e:8b:45:
                    7a:f5:d9:ca:bd:c1:14:03:73:96:9a:df:36:ca:a3:
                    46:33:5b:36:61:0f:2f:13:41:bc:59:f5:0c:14:c6:
                    e8:17:2f:b9:0d:cf:f4:8c:36:9c:25:2d:c8:c6:56:
                    c1:07:3c:24:c0:53:1b:0a:8c:5b:ad:15:20:0f:59:
                    1c:71:d0:21:b3:ca:b1:14:c5:7f:83:a5:35:97:7c:
                    d7:02:cf:c0:7c:d3:1a:b5:93:d7:ab:d7:bd:f0:80:
                    cf:f1:0e:ac:59:f8:a0:21:8c:36:44:14:6f:5a:ab:
                    a5:86:14:ec:ac:d1:f6:77:60:0f:dc:1c:c0:61:b1:
                    0a:87:59:c6:07:24:89:ce:3d:41:fb:0c:fc:c0:86:
                    12:cc:3f:a5:d6:09:dd:b6:4f:31:03:64:2a:61:35:
                    1b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:82:2F:DE:B5:6A:5E:B4:E4:BC:F1:3D:B7:12:DE:B0:0C:1C:4C:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/03a1f876-96a4-30bb-80b8-4e90fb71c43a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e/d190027d-4989-490f-90d8-74213ed3a98e.crl

            X509v3 Authority Key Identifier:
                keyid:41:5A:1D:48:72:6D:15:F2:14:92:BC:12:4B:A0:B7:8B:06:D6:25:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d190027d-4989-490f-90d8-74213ed3a98e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.100.0/24
                IPv6:
                  2602:f612::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:e8:4e:a2:f1:02:3f:aa:52:51:f8:b3:8c:5e:aa:b3:85:d3:
         7e:41:76:c3:17:f6:67:b2:57:97:13:17:e0:d6:0b:45:99:07:
         28:6a:2c:ea:7f:e6:24:8e:70:0c:93:f4:9d:fa:dd:5e:b4:32:
         11:8f:1c:62:5a:fc:25:55:6e:1f:2f:a5:a7:5f:5a:ca:7d:34:
         e6:c1:8e:d7:a8:f6:c1:c4:34:d1:d8:c9:16:93:99:44:a3:b2:
         16:9c:16:dc:e7:92:82:2d:b7:77:c6:4b:78:cd:35:c5:a5:c7:
         27:3f:67:cc:bb:5c:2f:93:b0:92:42:13:37:c2:4c:48:df:57:
         fd:60:6e:cd:1e:a7:81:7a:a4:3a:b9:13:f7:f9:d6:6d:3b:ee:
         2a:f2:31:68:88:44:3a:30:1a:36:dd:4a:fa:1a:22:59:7d:c3:
         e0:4f:50:f7:39:40:2e:67:16:31:44:0b:ef:8a:77:8a:d2:16:
         78:38:ac:f5:cd:47:ea:5a:22:d0:f9:9f:0f:e4:3a:5c:6f:bd:
         90:d8:04:06:55:c5:a8:a5:e5:96:85:52:d8:0c:bd:9e:ca:8e:
         0c:3b:1d:d7:1d:4b:fc:72:67:ce:75:a5:69:e8:a9:40:91:45:
         0c:ca:41:9a:98:b0:07:c5:25:25:df:ec:06:9c:8b:f4:bb:8b:
         c4:8f:a3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:26:21 2026 by rpki-client