Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/9e84ce3e-8c53-369f-a42e-90fce0e4a548.roa
File:                     9e84ce3e-8c53-369f-a42e-90fce0e4a548.roa (raw, json)
Hash identifier:          RPlG2bx7gdWzZBlNkiwkekXaZ4sytWt7JXkv0xgWBNc=
Subject key identifier:   D8:48:37:C0:66:44:CE:B8:73:05:18:B9:91:19:28:A2:A8:9B:39:5E
Certificate issuer:       /CN=5a791677-2f6b-4828-a754-1d16b76a8a68
Certificate serial:       010D0C9F4328584EA791486A2C3D8748DA0FB300
Authority key identifier: 02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/9e84ce3e-8c53-369f-a42e-90fce0e4a548.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399861
IP address blocks:        23.131.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:48:6a:2c:3d:87:48:da:0f:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a791677-2f6b-4828-a754-1d16b76a8a68
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=46891e96-768c-457c-b88f-fad60b9ab249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2d:c0:28:e5:21:aa:bc:26:c3:1a:18:3a:f3:
                    20:25:53:d4:82:41:73:2b:b8:52:a1:fe:34:af:3c:
                    c8:2c:68:c5:e6:a9:c9:7f:8a:6f:c1:a4:57:97:41:
                    8d:d2:50:d4:c5:a2:8a:f4:96:1d:77:09:4c:fc:c0:
                    32:b3:83:2d:10:b3:40:c4:24:58:ea:6e:f4:84:87:
                    a0:87:f9:2e:76:67:b4:27:8f:6e:e9:14:9a:2b:d8:
                    39:0c:51:a5:40:0d:5b:df:8b:63:cf:27:a3:c4:19:
                    a4:3c:d3:95:35:70:5b:17:1e:29:ec:2f:37:23:bf:
                    01:2b:a9:43:87:95:28:a4:20:99:7d:85:55:13:f5:
                    60:d2:57:98:b0:0f:40:ce:2b:f4:26:93:50:16:43:
                    f5:6b:0d:e8:46:da:6f:be:69:1b:72:0e:5c:70:e8:
                    90:3b:9a:fb:8d:3b:e4:a1:f4:37:0c:30:d3:e6:9e:
                    e8:f4:02:43:eb:18:85:ac:ee:e9:69:67:7a:27:20:
                    86:a5:6d:20:e7:f3:73:71:94:11:92:2f:70:18:2c:
                    f8:86:83:88:03:dc:2d:db:18:ff:70:b8:36:d7:b1:
                    6f:77:8a:b7:19:06:b6:1d:6d:49:19:6f:93:6a:bc:
                    d3:85:e8:fe:5c:11:a7:f7:8f:66:05:c5:9e:1e:17:
                    73:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:48:37:C0:66:44:CE:B8:73:05:18:B9:91:19:28:A2:A8:9B:39:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/9e84ce3e-8c53-369f-a42e-90fce0e4a548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.crl

            X509v3 Authority Key Identifier:
                keyid:02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:8a:57:de:9f:0a:14:44:50:0e:2b:1d:bf:59:7b:c2:88:84:
         40:fd:fd:44:ef:6d:14:e7:ed:56:2b:01:fb:4a:8e:27:3b:2e:
         f4:3a:b9:bf:fa:d9:f2:b1:7d:0b:49:dd:25:29:8d:1d:8e:64:
         bf:75:26:65:17:94:85:e0:06:40:66:b0:fc:63:05:f9:c4:3d:
         13:50:82:5f:cd:d9:a6:7a:2f:22:fb:7b:66:e6:c0:ef:e4:d9:
         8b:b7:dd:3b:0d:3c:94:3b:ae:4a:10:ce:81:c8:d5:c9:76:4a:
         6f:78:c0:93:0f:a9:ad:7a:e9:18:b1:1d:3d:5f:4b:0e:b5:86:
         41:55:ac:8a:cf:8d:23:be:8b:11:b0:81:0c:fe:73:7a:50:98:
         f5:1d:f6:2a:66:ca:06:6d:f5:52:59:65:cc:d5:0c:d0:8e:34:
         15:11:6d:f2:aa:ef:eb:42:f4:cd:6d:d2:65:74:c6:4f:8a:82:
         bf:8c:3a:e9:73:21:ce:ed:08:0a:c5:47:af:5e:01:59:ed:e8:
         15:08:ec:ca:43:66:10:5c:42:a9:61:29:43:74:c9:be:f2:77:
         3d:12:20:2a:7d:7b:c0:21:41:a8:61:f4:6a:d5:cf:d1:9c:f4:
         d5:1f:72:8b:a2:72:76:aa:21:38:d4:50:39:b7:34:a5:dc:5a:
         01:d7:76:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 05:14:13 2026 by rpki-client