Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/dab42b6e-e789-3f0a-bb71-f3b311ab4e15.roa
File:                     dab42b6e-e789-3f0a-bb71-f3b311ab4e15.roa (raw, json)
Hash identifier:          LqUL2Gw3ITyljS/juprU3mq/aM1w+772lBWG0P/1er0=
Subject key identifier:   A3:A9:6D:5A:D3:68:96:FC:4B:9B:36:96:E6:47:6E:AD:FA:3A:4C:F8
Certificate issuer:       /CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6
Certificate serial:       010D0C9F4328584EAA51943A16853ED6945B1E00
Authority key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/dab42b6e-e789-3f0a-bb71-f3b311ab4e15.roa
Signing time:             Thu 30 Jul 2026 01:00:12 +0000
ROA not before:           Thu 30 Jul 2026 01:00:12 +0000
ROA not after:            Wed 28 Oct 2026 01:00:12 +0000
asID:                     401561
IP address blocks:        23.128.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Sep 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:aa:51:94:3a:16:85:3e:d6:94:5b:1e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6
        Validity
            Not Before: Jul 30 01:00:12 2026 GMT
            Not After : Oct 28 01:00:12 2026 GMT
        Subject: CN=ab35fff4-f081-4987-8a55-94720cda99ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:78:d8:8f:4f:9f:54:e4:18:e7:e9:b8:39:
                    0d:fc:cc:18:92:af:fd:1c:2f:77:97:f3:b4:9b:59:
                    a9:08:05:12:d5:c9:48:4d:f1:59:ef:a5:1c:72:e8:
                    36:d4:f7:53:1a:98:6d:5b:56:67:d5:de:bb:66:33:
                    37:2e:ce:24:bd:43:77:4b:65:e1:3a:41:cb:b4:05:
                    c3:60:78:d6:97:72:da:87:44:a8:64:01:14:c8:e7:
                    20:03:bb:2f:be:cf:e9:5e:21:1b:5e:ce:7a:16:60:
                    39:8b:17:5e:a4:aa:be:7c:cd:05:dc:8c:75:b9:3e:
                    40:c7:0a:ae:7d:dd:fd:10:64:bf:ef:7f:19:48:9a:
                    d5:3e:d1:1c:e1:81:6e:a7:3f:2f:48:36:af:9c:05:
                    16:ad:86:35:6d:60:73:26:2f:92:bf:41:c5:bc:26:
                    96:c2:2c:a0:09:27:19:3f:db:57:d4:33:c3:a6:98:
                    70:1b:07:a1:8a:d2:e5:97:df:31:59:79:8d:11:12:
                    4d:18:12:37:2b:ff:2f:6f:cc:27:72:35:fc:6f:53:
                    29:13:3b:b8:9e:3b:ef:3d:0b:b6:90:f4:ba:8a:8b:
                    9b:27:c6:95:5d:ed:05:c0:f3:fd:bb:71:eb:e0:8f:
                    74:3c:40:d6:82:47:34:0c:28:3e:ae:9d:13:ee:24:
                    d9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A9:6D:5A:D3:68:96:FC:4B:9B:36:96:E6:47:6E:AD:FA:3A:4C:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/dab42b6e-e789-3f0a-bb71-f3b311ab4e15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl

            X509v3 Authority Key Identifier:
                keyid:16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:fc:e3:ac:cd:01:16:f2:3d:c7:b2:7b:66:97:a1:76:dd:36:
         34:d8:1a:8c:76:74:86:d9:2d:d9:c5:fa:a5:e3:73:49:af:36:
         eb:5a:64:ff:23:f1:5b:01:0d:a2:85:18:35:55:70:30:a1:03:
         5d:94:6f:79:21:86:f3:f3:c8:24:31:50:b2:66:bc:de:d7:8f:
         5c:c8:23:0b:87:1b:ae:0d:e8:04:51:02:3d:3e:df:39:27:86:
         2a:4d:d9:2c:8e:06:36:b9:26:d8:ff:45:c3:e6:cc:0a:ed:cc:
         9d:70:38:9a:ff:6a:11:45:b8:fe:24:b6:0c:e7:4e:bd:7e:98:
         84:67:42:55:17:8c:f2:d7:d8:c2:9e:63:05:37:ea:71:c3:19:
         92:48:e7:7d:0c:e3:b5:2e:38:40:c8:f9:49:7c:3f:44:05:b3:
         f0:b0:ba:67:05:38:55:9e:27:82:35:9e:75:58:12:dd:5f:9f:
         e9:26:2c:19:6a:b3:b4:6a:56:0b:67:9b:03:fa:36:70:32:5a:
         cd:03:e7:2d:65:7e:94:9b:26:14:a6:c1:fa:29:dd:50:1f:58:
         61:cf:12:3a:9c:eb:c0:50:df:c1:82:1c:cd:32:8a:85:21:73:
         74:8a:ff:3f:13:1c:4c:dc:1c:3e:18:65:a1:ea:5d:6c:a7:67:
         3a:e6:94:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 20:37:32 2026 by rpki-client