Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/14289242-b26e-32bb-a1e3-5239bf083c3f.roa
File:                     14289242-b26e-32bb-a1e3-5239bf083c3f.roa (raw, json)
Hash identifier:          JsIF1h0hFbTyI/+NIEcb7BfW0gGBGeJClTBh8/jFGXw=
Subject key identifier:   6E:B9:DC:27:CE:FE:61:98:0E:2E:6A:C1:48:EC:8A:62:7E:57:DD:A1
Certificate issuer:       /CN=9af44307-21f9-411b-ba04-dedf105fd206
Certificate serial:       010D0C9F4328584FA5931DAEC5CE3B1471D24F80
Authority key identifier: 73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/14289242-b26e-32bb-a1e3-5239bf083c3f.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     30456
IP address blocks:        23.135.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:93:1d:ae:c5:ce:3b:14:71:d2:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9af44307-21f9-411b-ba04-dedf105fd206
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=a5b11ee2-258b-47fb-ba86-65552370120b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:05:16:c9:6e:a2:bf:35:ad:4a:af:61:6e:ee:
                    d4:a7:e1:37:8a:dd:dc:44:c6:ff:36:f5:e1:37:80:
                    20:4b:cf:29:40:db:07:8f:a3:ae:8b:c7:47:dc:15:
                    ac:9f:c1:56:a0:1d:ae:8c:1f:91:56:45:c4:91:ad:
                    48:73:43:7d:aa:f4:0f:40:c6:47:f5:24:b2:db:c1:
                    8e:12:40:6d:b4:67:8c:bb:d8:ea:0a:de:30:95:5f:
                    44:11:0a:80:c8:6e:28:46:24:45:c4:2b:3b:ff:6b:
                    6e:c9:2f:03:32:16:b8:c2:4a:54:8e:c0:d8:4d:70:
                    02:ce:36:56:1a:14:6f:df:3f:5e:82:4b:2c:c1:73:
                    bb:3f:6a:9a:9e:9f:e3:df:7d:d8:fb:13:1a:45:4e:
                    6e:45:51:39:40:da:16:ca:c5:67:ae:9c:9d:01:86:
                    77:3e:89:4f:cb:6c:c4:a6:72:8e:53:fe:f1:18:67:
                    1c:b5:88:f4:7a:1f:d7:6a:af:fb:75:ee:5e:e9:b2:
                    9e:51:7e:61:1b:e6:01:c5:ee:e3:d4:65:87:d8:b1:
                    c6:49:4e:52:e1:e5:9f:e7:7b:34:61:e2:b2:a4:29:
                    5e:3e:e9:fb:72:bc:10:32:e0:c7:2e:37:85:a2:9d:
                    7a:58:6e:0c:f1:d8:ca:4e:3f:d0:2a:34:3f:7d:af:
                    48:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B9:DC:27:CE:FE:61:98:0E:2E:6A:C1:48:EC:8A:62:7E:57:DD:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/14289242-b26e-32bb-a1e3-5239bf083c3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206/9af44307-21f9-411b-ba04-dedf105fd206.crl

            X509v3 Authority Key Identifier:
                keyid:73:39:24:7A:51:CC:FB:32:E2:8F:DB:CD:D0:3D:8E:32:83:F7:E9:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9af44307-21f9-411b-ba04-dedf105fd206.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:a8:35:11:b4:d6:bf:25:f2:aa:cf:c2:fe:49:37:83:6e:61:
         de:94:72:1a:a1:e5:a0:ca:32:49:d5:dd:b3:d0:2c:0c:c4:08:
         00:7e:07:5c:63:76:64:07:06:0c:0a:63:3e:ad:96:e4:7a:09:
         33:9f:86:8a:c6:aa:ae:40:fb:a2:01:ff:e2:25:55:e6:4d:9f:
         3d:52:9d:33:98:86:64:06:b7:47:74:70:17:6c:37:52:14:7f:
         ca:6f:e0:58:c3:21:69:8b:43:b1:75:31:96:03:c0:dc:9c:c6:
         7f:b0:02:cb:e2:2d:3c:c3:d1:c3:a5:6b:ad:98:ea:39:06:98:
         78:4b:39:db:fd:aa:a9:1c:a4:74:8f:0e:e8:9b:7e:79:12:84:
         86:ea:e1:20:64:6b:7e:11:41:54:fa:bf:39:88:3b:b1:a7:ae:
         46:72:b2:1e:c9:99:de:29:21:82:bd:f8:a6:60:1b:d8:c0:25:
         44:bd:31:7a:0f:65:9a:2f:0c:df:39:3d:34:4e:e0:52:3c:4a:
         d5:13:11:a3:ea:39:91:72:70:94:9d:b2:52:3f:29:21:32:53:
         f3:8d:0b:ed:ca:9d:c7:35:1e:82:84:22:a0:1c:be:d4:b6:59:
         d6:c0:34:f0:9e:2c:22:13:bc:a9:55:97:cc:da:8e:1a:58:7c:
         7a:8d:89:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 07:25:54 2026 by rpki-client