Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/3aef0f2e-0916-32d4-8654-01deac08f734.roa
File:                     3aef0f2e-0916-32d4-8654-01deac08f734.roa (raw, json)
Hash identifier:          wqmHSq4yN6Y4DlQivfQ6D2gPYjegxoX/x7uVaJzFdOA=
Subject key identifier:   2E:48:3E:E4:F3:28:EF:D3:08:DA:E8:84:96:DC:8A:68:9D:63:ED:49
Certificate issuer:       /CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
Certificate serial:       010D0C9F4328584EC63C5FBB370ABD15BAC98140
Authority key identifier: 02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/3aef0f2e-0916-32d4-8654-01deac08f734.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     11776
IP address blocks:        23.244.124.0/23 maxlen: 23
                          23.245.150.0/24 maxlen: 24
                          23.245.154.0/23 maxlen: 23
                          23.245.156.0/24 maxlen: 24
                          23.245.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:5f:bb:37:0a:bd:15:ba:c9:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69a1447-7cfa-456f-a600-4b2012c01dc7
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=c660b685-4ad1-4b4c-ad5c-49948f6a43fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:67:e1:01:68:7b:ae:6e:06:8f:fe:42:4b:d1:
                    06:0f:6c:33:91:54:96:ac:42:86:b7:1f:e5:fc:9f:
                    dd:78:ce:85:90:7b:41:64:6f:15:05:bc:1e:be:1a:
                    57:35:3b:73:42:97:1b:52:fc:a9:c3:9d:3f:2d:cd:
                    09:18:21:6b:3f:65:90:c4:a9:42:60:07:0f:6e:14:
                    b3:01:d9:a7:a2:19:17:3a:a5:e7:51:06:6b:94:cb:
                    19:8e:92:5b:2a:e0:87:25:ef:57:ca:55:3c:92:ca:
                    27:cd:f6:6b:a0:51:e9:fa:fb:25:a6:35:31:e3:21:
                    f1:6f:c5:a4:a4:05:44:d2:69:5c:5a:43:bb:2c:89:
                    47:02:4e:ce:da:8a:94:c2:85:1f:20:65:e1:cc:8a:
                    cc:8d:63:bd:e2:d8:be:02:08:21:bc:5f:38:89:db:
                    c4:95:41:b5:01:30:cf:52:11:ab:d6:3b:31:a6:a6:
                    94:0c:9e:58:8b:2b:35:19:cb:aa:54:d7:79:e1:c0:
                    ac:7b:12:5a:84:2c:15:0f:1b:41:bb:39:c4:a9:4a:
                    2a:17:da:53:0d:99:0a:b3:af:09:12:4e:01:68:b1:
                    c2:22:97:67:85:a8:f3:83:5e:66:a8:cd:45:38:af:
                    24:8c:67:3b:cd:e8:aa:93:7f:35:93:53:68:34:80:
                    73:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:48:3E:E4:F3:28:EF:D3:08:DA:E8:84:96:DC:8A:68:9D:63:ED:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/3aef0f2e-0916-32d4-8654-01deac08f734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7/c69a1447-7cfa-456f-a600-4b2012c01dc7.crl

            X509v3 Authority Key Identifier:
                keyid:02:29:BA:8D:D7:F8:5E:71:58:09:5A:32:2B:60:84:BB:4C:23:9A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/c69a1447-7cfa-456f-a600-4b2012c01dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.244.124.0/23
                  23.245.150.0/24
                  23.245.154.0-23.245.156.255
                  23.245.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:86:a2:c0:43:54:bf:fc:57:ff:1f:21:99:8e:a9:29:36:dd:
         22:bc:a5:52:aa:8b:83:96:07:8e:b1:48:38:4f:9f:d9:36:ab:
         de:4d:25:b4:45:f1:61:c7:e0:c9:b6:29:82:97:26:cb:db:5e:
         13:13:b0:39:7d:da:08:cb:85:cf:5f:18:35:47:fe:9b:a0:d3:
         ba:9a:93:c2:a8:bf:96:ef:af:85:41:d8:ab:5d:7b:10:92:d0:
         9c:81:18:a7:1e:ec:a8:d3:c2:de:e8:e7:6e:d4:08:b2:0e:1a:
         31:32:7d:bf:3d:f3:b8:3c:58:56:e8:a3:d1:d0:29:33:82:37:
         71:87:1a:e0:d4:c7:b1:6c:6e:9f:3a:c6:96:87:41:24:cb:67:
         f3:b4:63:13:7b:11:88:4b:26:2e:89:40:2a:ce:02:1d:90:78:
         23:1f:c8:eb:2c:a4:02:47:b9:c4:59:dd:a7:53:db:b6:bc:63:
         04:4a:08:17:e0:b5:25:92:22:c5:f6:cd:e3:ee:08:91:f4:40:
         d8:91:92:e6:53:68:19:96:ff:8c:d3:ac:4c:f9:9a:f8:ba:8d:
         a9:af:14:ea:02:d8:9d:a1:46:c0:b0:a1:02:ee:8b:83:c2:a1:
         03:07:60:db:56:41:fc:81:1c:cb:df:99:a9:78:84:b2:39:34:
         f1:d1:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 10:37:14 2026 by rpki-client