Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/09e2133c-1127-3043-97b2-bbb32a41b3c4.roa
File:                     09e2133c-1127-3043-97b2-bbb32a41b3c4.roa (raw, json)
Hash identifier:          3OAx9Brh6dA272qcIY/BiuarhB71XzPSyKGx+stLi5U=
Subject key identifier:   34:C1:04:29:28:78:7F:AB:BA:31:41:EE:60:6B:9E:F1:5E:2F:95:C8
Certificate issuer:       /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
Certificate serial:       010D0C9F4328584F71ED8E2A6E08837A085851C8
Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/09e2133c-1127-3043-97b2-bbb32a41b3c4.roa
Signing time:             Fri 09 Oct 2026 13:00:13 +0000
ROA not before:           Fri 09 Oct 2026 13:00:13 +0000
ROA not after:            Thu 07 Jan 2027 14:00:13 +0000
asID:                     397131
IP address blocks:        23.160.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:71:ed:8e:2a:6e:08:83:7a:08:58:51:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41
        Validity
            Not Before: Oct  9 13:00:13 2026 GMT
            Not After : Jan  7 14:00:13 2027 GMT
        Subject: CN=f54375af-a558-4ce7-98fb-3ea21ae54559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ad:ad:62:7f:f9:f5:34:bd:f2:d8:e2:83:42:
                    d0:29:ec:a9:a2:82:f9:14:06:cf:f6:30:cd:8c:80:
                    29:13:ce:9f:f3:4c:c4:58:11:a1:41:4a:41:de:a5:
                    8a:3a:a4:ff:e0:37:b4:34:b7:f5:a8:75:38:3a:4c:
                    21:94:27:7a:4c:90:78:9c:75:97:ad:6d:c5:dd:9d:
                    9e:c8:9e:ac:a7:e9:13:fe:d5:57:bf:ba:76:b5:77:
                    1d:91:24:d7:71:44:a7:9e:5f:39:61:53:4e:d6:d2:
                    3c:a2:32:2c:57:f6:07:83:5f:29:06:68:76:f9:0a:
                    2a:eb:86:b7:cc:f7:a0:39:1a:0b:0a:80:2f:06:1a:
                    ff:cb:97:9e:a8:31:c2:67:59:3d:a0:a5:65:6d:9f:
                    57:92:b3:17:db:11:d2:5f:a9:0c:51:69:8f:ea:39:
                    6d:b3:2c:e7:83:e7:41:f2:0b:b1:9a:b5:8a:28:a6:
                    21:8e:a0:d2:3e:7b:31:77:61:e4:37:49:7a:95:0a:
                    91:1f:99:50:c4:f7:29:3b:95:31:59:f5:9c:60:81:
                    55:f3:fd:3c:1c:87:fa:ac:f3:1f:2d:51:c0:a2:41:
                    c6:30:62:1e:ac:54:c3:ba:b0:54:d3:8c:2b:6d:0f:
                    19:1a:4e:00:fb:60:9d:9c:46:f6:20:ce:af:78:a0:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C1:04:29:28:78:7F:AB:BA:31:41:EE:60:6B:9E:F1:5E:2F:95:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/09e2133c-1127-3043-97b2-bbb32a41b3c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl

            X509v3 Authority Key Identifier:
                keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:42:34:73:24:3a:3d:bc:eb:ee:dc:d3:9d:72:31:ba:ed:f4:
         ec:a7:ec:9b:f8:15:7d:7a:82:41:5d:cc:32:a8:8a:23:cc:c3:
         33:3d:f1:a2:8f:e6:46:19:a5:41:65:dc:99:3c:e2:d8:8a:04:
         7b:17:89:42:82:ee:22:bf:4f:48:8e:00:db:0d:6b:32:d7:9c:
         8a:0c:10:f0:57:8a:f5:e6:43:dc:27:a2:14:00:69:bb:26:45:
         c7:5d:92:ce:d1:fb:74:01:3b:05:ea:a2:78:6f:26:1c:0a:fd:
         17:39:85:0f:07:07:d0:ae:ea:21:a4:eb:69:3f:19:41:ae:49:
         aa:74:7b:e9:b2:3e:a1:e4:1a:7c:2e:ab:0a:5d:38:19:a1:b8:
         cf:de:c5:ae:ee:69:51:8c:e4:da:29:24:e8:cd:92:36:70:57:
         35:f5:f9:be:71:95:64:4b:8a:b3:cb:90:ec:45:56:a1:3b:30:
         f6:7d:48:c5:11:f9:89:38:1b:1a:1c:ef:bc:de:0b:cc:70:2e:
         23:b8:1a:20:37:d8:d0:3f:3c:6a:cb:ac:ca:13:da:03:4d:bf:
         cb:86:a9:8e:16:59:f7:de:f4:95:83:26:e7:cb:8f:ef:d4:9d:
         18:58:ac:e3:54:e6:fe:93:05:47:3a:f7:2f:72:85:94:5b:c4:
         59:ad:90:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:31:19 2026 by rpki-client