Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d319f9c-6cfb-3100-ab06-be3367f277ff.roa
File:                     3d319f9c-6cfb-3100-ab06-be3367f277ff.roa (raw, json)
Hash identifier:          KC0JiK9VE7zHO5ULENeRYo+NbLCEMTaQ9o6ZufHYtnw=
Subject key identifier:   02:30:1E:13:4C:AD:22:EE:EF:2B:40:CA:DF:77:C4:C9:F8:E8:AA:B4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F9BCDDF48EFEA3FC43634F300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d319f9c-6cfb-3100-ab06-be3367f277ff.roa
Signing time:             Sat 24 Oct 2026 13:00:12 +0000
ROA not before:           Sat 24 Oct 2026 13:00:12 +0000
ROA not after:            Fri 22 Jan 2027 14:00:12 +0000
asID:                     16625
IP address blocks:        23.65.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9b:cd:df:48:ef:ea:3f:c4:36:34:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 24 13:00:12 2026 GMT
            Not After : Jan 22 14:00:12 2027 GMT
        Subject: CN=82b7ec7f-75ff-428e-b2a6-601c4dfd2a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:14:ae:03:89:39:fe:65:a8:d0:49:50:2d:55:
                    b6:85:eb:4b:be:ad:64:61:cc:86:cd:59:6b:93:10:
                    07:c1:26:cf:fa:d0:b5:a5:1f:73:0d:2c:57:a9:20:
                    38:6b:49:6e:6e:f1:49:ed:32:26:8c:da:cb:cb:6a:
                    66:c9:64:11:dc:5e:b5:4c:0f:4c:72:8d:a8:18:f4:
                    6c:9b:05:a0:e4:39:ae:c7:f1:97:4a:d9:4d:8f:e0:
                    5e:ec:ae:be:ce:5c:28:31:de:46:87:93:85:54:bc:
                    53:2a:cd:30:71:eb:1b:91:57:66:f2:26:cb:f0:10:
                    e2:96:9d:be:d3:45:c7:ba:0f:46:90:2b:7b:cc:93:
                    00:a9:0d:fc:5d:48:33:1d:a7:2c:f2:01:bf:5f:53:
                    ce:5d:20:f0:b9:b2:3b:c6:bf:12:26:8e:49:e6:8c:
                    fc:61:f3:c2:d0:ca:55:52:87:de:47:cf:20:f0:f3:
                    f9:83:c4:c3:d0:f6:f7:cc:82:03:18:d7:1e:d1:75:
                    4e:07:df:8d:d6:68:97:8e:db:b5:11:9e:39:a9:ed:
                    87:b5:8c:42:66:c9:a8:ea:e0:91:aa:ae:78:2a:ee:
                    3b:05:0b:4e:a2:7a:a3:f6:f8:28:99:61:e9:33:89:
                    a0:02:75:8b:69:ed:12:b9:56:5f:44:4e:44:ad:a6:
                    c3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:30:1E:13:4C:AD:22:EE:EF:2B:40:CA:DF:77:C4:C9:F8:E8:AA:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d319f9c-6cfb-3100-ab06-be3367f277ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.65.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:17:cd:2f:49:5b:d8:3f:71:c3:2d:6c:a0:ad:a1:a8:1e:f6:
         14:07:da:31:b0:e8:ec:48:50:1f:2d:f1:22:45:37:2f:79:b6:
         67:71:ba:2a:4e:0f:7f:04:f8:6c:38:8a:01:b0:c2:b7:02:d1:
         57:83:b7:28:f0:9d:0a:13:82:51:ac:3e:69:e0:c6:ab:4f:11:
         46:1a:7a:e0:77:46:0d:80:bf:de:c4:4b:6e:ff:cb:41:e2:45:
         ea:af:59:03:c7:c2:18:09:04:a2:f6:2e:6b:ee:9e:2e:7b:1b:
         9a:59:9e:ee:84:2f:8a:4a:83:4f:c3:a8:34:82:06:de:af:0e:
         1e:a5:b0:12:60:1f:ee:0f:dd:64:fd:2d:1f:72:25:40:91:92:
         01:99:3c:51:37:d9:68:e6:42:ac:bf:4b:6c:23:3a:ba:d7:97:
         55:ea:c0:77:1d:5f:6d:06:53:32:a4:48:a0:b3:67:9b:b0:8b:
         d1:9b:cd:bd:74:6a:8b:d6:0d:ad:75:fd:e3:22:66:5c:49:ef:
         85:4b:57:d7:a9:80:91:c1:fa:56:6f:e1:bf:04:37:12:0e:9b:
         06:14:d6:ef:8a:d7:05:a7:30:45:f5:9f:87:ac:e0:b7:3f:1c:
         ca:3d:3a:1c:ea:bc:d1:76:7d:3d:0c:1b:67:10:51:c9:14:a9:
         60:5a:df:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 03:07:23 2026 by rpki-client