Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa
File:                     46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa (raw, json)
Hash identifier:          8LhCr+g4rW0BwX/PF6MGZZbOveyPSTU7dqjfrSVahgI=
Subject key identifier:   8A:08:3B:79:21:48:41:16:65:12:3D:E5:08:83:3D:93:8C:24:F2:73
Certificate issuer:       /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial:       010D0C9F4328584EA79508E0C64F5E2D83B1F780
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16509
IP address blocks:        23.153.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:08:e0:c6:4f:5e:2d:83:b1:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=983df6b2-0dea-4990-8895-2afeaa5014b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:17:ab:cb:d4:c3:a9:b5:23:72:6a:f9:38:
                    88:64:7a:5a:56:d8:ce:90:78:10:b3:c1:cf:15:cd:
                    59:2f:60:18:c2:44:c9:db:35:75:1b:7e:5b:4c:4d:
                    b4:39:1c:e7:0f:60:af:a4:fc:38:5d:29:a0:a0:99:
                    e4:8d:62:d1:9f:b1:be:df:d8:d6:ba:ce:75:17:be:
                    93:5f:70:61:18:d8:da:3c:10:ef:66:65:dc:95:32:
                    a4:44:4b:f6:bc:37:4e:87:a2:cd:e0:ec:82:2a:c8:
                    7b:e7:43:7a:6a:f6:5c:c7:61:a7:8d:03:12:f4:7b:
                    59:c0:83:5b:bd:56:fe:4a:9a:8c:5f:df:f1:bc:a1:
                    99:8e:67:9e:ff:bc:91:76:5f:6c:40:a2:c4:25:ca:
                    fc:fd:4a:f3:88:62:df:79:b5:ac:f6:54:1e:57:57:
                    14:58:40:33:26:10:c5:ed:80:d0:4a:b1:a9:80:eb:
                    5b:9d:7e:ea:2c:17:5d:61:27:60:e3:70:50:31:dd:
                    c7:37:81:ef:87:1d:59:79:32:d6:9f:64:b3:0f:1a:
                    90:5a:48:ad:5a:0f:b6:73:84:6d:32:b9:b7:6e:ce:
                    b4:5d:a9:be:79:66:65:af:cc:e5:15:50:ee:32:dc:
                    cb:e5:08:68:ee:e6:60:a5:70:be:59:da:8b:a7:44:
                    d8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:08:3B:79:21:48:41:16:65:12:3D:E5:08:83:3D:93:8C:24:F2:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/46851ed2-09b8-3d9a-9185-8ddac9cacff5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl

            X509v3 Authority Key Identifier:
                keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:18:c0:15:54:a9:76:17:a1:d6:d3:f1:91:af:a3:4e:8a:7a:
         6d:6f:39:76:13:e2:06:d7:26:7a:dd:1b:0f:81:d4:15:19:50:
         c5:91:90:4e:ad:36:0b:e8:1a:9e:ff:31:ff:2f:69:54:e1:75:
         a4:ff:d0:4a:4c:b8:57:56:5f:ed:21:52:bf:83:2f:59:82:dc:
         09:79:f7:a7:1d:46:fa:df:d9:46:2e:2f:47:30:09:36:c7:63:
         c2:1d:ba:8c:ef:26:fc:69:92:12:4c:2e:0d:da:07:bc:20:9e:
         27:dd:ba:5f:6f:5e:eb:4a:87:0c:4f:88:f2:b3:cc:a4:9f:58:
         9c:e7:06:dd:7c:86:f1:ed:8b:cf:59:75:e9:7d:0e:0e:61:66:
         d0:52:df:66:0b:fa:39:6e:2b:82:01:97:95:78:6f:13:da:60:
         bf:b6:3f:ef:1e:0f:09:f2:16:97:c6:9d:76:ae:dd:81:2b:60:
         36:4a:ee:e5:a5:35:a8:c1:ac:dd:66:38:10:c2:13:5e:2e:76:
         6b:dc:1b:53:c1:cc:45:4d:25:a9:31:a7:2c:58:15:9b:a9:14:
         56:9d:15:9b:3b:55:0c:4d:72:8d:db:fb:a8:b4:b4:98:e1:38:
         0f:69:40:28:f8:86:1f:e1:46:b3:b6:2f:6e:a3:23:0a:6e:6b:
         95:62:21:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:38:43 2026 by rpki-client