Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/6049393e-96ff-342e-9b7e-005e1de06ae3.roa
File:                     6049393e-96ff-342e-9b7e-005e1de06ae3.roa (raw, json)
Hash identifier:          I4GrhzB3r16Ayhcp97rVZ+O7mjJmjfJmrAkeh1zKe6A=
Subject key identifier:   A4:60:D8:A2:42:7E:F0:9E:3F:B5:DF:26:4F:28:69:17:DA:69:3B:99
Certificate issuer:       /CN=537b7005-fa22-4089-a512-a57cb14d03e0
Certificate serial:       010D0C9F4328584F4972C36E609EDBA345974B20
Authority key identifier: 47:BA:86:1C:A9:1C:3A:DA:42:72:F1:EA:7B:75:65:8B:60:18:AF:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/6049393e-96ff-342e-9b7e-005e1de06ae3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        23.146.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/537b7005-fa22-4089-a512-a57cb14d03e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/537b7005-fa22-4089-a512-a57cb14d03e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:72:c3:6e:60:9e:db:a3:45:97:4b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=537b7005-fa22-4089-a512-a57cb14d03e0
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=489f8916-2127-4925-81d1-68913f5938ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c8:14:2e:7e:f7:64:97:24:ee:52:68:28:d4:
                    7e:93:78:88:6a:35:10:98:a0:d5:2f:35:3d:03:0f:
                    b1:91:b8:1e:9e:c1:05:a9:6f:1b:9f:e0:f7:aa:16:
                    71:e0:df:52:b3:b0:17:03:f2:10:99:7d:a5:82:f1:
                    a6:2a:05:55:cd:62:35:dc:b2:20:9d:af:d9:45:0d:
                    45:f2:40:a2:87:f7:fa:46:9b:28:cd:79:07:38:9b:
                    15:e4:3d:ea:71:08:db:3a:ec:70:f1:04:10:26:03:
                    1d:09:aa:9f:0d:a1:53:cb:c6:9e:24:de:9a:7e:06:
                    d7:29:8a:d4:ea:65:88:92:01:77:49:05:3c:97:72:
                    fe:6b:94:23:68:40:c4:7a:12:d0:4b:be:24:9f:28:
                    a8:83:6f:a8:15:dc:ab:f4:9e:cc:0f:4f:70:ad:c6:
                    c9:e6:98:3d:79:bd:fc:1c:a2:91:73:1c:4f:bb:a9:
                    c8:0d:c9:98:74:15:9e:9d:66:ae:5c:11:46:51:d5:
                    6a:69:c4:81:15:90:7c:5e:c9:53:46:01:ab:e0:43:
                    c7:dc:13:5d:56:e6:e6:59:64:12:ef:85:f8:d0:1d:
                    ac:cf:3e:f6:b1:89:a3:2b:67:78:4a:71:1a:94:73:
                    9f:bd:ee:6a:7f:a4:d8:bf:40:2a:1f:0d:90:3d:84:
                    7c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:60:D8:A2:42:7E:F0:9E:3F:B5:DF:26:4F:28:69:17:DA:69:3B:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/6049393e-96ff-342e-9b7e-005e1de06ae3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0/537b7005-fa22-4089-a512-a57cb14d03e0.crl

            X509v3 Authority Key Identifier:
                keyid:47:BA:86:1C:A9:1C:3A:DA:42:72:F1:EA:7B:75:65:8B:60:18:AF:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/537b7005-fa22-4089-a512-a57cb14d03e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.146.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:fa:14:79:ea:ad:c4:68:34:fd:69:17:18:89:a2:09:c8:34:
         51:12:51:23:5d:fa:13:36:49:5f:e0:9a:75:d9:0b:24:e6:81:
         09:ef:d2:54:63:de:37:65:73:bd:47:5f:4f:77:82:80:b9:95:
         c0:81:7d:c7:bb:d0:7d:bd:d5:1f:e5:ec:9d:ac:0f:22:62:a6:
         06:17:48:e6:50:33:45:ca:76:3e:30:77:da:a2:de:e1:98:81:
         02:04:7a:6a:87:d7:4b:8c:3f:f2:cc:5c:87:87:e7:b9:03:12:
         fa:13:da:51:f2:b2:fe:e4:1c:90:2d:c7:79:79:45:b2:9e:43:
         52:dc:f0:93:73:6a:a6:b5:c1:6d:f9:6f:9c:13:fd:3d:6f:f9:
         78:8b:fd:2c:e1:d9:42:c2:b8:49:41:c3:87:a0:7a:42:cc:fa:
         b4:28:2d:e0:61:13:06:fb:e8:68:d3:a7:76:48:14:f8:9d:98:
         c5:c5:9a:e9:81:80:b2:25:d7:b8:ed:6c:98:0f:9b:6c:52:3c:
         91:04:3b:13:f4:2a:e7:b3:c8:92:c7:69:3a:c9:58:5b:99:94:
         ad:49:19:db:df:e5:d8:4f:3a:e8:d4:a2:4d:a3:51:9a:39:78:
         e3:90:f6:ee:65:01:4b:70:66:5a:45:b6:a7:6a:d0:38:e5:e6:
         db:5e:30:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:08:53 2026 by rpki-client