Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff/d44d8d55-73df-3cbf-9b73-72b2a4577a01.roa
File:                     d44d8d55-73df-3cbf-9b73-72b2a4577a01.roa (raw, json)
Hash identifier:          /zIn1dkLl1zMbGMs5b00UJ48lPdS5rOcLMfsCbA8YjU=
Subject key identifier:   76:B3:1D:45:05:AD:E5:46:9C:64:44:AE:64:74:DC:4A:85:AC:58:65
Certificate issuer:       /CN=7ba6ea55-b21d-42b9-873f-84046b97c5ff
Certificate serial:       010D0C9F4328584EED5211C3085E17AEACE6BC80
Authority key identifier: EA:75:A1:ED:67:29:47:60:0A:00:1F:74:48:1C:D3:0D:36:CB:73:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff/d44d8d55-73df-3cbf-9b73-72b2a4577a01.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     7029
IP address blocks:        23.143.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff/7ba6ea55-b21d-42b9-873f-84046b97c5ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff/7ba6ea55-b21d-42b9-873f-84046b97c5ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:11:c3:08:5e:17:ae:ac:e6:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba6ea55-b21d-42b9-873f-84046b97c5ff
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=82a573e3-1d5b-479d-8180-029aa05b3f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a4:a6:0f:d6:2d:61:3c:93:cf:90:b6:95:63:
                    ce:29:e0:d7:50:0a:b8:f3:36:40:48:7e:23:c8:6d:
                    a2:fd:69:43:15:6f:b2:22:c5:da:95:03:08:0f:d1:
                    66:c9:b6:f1:fa:d2:72:93:2b:19:fe:c4:b7:c9:3a:
                    ac:4a:38:0d:52:eb:b6:2e:3e:f9:c0:47:3c:b7:b7:
                    ad:13:57:79:d7:1a:bd:76:d7:86:d0:50:91:24:4b:
                    24:f1:e3:c3:94:f3:0d:e2:93:8c:2b:40:2a:33:2c:
                    b0:5c:c7:44:88:a9:2a:bc:0c:0f:b3:34:8c:d5:8c:
                    89:fb:e4:2c:c9:c2:80:22:93:8d:63:69:ea:24:57:
                    40:22:a0:97:84:4c:8c:ea:89:ce:43:e9:fb:e3:dc:
                    96:7d:21:03:ee:d8:e1:ad:9a:02:d4:a9:b4:f4:98:
                    8a:fc:fc:ab:d9:3c:48:cb:06:d3:77:7f:4d:4d:ac:
                    e7:9d:43:d2:2b:96:6e:cf:15:18:09:c1:bd:f2:a8:
                    05:7b:aa:8e:48:c7:f5:13:24:3f:6e:72:36:a4:09:
                    be:2f:fb:c1:de:6c:11:d6:35:f6:09:5b:75:13:4b:
                    1d:11:d2:f3:63:aa:90:84:8c:3b:a0:3b:26:96:2e:
                    21:8f:4f:80:80:65:07:f9:29:31:bd:73:34:eb:7a:
                    1e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B3:1D:45:05:AD:E5:46:9C:64:44:AE:64:74:DC:4A:85:AC:58:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff/d44d8d55-73df-3cbf-9b73-72b2a4577a01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff/7ba6ea55-b21d-42b9-873f-84046b97c5ff.crl

            X509v3 Authority Key Identifier:
                keyid:EA:75:A1:ED:67:29:47:60:0A:00:1F:74:48:1C:D3:0D:36:CB:73:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7ba6ea55-b21d-42b9-873f-84046b97c5ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:7e:02:ae:3e:c3:ee:0a:c2:0b:ed:69:38:84:1e:2d:c0:74:
         67:9c:69:58:55:d3:3b:86:89:26:9c:84:13:24:9f:b1:fd:19:
         21:3d:fd:65:b2:cf:f8:3b:55:3c:24:32:87:be:5d:df:e0:cb:
         a4:d3:28:0d:60:d2:17:aa:f9:4d:d9:f3:a4:91:83:0a:e4:37:
         b1:74:17:3b:7e:91:4c:13:26:ee:d8:93:fc:c5:77:02:a5:02:
         57:6b:75:fc:28:56:e0:e2:77:92:e9:95:58:65:96:ae:b1:f3:
         56:8b:80:2a:80:5c:0b:54:12:f6:7f:0c:36:bf:7a:f0:87:c5:
         dc:74:65:58:0b:5c:aa:e1:ee:c7:d9:49:15:a1:eb:52:94:bc:
         33:68:c2:e2:0a:82:32:59:b5:32:c5:85:e9:0e:45:33:de:af:
         23:fc:37:e8:20:43:24:49:06:5d:20:91:e8:d3:77:06:b8:8a:
         89:d3:9a:d9:66:78:e1:dd:c2:f8:43:97:67:44:81:2a:f9:d3:
         7a:5a:bc:f9:60:6e:fb:fa:71:9b:07:cd:10:59:17:dd:c6:cb:
         8d:c3:94:d5:c6:a5:ed:e5:d2:74:c3:51:1f:7f:23:19:68:25:
         4f:95:fc:b6:33:3a:a0:ce:6a:9f:2e:9b:b7:4e:b8:c4:26:00:
         82:aa:fc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:15:28 2026 by rpki-client