Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/934ac425-340e-3407-9e69-6e3dc6e57157.roa
File:                     934ac425-340e-3407-9e69-6e3dc6e57157.roa (raw, json)
Hash identifier:          Pi16UApBKKHqRomP/rn4bZhFrKGWTm5Ts2pnR+32z9c=
Subject key identifier:   66:1C:9B:74:A5:5F:14:B4:C6:67:9F:E4:D3:F1:3C:3D:AF:1D:2C:FD
Certificate issuer:       /CN=8698cf1c-6f2f-49f6-9a90-ce88a83b6f37
Certificate serial:       010D0C9F4328584ED8648AFFFDFE527CD1C83BC0
Authority key identifier: A9:D4:C6:F9:E8:F9:E4:DB:86:27:DE:A3:E6:31:8B:49:AD:75:EC:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/934ac425-340e-3407-9e69-6e3dc6e57157.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     7029
IP address blocks:        23.142.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:64:8a:ff:fd:fe:52:7c:d1:c8:3b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8698cf1c-6f2f-49f6-9a90-ce88a83b6f37
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=59572edd-b24f-42f2-9b63-420b6a0db57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:27:5b:65:01:76:b0:7d:3a:4e:db:20:fa:a7:
                    02:0f:a5:a3:20:7e:cd:74:33:3c:ac:3c:61:99:06:
                    b2:d2:1c:69:3d:da:21:5f:a5:c7:9c:d8:5d:df:1b:
                    2a:2f:e6:76:97:5b:eb:2b:c6:52:a4:a0:04:71:27:
                    ee:0f:5c:c6:fc:32:13:00:85:f8:4e:20:7e:c6:dd:
                    44:0b:93:c8:a3:db:45:b2:08:14:30:f8:ce:1c:29:
                    05:a5:9c:85:c4:f7:20:5d:de:03:e9:82:e6:53:61:
                    5c:f9:bf:9e:4b:1d:28:4c:a7:62:f1:4c:e6:a2:b9:
                    a4:ec:97:4e:dd:e4:41:3b:d4:d9:fe:0c:72:3a:be:
                    90:52:7e:6b:a0:de:ee:7d:74:0b:85:07:56:df:a0:
                    b0:e7:b8:1f:fc:e4:ec:27:f8:92:d4:ec:e2:a2:d7:
                    15:0b:36:a6:4c:10:45:86:64:36:70:97:3a:f7:c3:
                    85:f5:ee:9f:9a:af:0c:5b:01:03:04:ce:c2:4e:3c:
                    84:2c:2f:86:ea:84:52:a3:a9:e7:c5:33:e5:78:ca:
                    10:b2:6c:3b:2c:73:7b:a2:70:ff:c6:82:ef:fd:4f:
                    ab:b7:16:85:72:9c:fe:4a:16:bd:ed:b0:6d:55:fd:
                    e9:fb:78:70:05:c4:09:c7:71:8c:fd:07:a9:24:32:
                    6c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1C:9B:74:A5:5F:14:B4:C6:67:9F:E4:D3:F1:3C:3D:AF:1D:2C:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/934ac425-340e-3407-9e69-6e3dc6e57157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.crl

            X509v3 Authority Key Identifier:
                keyid:A9:D4:C6:F9:E8:F9:E4:DB:86:27:DE:A3:E6:31:8B:49:AD:75:EC:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:4a:8d:0e:c2:64:10:51:25:65:16:5d:bb:ac:ef:61:f9:37:
         6c:4e:23:57:3c:f8:3b:50:54:ed:44:79:0e:bd:d5:18:c4:b4:
         6d:46:70:42:c7:58:7c:35:ad:2e:69:8e:39:12:09:61:e9:e0:
         ab:d9:a7:93:26:b1:45:75:c0:56:4c:07:a0:86:a6:57:25:a3:
         17:e2:4f:bb:18:e5:e1:ed:c9:bb:a8:55:9a:1a:a1:55:aa:2a:
         02:a3:06:af:74:19:78:71:9b:e7:cb:a1:bd:16:35:6e:41:24:
         32:f2:0e:44:0d:35:b0:49:cf:0b:d7:20:3c:f6:f0:a5:b2:86:
         2a:24:61:e0:6f:2f:b9:ff:27:17:f2:f9:4b:0f:9c:1d:15:1d:
         84:07:45:e2:96:6a:f4:15:cd:2b:84:1b:74:4a:37:60:3a:5c:
         a9:ff:fb:99:16:1a:9a:e7:00:21:0a:d0:c6:3e:77:30:99:56:
         b8:e0:eb:7e:c3:d2:9e:39:b4:3b:13:cd:77:50:31:84:41:32:
         2b:ed:3a:39:3e:f7:25:49:a7:50:35:ed:5e:2d:3b:55:c5:64:
         6d:3a:78:d5:3f:36:4e:d6:f6:75:4d:5a:62:26:8d:45:b5:2d:
         c3:31:0e:f0:38:6f:dd:61:34:2e:2f:e2:9e:51:4f:f7:28:76:
         3b:0b:31:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:17:06 2026 by rpki-client