Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/8630a7ec-50e1-32c5-a1b9-c5ac5717066f.roa
File:                     8630a7ec-50e1-32c5-a1b9-c5ac5717066f.roa (raw, json)
Hash identifier:          ln1kZt3Y7PjrSjVNi692aJqIHBo5h4clqOK0O3EtShs=
Subject key identifier:   CF:D1:05:3A:76:FC:AE:ED:05:D0:F3:05:FF:D3:0C:ED:B7:8E:16:9B
Certificate issuer:       /CN=9032b19f-5ab1-4765-944e-83a757678275
Certificate serial:       010D0C9F4328584EF01CE8F8FBC10D81109ECF70
Authority key identifier: F2:A5:DE:1B:78:B1:ED:60:C0:27:DE:41:B9:69:9D:BC:3E:D8:4E:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/8630a7ec-50e1-32c5-a1b9-c5ac5717066f.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     174
IP address blocks:        23.142.36.0/24 maxlen: 24
                          2602:f5ce::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:e8:f8:fb:c1:0d:81:10:9e:cf:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9032b19f-5ab1-4765-944e-83a757678275
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=47524397-631b-43c6-8a55-7452e02d138f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ce:ae:5b:1e:0b:05:b7:c8:cd:b1:f3:17:b5:
                    06:1a:99:cf:06:30:be:32:d6:0c:bf:29:0c:92:f7:
                    1c:94:7d:70:71:ce:84:15:fd:9b:08:50:01:4e:ff:
                    c7:f1:53:7d:08:27:d2:3d:aa:00:59:71:51:c2:1c:
                    a7:58:5d:f4:52:05:17:bb:a1:f4:a9:17:01:9f:a1:
                    64:37:cf:6f:ad:86:cd:ca:29:d2:6d:b0:bd:d7:4e:
                    fb:11:db:b8:4c:49:c6:22:ba:13:66:cb:d8:46:c6:
                    e6:b7:8b:36:ba:e2:18:7b:80:a5:6d:21:00:ab:50:
                    f3:49:c1:65:9e:42:e1:bb:72:92:90:c5:3c:95:b5:
                    bf:ad:2b:02:c1:73:90:15:45:7d:3b:62:0b:4f:2d:
                    d5:e0:d7:41:14:8b:47:f8:4f:cd:15:53:07:40:52:
                    b9:b7:55:e8:1f:b3:07:d0:2f:78:d6:3a:8b:47:93:
                    62:45:df:7d:c8:19:20:5e:d5:1b:5e:40:4f:d2:c7:
                    bd:a5:c1:cd:78:5f:8c:69:f3:b3:4d:65:7a:b0:42:
                    5d:8c:ca:ca:6f:31:6c:3b:b9:8e:43:83:fd:b2:a9:
                    56:20:51:62:98:1f:a1:a8:98:c9:19:c5:23:f7:a3:
                    ca:1f:e9:c1:ee:90:94:9b:45:a7:09:40:29:b8:95:
                    e9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D1:05:3A:76:FC:AE:ED:05:D0:F3:05:FF:D3:0C:ED:B7:8E:16:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/8630a7ec-50e1-32c5-a1b9-c5ac5717066f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.crl

            X509v3 Authority Key Identifier:
                keyid:F2:A5:DE:1B:78:B1:ED:60:C0:27:DE:41:B9:69:9D:BC:3E:D8:4E:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.36.0/24
                IPv6:
                  2602:f5ce::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:93:2b:2d:21:48:10:97:bd:d1:8e:2a:a7:d1:29:08:da:46:
         da:88:02:cc:54:3d:f7:8b:e3:d4:8e:70:48:1c:9c:06:6b:96:
         e2:82:05:86:c8:a3:57:26:39:88:70:a0:fc:d1:f0:62:11:61:
         f5:b0:11:da:ab:c9:59:19:ba:9d:fe:be:1d:82:6e:35:46:78:
         dc:f3:a9:75:d0:b5:04:16:e1:c8:1c:c1:95:0d:6e:41:3f:06:
         90:36:ed:71:26:e0:21:7f:e9:2d:85:67:fb:e5:18:94:ea:81:
         ce:20:c2:cb:ab:c7:86:0e:d2:c5:a7:ed:5f:ae:d5:91:14:be:
         63:33:ef:3d:12:0b:37:4b:78:76:67:72:f6:e9:70:80:a0:44:
         ed:a5:1d:3c:29:c9:ba:0c:41:70:0f:be:11:d7:c9:42:23:b2:
         5a:e8:1b:1a:b2:a1:13:76:30:af:50:36:4c:59:41:63:71:c0:
         6c:22:4a:32:46:3a:b0:e1:c2:ef:a1:da:d7:e0:71:ef:6c:3c:
         7d:b7:82:12:5e:28:95:25:64:ab:12:17:a4:51:39:b8:9e:54:
         20:5d:80:f0:d5:f1:2a:24:f0:82:59:ae:8f:af:42:ba:1d:ab:
         dd:ad:48:79:9d:5f:33:4a:96:1b:42:aa:ed:b0:d6:6b:99:5c:
         84:14:7f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:28:37 2026 by rpki-client