Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa
File:                     9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa (raw, json)
Hash identifier:          mfLLnmjylaPlc/5FOY1OSw7SBk4pAPDCKNKEB0oKFrI=
Subject key identifier:   7C:75:7E:77:0F:83:E9:52:0B:E7:56:FE:70:ED:5B:43:1C:5A:E3:85
Certificate issuer:       /CN=bff64bc2-33e0-4980-b94c-1b0369245ea4
Certificate serial:       010D0C9F4328584EA79787BC515F8B9ABDD01800
Authority key identifier: FB:F2:4B:6F:5C:87:63:98:4E:6E:8E:20:7E:45:43:E9:E5:3D:0C:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     215129
IP address blocks:        23.135.52.0/24 maxlen: 24
                          162.212.33.0/24 maxlen: 24
                          2602:f6d8::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:97:87:bc:51:5f:8b:9a:bd:d0:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bff64bc2-33e0-4980-b94c-1b0369245ea4
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3e807c42-23b2-41ea-ad0f-0bde28878177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3d:6b:25:a3:36:07:7a:eb:ec:ce:77:f8:4f:
                    8b:ed:7d:58:ca:e7:42:7c:5f:c9:b7:d7:0a:6c:b8:
                    66:2f:96:99:e8:7a:95:d7:2d:6c:97:60:8f:f9:6a:
                    11:f4:a5:34:23:36:0f:14:92:82:a6:64:09:7a:44:
                    0b:68:02:a9:90:17:97:28:c5:a3:08:21:95:c8:d9:
                    6f:b2:34:41:42:23:30:0b:c9:1a:2a:98:de:78:ef:
                    c0:bb:4b:fb:e1:fe:e6:57:a9:48:b4:7e:e2:d9:a2:
                    ef:fd:9a:11:64:6b:0b:1a:9e:49:25:4a:5e:77:7c:
                    3f:a7:e2:2a:be:f3:71:bd:b8:cd:65:44:da:42:d3:
                    5b:8e:6d:21:60:38:ee:4f:37:f5:d1:c7:12:a2:07:
                    0a:7e:ec:c8:1a:9f:a2:67:4e:4a:c0:fa:97:f8:c9:
                    e4:c1:f4:19:56:6b:cb:e1:03:f4:e3:00:34:9e:e8:
                    41:07:87:d5:bb:2d:44:18:1c:a6:53:19:7c:01:e4:
                    05:b7:46:1e:d6:9a:c0:2c:ae:38:96:14:51:81:40:
                    ba:06:e0:47:29:09:5f:7e:03:0d:1b:fb:fa:54:2d:
                    3e:b7:b5:2a:ed:24:c8:84:65:3b:d8:ac:d5:f6:85:
                    60:39:ed:f5:4d:07:e3:0d:12:19:ca:09:8e:31:86:
                    99:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:75:7E:77:0F:83:E9:52:0B:E7:56:FE:70:ED:5B:43:1C:5A:E3:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/9ef38630-7d04-3ec4-b8b1-7870ab79c269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4/bff64bc2-33e0-4980-b94c-1b0369245ea4.crl

            X509v3 Authority Key Identifier:
                keyid:FB:F2:4B:6F:5C:87:63:98:4E:6E:8E:20:7E:45:43:E9:E5:3D:0C:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/bff64bc2-33e0-4980-b94c-1b0369245ea4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.52.0/24
                  162.212.33.0/24
                IPv6:
                  2602:f6d8::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9d:45:8a:11:df:07:e5:fc:8a:d7:ee:1b:26:58:27:2b:ff:
         ba:bf:9e:1e:9a:39:9b:e9:7a:de:60:75:37:4b:46:6d:47:95:
         bf:e5:2c:dc:79:d8:64:3f:b6:2c:4c:3a:a5:49:de:a7:a4:f6:
         7c:10:55:db:30:aa:38:68:81:e3:51:ba:ef:bf:e1:60:32:1b:
         36:3c:c7:63:67:aa:92:83:51:e8:58:de:1e:00:b5:07:9d:2d:
         2d:ee:80:57:fa:f5:b0:8f:29:29:21:fb:7c:8c:8a:9f:67:70:
         49:55:45:32:96:ad:98:e2:72:b7:d3:cd:83:32:c3:2d:37:7f:
         ad:2e:2a:6d:af:ef:f8:f2:a9:8e:1e:21:dd:d4:73:b6:6e:35:
         7f:b9:24:d5:e2:d6:06:28:e6:f3:50:07:ad:df:98:c8:e5:dd:
         1c:58:d3:fa:48:3c:65:6b:03:6b:57:6b:67:63:8a:65:6b:f6:
         d7:ba:aa:d0:69:78:b9:21:54:ad:46:76:dd:8e:2c:af:bd:bb:
         b4:75:65:5b:37:a8:4c:98:74:68:9d:6a:b8:f2:7a:ef:e6:9c:
         6e:89:78:e7:e4:bc:e6:0c:1e:04:b0:82:00:a7:d1:b9:71:ad:
         bf:2f:16:13:7f:b0:6b:ea:2a:6a:6c:ac:4b:36:15:68:85:8d:
         d9:d3:19:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:30:06 2026 by rpki-client