Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/2e52f828-a538-3e6a-b928-f02369bcab6e.roa
File:                     2e52f828-a538-3e6a-b928-f02369bcab6e.roa (raw, json)
Hash identifier:          DxByS3yPqxAYKSBRbFNLaucJhMF9T/s40OFoBFsoh2k=
Subject key identifier:   FF:D0:C6:6F:C7:86:1E:0F:47:3B:A6:48:51:46:14:8D:DE:C5:C5:0A
Certificate issuer:       /CN=cc43c894-0822-4819-9b8f-df16b53cf6de
Certificate serial:       010D0C9F4328584EA7914F67A42DADAE583F2280
Authority key identifier: 9B:74:23:D0:BD:50:88:3F:45:72:DF:CE:6C:BE:DC:74:0F:8A:F4:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/2e52f828-a538-3e6a-b928-f02369bcab6e.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399861
IP address blocks:        23.130.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/cc43c894-0822-4819-9b8f-df16b53cf6de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/cc43c894-0822-4819-9b8f-df16b53cf6de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 09 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:4f:67:a4:2d:ad:ae:58:3f:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc43c894-0822-4819-9b8f-df16b53cf6de
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c9c8f10c-9c6b-47f1-9dc6-63d396580f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:29:83:71:7c:40:6c:6a:d9:7f:21:ca:a4:e8:
                    fa:6f:a1:8b:2a:8d:3f:2e:99:19:67:ef:99:86:90:
                    43:47:b5:11:18:87:67:1d:43:cf:8f:ce:e6:0c:12:
                    7f:99:34:f7:e9:1b:37:e8:d8:0e:9d:e7:9e:08:61:
                    fa:8a:2e:b0:92:88:90:83:84:49:07:31:df:e8:bc:
                    6b:cc:ec:45:7d:9c:e3:91:f0:18:1d:a8:a4:31:0d:
                    b2:58:ed:08:8f:a1:6b:c1:98:c7:8e:89:6c:8e:db:
                    bc:00:15:1e:c1:32:bd:50:c0:8b:98:8a:41:ab:08:
                    8a:4b:77:31:97:a6:91:de:25:74:91:28:1a:db:a7:
                    d6:76:61:67:9e:79:31:e2:cb:ca:4a:e7:94:e5:2b:
                    19:57:ec:6c:af:cc:96:60:fd:0c:e8:2c:90:ea:56:
                    e0:8e:cb:29:aa:85:5c:20:d5:84:e2:90:dd:04:f8:
                    b9:af:33:3b:04:73:3d:59:a1:09:68:e3:1f:0b:4d:
                    e6:7d:df:6f:67:08:bd:af:b9:8a:d2:4f:0d:94:c3:
                    4d:66:4f:f3:a8:55:25:01:a2:fe:c0:20:67:31:34:
                    a8:05:e1:8a:61:5d:13:71:01:dc:ac:0d:e0:0c:0d:
                    d8:ae:ee:45:ff:57:e4:86:49:79:12:64:e6:e6:41:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D0:C6:6F:C7:86:1E:0F:47:3B:A6:48:51:46:14:8D:DE:C5:C5:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/2e52f828-a538-3e6a-b928-f02369bcab6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de/cc43c894-0822-4819-9b8f-df16b53cf6de.crl

            X509v3 Authority Key Identifier:
                keyid:9B:74:23:D0:BD:50:88:3F:45:72:DF:CE:6C:BE:DC:74:0F:8A:F4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cc43c894-0822-4819-9b8f-df16b53cf6de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.20.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:1b:18:69:47:17:00:28:fe:7f:bb:f0:b0:26:4f:98:c5:c4:
         1c:9c:39:fe:b4:a9:15:7a:6c:8d:ee:b8:0f:f9:d6:62:c2:ca:
         dd:d8:5c:19:8d:88:2e:fd:60:2c:45:e3:c7:49:3f:8c:39:98:
         be:38:cb:4c:f5:0e:9b:22:a6:3b:18:01:55:7d:67:a3:e1:03:
         55:0e:6a:97:c2:c6:40:b4:e6:cd:32:7c:8e:1e:a5:81:94:78:
         4d:68:31:19:38:cf:16:c9:25:00:d8:c8:9d:39:0d:8f:43:62:
         b0:6e:1b:3d:62:5a:cf:91:51:32:5f:09:06:1c:27:4b:da:9a:
         64:17:b4:ae:48:b8:8f:36:1c:96:cd:aa:7c:d6:64:77:2b:e0:
         be:3a:f0:08:f6:42:3b:72:53:4a:46:62:52:51:4d:74:df:5a:
         aa:d1:e3:1c:55:1c:8d:47:e9:cb:dc:aa:40:04:3b:ff:21:2c:
         b2:c1:b9:ff:57:ee:4f:a3:42:96:38:f0:26:5d:37:c5:c2:9b:
         b5:d0:2b:b1:9a:37:c9:18:f4:dd:ce:50:12:08:64:5a:50:b7:
         42:f8:4b:b0:30:0c:60:a0:6f:87:52:6c:56:c1:df:a9:59:5b:
         41:b6:99:87:cf:69:ee:ce:32:26:bf:26:ea:eb:c6:c4:8f:59:
         e6:97:19:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 04:15:56 2026 by rpki-client