Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/e0deb7f3-5f98-34f2-ab2a-0d2554e19fe6.roa
File:                     e0deb7f3-5f98-34f2-ab2a-0d2554e19fe6.roa (raw, json)
Hash identifier:          KDBfofrW2xeHS9afdpXuDCOVwvS3PrdiKcj3eGSZxI8=
Subject key identifier:   37:47:12:82:99:C3:58:16:2A:6B:DC:69:0D:90:96:20:0F:85:AE:67
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F4328584EA79C271F891AFA99BB5E2848
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/e0deb7f3-5f98-34f2-ab2a-0d2554e19fe6.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     26496
IP address blocks:        23.229.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9c:27:1f:89:1a:fa:99:bb:5e:28:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3424a0e8-df7b-4511-b6b6-70cb9e52f993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ff:30:c2:93:53:e2:a7:42:63:b2:7a:77:a0:
                    b5:c2:f8:43:2c:b5:3f:0f:11:11:06:84:05:7e:ef:
                    09:da:9c:d4:09:71:b4:fe:04:06:5c:fe:45:56:31:
                    af:fe:88:3c:9e:03:60:c0:c0:d4:16:44:22:3c:ac:
                    da:f6:8e:71:b8:e2:aa:e4:8a:54:fd:16:eb:e7:e7:
                    3e:12:9e:a5:f4:3f:e4:9a:8f:32:2a:fb:36:9a:f0:
                    09:01:f3:48:60:61:54:0e:76:a8:21:d2:3c:3a:7c:
                    f8:58:c3:15:14:82:d3:cc:db:ba:42:9f:d9:32:9b:
                    54:67:af:0a:06:a8:09:8f:a8:3a:f2:d6:0a:b4:5b:
                    ce:22:56:19:04:9d:9a:24:30:55:eb:f4:05:71:be:
                    cf:9e:31:d5:d5:20:04:42:a5:62:44:5a:ba:e1:ab:
                    c0:3d:17:a9:8f:8b:77:03:8d:5e:32:2d:91:d6:a0:
                    a0:b1:85:00:87:35:c3:86:58:54:86:d3:72:07:1b:
                    45:30:7a:d3:57:e6:14:8a:3d:47:da:e7:7b:16:9d:
                    95:da:69:93:03:2f:82:4b:fd:17:a8:5f:36:10:fc:
                    bc:1e:75:ed:bb:71:7d:98:e1:2b:f1:e7:52:64:5e:
                    a1:92:29:16:1d:bd:8e:46:19:07:0d:94:cb:b7:29:
                    e8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:47:12:82:99:C3:58:16:2A:6B:DC:69:0D:90:96:20:0F:85:AE:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/e0deb7f3-5f98-34f2-ab2a-0d2554e19fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.229.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:54:d1:ce:af:85:48:0f:83:df:73:dc:74:65:49:99:a8:ac:
         01:6d:8b:13:2d:38:ce:02:1c:cd:df:bb:c1:ea:3b:4e:1a:a5:
         e1:5e:d4:fd:87:44:bc:6a:f5:e9:e2:7a:c5:2e:fa:91:6d:c2:
         9c:cc:b3:35:7a:7a:6c:0e:10:0f:19:84:70:cd:10:f9:ba:3c:
         7b:f8:c1:0c:73:a3:a8:c2:0a:70:6b:4d:1a:6e:58:bf:e5:3f:
         d4:59:65:97:80:27:15:30:a4:b1:93:82:7c:f4:e6:c2:a3:80:
         34:12:ec:e2:0f:fb:4f:ca:3c:7b:ad:de:3b:5a:89:85:5e:a2:
         c2:da:72:55:5f:9a:45:ea:74:fd:00:2a:95:4e:1a:b2:7a:48:
         e7:07:5f:e1:ec:83:f3:3b:9e:8a:6d:ff:64:29:bb:22:89:04:
         8a:49:03:54:27:08:82:f0:8e:3a:2f:00:25:0f:bc:61:83:5e:
         10:a5:b6:57:93:d9:e5:fc:26:ba:3d:09:d2:25:ba:09:3a:94:
         33:b7:81:ab:46:15:28:91:40:fd:80:e8:55:2a:95:3c:81:ea:
         b8:27:78:23:cf:c8:58:43:16:bf:43:79:8c:2e:74:e2:03:ab:
         b2:e4:f4:04:93:b7:5f:91:20:39:81:57:e6:f6:c2:94:1d:f6:
         6a:4f:84:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:05:19 2026 by rpki-client