Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479/c238bb06-a682-38fe-8875-9fa37b22aa89.roa
File:                     c238bb06-a682-38fe-8875-9fa37b22aa89.roa (raw, json)
Hash identifier:          dJVe/NiVI1MAEG+ik4wBSkzDbOCva5ebvoy5wwnACJ8=
Subject key identifier:   C5:E9:17:60:FC:99:16:EC:EE:BB:27:DC:A2:85:E5:F6:4E:0A:B5:2B
Certificate issuer:       /CN=c980b322-2706-49ce-9257-188222049479
Certificate serial:       010D0C9F4328584F00DCBD9863CD8E0063E3F000
Authority key identifier: 94:77:C8:23:0A:FB:65:21:42:D3:EA:6B:C9:FD:80:E9:C3:52:9C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479/c238bb06-a682-38fe-8875-9fa37b22aa89.roa
Signing time:             Sun 30 Aug 2026 01:00:12 +0000
ROA not before:           Sun 30 Aug 2026 01:00:12 +0000
ROA not after:            Sat 28 Nov 2026 02:00:12 +0000
asID:                     401007
IP address blocks:        23.181.240.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479/c980b322-2706-49ce-9257-188222049479.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479/c980b322-2706-49ce-9257-188222049479.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:00:dc:bd:98:63:cd:8e:00:63:e3:f0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c980b322-2706-49ce-9257-188222049479
        Validity
            Not Before: Aug 30 01:00:12 2026 GMT
            Not After : Nov 28 02:00:12 2026 GMT
        Subject: CN=c3b257e2-912e-436f-a1ea-5facf77d88fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:17:59:a6:07:59:dd:ab:2a:1d:e4:26:3b:38:
                    40:c5:45:1f:6d:c3:e4:84:e1:66:68:5f:e0:69:89:
                    a0:90:e2:31:f0:74:b2:b5:02:ca:a8:7c:39:d9:86:
                    f9:e7:b8:91:f1:3f:3b:af:9c:a1:0e:b6:99:ef:8c:
                    37:67:b8:a1:f8:cf:c7:6f:ec:05:a8:ac:f4:e7:d1:
                    56:22:b6:e0:3f:0d:db:70:c8:df:f9:34:6e:49:0c:
                    9a:18:bc:07:5e:d4:fb:b8:1b:38:49:86:4c:23:e5:
                    f4:34:bf:55:e1:31:c9:87:13:3b:64:3b:34:01:36:
                    43:d7:83:4a:06:4b:a5:cf:d3:f2:08:cd:be:a9:18:
                    55:4d:59:d3:25:3f:76:4f:24:bd:8f:6f:35:d3:a4:
                    c9:77:24:7f:0d:78:8a:11:7c:6c:25:a4:08:46:7f:
                    b4:bf:9f:27:10:08:2b:82:cc:12:49:4c:99:98:57:
                    51:b4:8d:a8:7a:c8:38:ce:24:89:93:85:ec:61:cb:
                    c4:61:69:2d:13:5d:47:b0:81:c4:0e:e5:f4:10:09:
                    3f:8b:e8:44:36:75:f9:13:95:88:9c:42:38:ee:62:
                    96:b0:40:4b:2a:2b:56:07:7d:63:af:44:b8:44:41:
                    a2:74:d0:fa:47:7a:5e:c7:3a:92:92:5d:8f:6c:16:
                    bd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E9:17:60:FC:99:16:EC:EE:BB:27:DC:A2:85:E5:F6:4E:0A:B5:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479/c238bb06-a682-38fe-8875-9fa37b22aa89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479/c980b322-2706-49ce-9257-188222049479.crl

            X509v3 Authority Key Identifier:
                keyid:94:77:C8:23:0A:FB:65:21:42:D3:EA:6B:C9:FD:80:E9:C3:52:9C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c980b322-2706-49ce-9257-188222049479.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.181.240.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:ad:9a:42:ff:ab:2c:51:66:5c:26:22:1c:e1:3f:90:c6:59:
         aa:e3:ce:e9:43:f2:84:69:1a:ac:a6:f9:19:30:01:0f:b9:82:
         45:eb:89:8b:6d:e6:5d:6a:24:a2:5a:21:25:6e:98:79:17:1f:
         e7:af:b6:8b:1e:62:48:51:a5:a3:79:70:de:cc:96:fd:17:15:
         cc:2a:51:61:66:fb:06:69:07:9a:df:e6:41:4b:71:fa:56:a6:
         fc:ae:19:0e:b0:a4:c4:65:91:a0:66:9b:54:89:9d:7d:51:06:
         b7:0d:6a:0f:af:51:f5:32:87:a8:37:eb:ce:ad:f2:d8:d8:b4:
         93:e4:bc:d6:b9:e7:8a:4c:8a:cd:ac:3e:1c:6a:f5:bf:24:a1:
         73:c9:01:1e:34:80:1e:cd:49:ef:92:90:77:00:72:36:2e:21:
         5b:ac:f5:3f:bf:72:4f:b9:96:bc:c7:96:64:5a:6c:8a:81:c3:
         75:f2:ac:80:e0:24:fa:96:c8:1e:d7:32:0d:48:2d:19:03:5a:
         eb:af:af:cf:c4:f7:ed:d3:dc:52:cc:f6:bd:25:5f:2c:25:76:
         cb:a6:21:e9:6b:fd:8d:41:d2:c5:a2:92:c0:14:8e:04:bb:1c:
         c8:b1:1d:17:6f:39:a7:73:95:36:13:b9:ef:cb:c3:c1:f0:09:
         18:79:75:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:35:47 2026 by rpki-client