Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/afed59d8-c9d1-3fbb-8350-99ca2faeaf2a.roa
File:                     afed59d8-c9d1-3fbb-8350-99ca2faeaf2a.roa (raw, json)
Hash identifier:          EJfltPh71k6EzHddbnTXBU9YXEE3DUtW6WgITBMzx5E=
Subject key identifier:   0F:26:AF:14:0F:F7:EB:B4:C2:10:09:A1:2A:EA:F8:41:AE:67:A6:51
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F4328584F6C581B82297A72F07E2382C0
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/afed59d8-c9d1-3fbb-8350-99ca2faeaf2a.roa
Signing time:             Wed 07 Oct 2026 13:00:13 +0000
ROA not before:           Wed 07 Oct 2026 13:00:13 +0000
ROA not after:            Tue 05 Jan 2027 14:00:13 +0000
asID:                     16509
IP address blocks:        23.154.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6c:58:1b:82:29:7a:72:f0:7e:23:82:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Oct  7 13:00:13 2026 GMT
            Not After : Jan  5 14:00:13 2027 GMT
        Subject: CN=636479a3-40b0-498a-a989-b14cab9e35f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:35:a8:8a:51:81:d3:03:a3:7f:bc:4a:ed:
                    3b:40:97:50:6f:8f:e8:91:09:35:4f:56:9f:2a:65:
                    fd:4f:95:94:a5:1f:59:76:cd:c1:f8:39:64:30:da:
                    8b:b2:30:f6:a0:bc:32:b4:08:c6:2a:dd:b1:e8:c1:
                    3e:35:99:22:71:c8:a3:4c:ce:94:33:9d:f8:0e:82:
                    ac:90:b8:1f:e5:b7:97:c8:34:74:3b:3f:ba:1e:2b:
                    a3:b2:7e:63:f7:14:61:4c:fa:3b:58:ba:96:60:7d:
                    03:79:ef:b1:ef:ef:64:85:5e:7b:b5:f3:3c:bc:f2:
                    79:d7:0e:e3:b8:b9:6a:66:a7:f6:fd:bb:6f:c1:48:
                    a2:6e:92:57:5c:a4:f8:3b:73:31:77:e6:2f:68:85:
                    6f:e7:7e:c4:3e:7f:70:29:8e:2c:13:f2:74:8f:07:
                    f9:81:3f:1d:2b:7f:00:8e:c6:e6:91:93:2f:e2:c0:
                    0d:21:26:20:09:e0:1e:fa:54:01:58:e9:96:35:f6:
                    88:ac:7a:e9:a7:f6:96:b9:87:6a:f8:1f:fc:bc:c1:
                    99:21:9a:86:a1:38:44:22:c9:0d:0f:c7:a7:b6:83:
                    89:cc:cf:8e:ea:fa:b7:8e:7d:e2:a2:32:d1:19:56:
                    56:e6:d6:a2:d2:09:95:26:f0:7e:f4:4a:5c:da:e7:
                    38:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:26:AF:14:0F:F7:EB:B4:C2:10:09:A1:2A:EA:F8:41:AE:67:A6:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/afed59d8-c9d1-3fbb-8350-99ca2faeaf2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:9a:db:e6:0e:6f:77:99:a7:4a:ee:e5:33:ea:14:02:e7:46:
         8b:2e:44:7f:9a:22:35:31:d2:26:80:11:cc:4d:97:e1:ad:4d:
         a4:af:de:f9:a7:5b:22:ab:2a:18:98:d6:99:cf:89:d3:a5:5a:
         c4:e3:fb:ea:92:dc:d5:8e:06:c2:9b:92:78:25:61:42:45:e2:
         7e:18:2d:00:0b:b1:c6:3c:b2:8f:24:2f:43:c7:e6:96:cf:b2:
         ae:2a:06:9b:a2:89:7e:e4:b4:ba:78:68:b1:f3:09:89:7b:5b:
         b6:73:02:89:22:27:2f:41:6f:3e:ed:09:54:e8:c8:db:26:41:
         b9:68:e6:ce:d0:b2:12:20:67:46:02:71:39:3d:e1:83:67:eb:
         b3:c2:c5:d1:b1:f9:5e:88:52:72:51:ef:3d:29:c8:ff:a5:53:
         d7:20:65:38:61:6a:f5:0b:f7:91:fa:a1:93:34:dd:c9:e3:89:
         cc:80:b6:e0:61:72:fc:e4:b9:20:b9:91:e7:4b:b3:bc:cc:da:
         97:a3:8a:27:a4:7f:36:0e:3a:88:cb:39:49:da:d6:41:38:86:
         e7:54:16:f7:05:66:72:af:30:b6:ef:b2:67:dd:a8:be:01:30:
         68:6a:a0:84:8a:76:40:df:11:10:b4:9f:bb:85:97:55:a1:3a:
         05:54:eb:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 09:52:47 2026 by rpki-client