Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/1406a911-345a-38ca-8c5a-a17abfb8c37a.roa
File:                     1406a911-345a-38ca-8c5a-a17abfb8c37a.roa (raw, json)
Hash identifier:          XnmwSDb4L2RBTYjoURuGloW0gdlFa38Xq+RK+bcyWVo=
Subject key identifier:   16:CD:7B:B0:04:A8:ED:40:E1:92:75:55:A3:21:C4:2A:0A:0C:9F:FD
Certificate issuer:       /CN=706746b3-2f98-4839-b419-77fa8ac86365
Certificate serial:       010D0C9F4328584CAE570EC3D8AE0309852B4E80
Authority key identifier: DB:E2:E0:27:CA:0D:90:5F:E4:8F:10:61:B4:72:78:BE:4C:52:41:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/1406a911-345a-38ca-8c5a-a17abfb8c37a.roa
Signing time:             Thu 29 Jan 2026 02:00:32 +0000
ROA not before:           Thu 29 Jan 2026 02:00:32 +0000
ROA not after:            Wed 29 Apr 2026 01:00:32 +0000
asID:                     396893
IP address blocks:        23.132.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/706746b3-2f98-4839-b419-77fa8ac86365.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/706746b3-2f98-4839-b419-77fa8ac86365.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ae:57:0e:c3:d8:ae:03:09:85:2b:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706746b3-2f98-4839-b419-77fa8ac86365
        Validity
            Not Before: Jan 29 02:00:32 2026 GMT
            Not After : Apr 29 01:00:32 2026 GMT
        Subject: CN=4ec68ebb-fb51-4013-b44a-a4fde2fd14e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:42:2d:c8:79:c7:d4:e2:b7:0d:a9:b1:01:5d:
                    6b:8b:58:ee:4b:44:30:60:9c:01:d7:af:e9:91:9e:
                    24:15:c4:fa:c0:7e:1c:83:d8:74:ae:40:f8:50:09:
                    11:63:1a:00:d2:1a:92:26:8b:01:a4:7b:28:b8:89:
                    76:bb:66:49:6a:23:7e:42:92:a2:4a:c4:82:18:95:
                    f8:03:5a:c1:b1:cf:ff:5a:6d:f7:8e:de:8f:c7:07:
                    e9:6c:44:2d:d9:8b:cf:3e:4c:a8:df:8d:c8:7a:59:
                    89:81:c6:38:06:86:9b:d0:c2:f1:0f:f1:b4:fa:a2:
                    f7:d0:cf:52:2c:08:d8:da:9b:92:bd:b8:45:1d:bc:
                    a0:85:32:91:59:eb:ae:e4:fc:fb:74:f6:24:d3:8e:
                    98:d0:af:04:34:2e:c1:53:59:88:d0:4a:26:f4:b1:
                    2d:09:ee:fb:eb:90:77:aa:90:54:26:9e:bb:12:2b:
                    4d:9a:ea:aa:28:37:aa:f4:09:5e:d6:ab:bc:5d:29:
                    98:9f:b1:b6:c0:4e:51:04:97:56:4e:1a:ca:c0:56:
                    2e:fc:3c:16:44:e1:df:a8:d1:d1:12:83:6b:82:cd:
                    bf:66:14:5f:5b:76:c3:ff:92:79:36:8d:55:3c:52:
                    aa:85:4c:c9:24:39:6d:91:f2:cb:7f:8d:6a:5f:12:
                    bc:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CD:7B:B0:04:A8:ED:40:E1:92:75:55:A3:21:C4:2A:0A:0C:9F:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/1406a911-345a-38ca-8c5a-a17abfb8c37a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365/706746b3-2f98-4839-b419-77fa8ac86365.crl

            X509v3 Authority Key Identifier:
                keyid:DB:E2:E0:27:CA:0D:90:5F:E4:8F:10:61:B4:72:78:BE:4C:52:41:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/706746b3-2f98-4839-b419-77fa8ac86365.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:04:5d:4b:c0:cd:86:ad:37:d8:ce:56:2b:9b:60:c1:34:5b:
         47:f0:37:2e:cc:30:30:6a:da:73:06:90:8b:01:2e:83:ae:c7:
         4c:9f:13:89:fc:b1:e5:3f:be:98:e0:cb:d6:bd:18:1c:7c:8f:
         71:3b:37:dd:05:4e:91:7e:db:29:f2:8b:a5:5a:b6:22:26:ee:
         73:46:f4:a1:f3:f1:1f:84:cf:08:72:72:be:a9:5a:e8:19:5b:
         a0:16:4e:aa:b5:cd:80:8a:4e:ea:3a:26:a4:9f:b7:cd:5f:25:
         d2:b3:7f:aa:7d:e5:dc:bb:6f:cf:d7:22:3d:fb:5e:e1:94:6d:
         21:2b:a5:0f:65:a4:55:99:25:b9:0b:c1:b7:31:31:85:bc:61:
         41:a6:6b:46:21:db:0c:a4:b4:21:d5:03:37:e2:4c:d2:70:8b:
         ae:f4:04:0a:9b:3b:08:40:8e:1f:c8:8b:64:8a:00:d2:20:b1:
         ec:77:eb:ad:f1:39:c6:6d:20:d7:1c:f4:ae:5d:7d:68:2a:3e:
         a8:1a:36:8c:9d:23:b0:c5:34:44:86:6f:e7:f5:24:4b:c4:58:
         28:6d:12:c3:6a:a9:17:ac:28:2b:1b:71:71:12:aa:84:b0:ef:
         99:59:67:8c:b8:74:e5:ad:e4:43:13:bd:9b:46:71:d9:bf:52:
         34:79:d5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:39:05 2026 by rpki-client