Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/696ff717-1fc2-3d70-8b39-b8540ab73fad.roa
File:                     696ff717-1fc2-3d70-8b39-b8540ab73fad.roa (raw, json)
Hash identifier:          WhwohTpPIbXREEA8i05sqVdX3s+6E2EXvn1HBTEoU0M=
Subject key identifier:   66:36:3A:40:C6:F9:3C:D5:B7:E2:4C:F3:77:44:F2:B4:D5:1C:B6:16
Certificate issuer:       /CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
Certificate serial:       010D0C9F4328584F2ABD2EC528B36F0D1D93EF40
Authority key identifier: D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/696ff717-1fc2-3d70-8b39-b8540ab73fad.roa
Signing time:             Mon 14 Sep 2026 01:00:12 +0000
ROA not before:           Mon 14 Sep 2026 01:00:12 +0000
ROA not after:            Sun 13 Dec 2026 02:00:12 +0000
asID:                     21738
IP address blocks:        23.160.201.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2a:bd:2e:c5:28:b3:6f:0d:1d:93:ef:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba03064-0288-4ec4-b73f-d6ba1d639961
        Validity
            Not Before: Sep 14 01:00:12 2026 GMT
            Not After : Dec 13 02:00:12 2026 GMT
        Subject: CN=bbe9a982-657b-4260-a01a-6f4ca233f3e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f7:9a:5d:b2:14:37:c4:42:43:ac:c8:30:71:
                    19:35:8d:cf:3e:1d:ed:2a:d0:37:d5:65:98:e6:45:
                    1b:09:1f:6e:51:40:2a:ad:64:82:74:68:f8:8a:0c:
                    cd:c8:9a:52:69:e0:b9:b4:e6:3c:ae:a1:65:ff:00:
                    40:e4:9c:d1:bf:59:94:a5:ab:28:d2:aa:03:60:6c:
                    57:92:60:42:ee:67:4b:51:12:3d:48:00:22:4f:01:
                    62:aa:28:59:6b:e9:c3:d6:4b:0c:c8:62:98:4a:d8:
                    08:19:ef:2a:bd:25:f0:65:30:a0:46:0a:16:83:69:
                    3f:85:5c:06:75:aa:cd:bd:cb:a9:b5:ee:e0:58:77:
                    ae:d7:57:52:16:3e:5a:58:6f:e2:36:01:89:97:a0:
                    cc:16:2c:4b:2f:f4:6d:95:45:5d:58:0b:f4:a5:b3:
                    b9:08:69:03:bc:d0:95:dc:0c:af:9a:53:b8:e4:d3:
                    bd:3b:8e:66:b3:fc:33:97:79:14:f0:d5:6c:5e:94:
                    f2:b2:f6:c7:db:e8:fc:88:88:11:7c:f8:31:e9:4a:
                    81:3d:7a:40:2b:df:d2:a3:ad:0e:69:15:0b:86:35:
                    70:d3:0e:be:64:c9:cd:d4:a2:ac:b2:cb:66:4e:89:
                    f2:1f:ef:98:aa:bb:00:ce:69:ff:d2:71:9c:28:2b:
                    77:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:36:3A:40:C6:F9:3C:D5:B7:E2:4C:F3:77:44:F2:B4:D5:1C:B6:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/696ff717-1fc2-3d70-8b39-b8540ab73fad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961/4ba03064-0288-4ec4-b73f-d6ba1d639961.crl

            X509v3 Authority Key Identifier:
                keyid:D5:B0:A1:F6:E8:C8:0C:9B:0D:B8:6F:3D:78:20:2F:7B:79:D4:AD:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4ba03064-0288-4ec4-b73f-d6ba1d639961.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:4b:0b:fb:3f:75:53:75:74:04:17:28:a0:52:db:3c:c5:64:
         82:09:27:d4:99:e1:e2:66:74:26:30:38:e5:3f:11:41:11:7a:
         0d:fd:07:05:7e:6b:0b:18:e1:dc:4a:b8:07:3d:87:c4:2d:69:
         26:cf:5a:7f:e4:aa:d2:90:b8:fa:e1:8b:ad:d5:f2:9a:a9:c3:
         e1:17:4d:1e:15:7b:c5:e5:1b:11:d6:d1:70:a4:45:25:ff:08:
         dd:a2:6b:f0:10:19:9c:46:f5:a6:f4:d1:a6:fa:51:2e:42:70:
         9f:97:bf:c0:e8:03:f0:c7:a1:2d:26:15:f5:21:27:5a:bb:b6:
         42:a5:ba:8a:0d:10:29:d5:42:a3:67:cf:4e:33:9a:2b:47:6f:
         fa:7a:35:56:26:53:69:43:5f:ea:77:4d:8c:c3:03:e0:50:69:
         dc:03:0d:34:91:78:5f:fa:d3:cd:7a:51:99:e0:2a:4c:5d:41:
         82:5d:24:7c:70:08:43:0e:af:1a:37:d1:02:e1:f1:de:a1:dd:
         57:cc:01:0d:c3:71:5a:5f:04:a1:81:c4:fd:ec:22:9e:37:38:
         b6:ea:69:e2:8a:58:0a:cb:1c:11:3e:55:69:70:80:14:b1:72:
         a4:d7:67:47:c4:c6:44:32:c9:a4:4f:e0:d7:3d:d6:47:7f:85:
         1f:db:9d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:25:43 2026 by rpki-client