Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/dedb5afc-2e23-3b0c-8bce-b06c3fb591ff.roa
File:                     dedb5afc-2e23-3b0c-8bce-b06c3fb591ff.roa (raw, json)
Hash identifier:          Q2CHZF/glcwMvVALuXS7RxVAt/nYTR20l4YglKjcG2M=
Subject key identifier:   1A:4F:25:97:86:F2:A2:51:41:F0:F1:4E:11:4B:1A:43:1A:8A:1F:50
Certificate issuer:       /CN=fab6ccf2-19f6-4e96-aad7-9cb606e13cc5
Certificate serial:       010D0C9F4328584F2EED150F0848A2DF4857B9C0
Authority key identifier: 16:A7:A4:32:9B:77:0E:79:90:0B:5D:6F:0A:B6:2E:37:C4:AD:E0:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/dedb5afc-2e23-3b0c-8bce-b06c3fb591ff.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     198087
IP address blocks:        23.154.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:15:0f:08:48:a2:df:48:57:b9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab6ccf2-19f6-4e96-aad7-9cb606e13cc5
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=954151ec-cbef-4d09-8562-29a2373ede34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:30:c6:1c:fd:d0:a9:d6:6e:67:a1:55:a9:
                    84:d3:ae:1a:0a:f7:85:d5:a0:85:8c:65:4c:44:95:
                    b9:ed:d6:bf:c6:a4:6a:99:6a:15:da:97:d9:e0:c1:
                    c1:ef:50:bb:3e:de:a7:c7:66:d9:e8:7c:64:c0:30:
                    c7:03:52:5b:41:d6:5a:a0:68:01:1a:00:2a:35:ad:
                    a4:43:5b:36:56:3c:62:65:0a:08:ca:86:57:10:df:
                    7a:d8:f5:ab:02:aa:7a:33:b4:24:aa:88:86:15:7e:
                    49:02:b5:a8:6d:16:45:04:a9:68:82:a8:fa:a2:e1:
                    31:f4:80:a0:0a:29:78:1b:b7:07:5b:b4:08:f9:6b:
                    37:90:34:4f:20:7a:0f:45:2b:c6:29:cb:76:9a:32:
                    88:c4:16:ca:c1:56:8d:f0:e0:b4:d9:29:40:dd:13:
                    9b:2f:63:06:aa:b9:9f:5e:c2:16:7b:e4:79:c7:1f:
                    bb:9c:89:48:4b:66:c9:48:a1:72:fe:0a:a1:2f:0a:
                    d2:89:02:bc:fb:1c:ae:6e:90:68:0c:fb:c3:06:ae:
                    ff:7a:95:0c:0b:35:34:69:d9:8d:6c:bf:c3:06:8d:
                    93:92:a3:06:0b:03:9e:19:58:0b:3d:f6:3d:74:ea:
                    10:37:be:03:2b:b1:8c:fc:a7:20:c5:38:62:83:3f:
                    6b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4F:25:97:86:F2:A2:51:41:F0:F1:4E:11:4B:1A:43:1A:8A:1F:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/dedb5afc-2e23-3b0c-8bce-b06c3fb591ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.crl

            X509v3 Authority Key Identifier:
                keyid:16:A7:A4:32:9B:77:0E:79:90:0B:5D:6F:0A:B6:2E:37:C4:AD:E0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fab6ccf2-19f6-4e96-aad7-9cb606e13cc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:a4:8a:ea:40:11:f2:c7:a0:91:ab:5e:da:dc:d8:92:dc:2f:
         16:0b:15:b8:f2:7f:8b:80:98:2a:d6:ba:3a:50:8b:aa:d0:dc:
         49:8c:d7:f7:bd:c6:f6:4f:e0:94:8f:07:b9:34:17:7d:18:95:
         a6:bc:bb:a7:0a:89:41:07:15:ca:e8:bb:77:38:b5:73:22:ee:
         64:b4:46:65:96:d7:b5:02:0f:f4:9b:dd:72:17:66:e9:c8:15:
         cd:c3:d8:dc:a1:5d:ac:cf:f3:84:65:22:15:c8:47:d1:43:9f:
         38:54:ee:30:3f:8e:a1:c9:f8:c1:e8:0e:be:51:fa:ef:6f:42:
         85:22:01:e1:4b:ea:aa:af:ff:d2:23:05:74:39:a3:91:51:63:
         b0:d0:08:bb:ed:c6:97:3f:30:3e:2d:c5:0e:b3:49:4a:95:3b:
         6e:63:05:77:b6:3b:54:be:7b:9a:aa:4f:d8:18:b6:61:e3:74:
         17:84:6a:08:1a:c9:8c:11:d7:76:0b:85:57:a7:5a:97:e9:33:
         4b:b2:ed:b6:a6:9c:b9:94:f8:3c:4d:67:bc:2f:3a:29:4b:9a:
         87:e1:d2:f4:69:6d:2f:58:ee:3e:9f:f2:16:e3:a2:c1:25:e0:
         5f:a4:78:43:10:a2:71:75:92:c7:a3:e0:02:04:6e:18:62:77:
         95:66:bf:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:56:49 2026 by rpki-client