Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/436969c5-cb05-3283-9f7b-0e4633497b1f.roa
File:                     436969c5-cb05-3283-9f7b-0e4633497b1f.roa (raw, json)
Hash identifier:          kW+q3/eWf4lENrNdgrnwCptgAc2jbADM3jIbXKv7u10=
Subject key identifier:   88:1B:FE:CB:FA:A7:A6:70:66:FE:24:A6:B6:38:FF:CC:00:49:78:E5
Certificate issuer:       /CN=7e860267-056f-4836-b9b4-0bc612378041
Certificate serial:       010D0C9F4328584FB50BB35F0C06ADFEBCE19400
Authority key identifier: BD:97:AB:39:F9:A2:F9:CB:9D:14:C2:1E:2C:87:3E:1A:F2:CA:F3:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/436969c5-cb05-3283-9f7b-0e4633497b1f.roa
Signing time:             Mon 02 Nov 2026 14:00:14 +0000
ROA not before:           Mon 02 Nov 2026 14:00:14 +0000
ROA not after:            Sun 31 Jan 2027 14:00:14 +0000
asID:                     30272
IP address blocks:        23.155.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/7e860267-056f-4836-b9b4-0bc612378041.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/7e860267-056f-4836-b9b4-0bc612378041.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:b5:0b:b3:5f:0c:06:ad:fe:bc:e1:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e860267-056f-4836-b9b4-0bc612378041
        Validity
            Not Before: Nov  2 14:00:14 2026 GMT
            Not After : Jan 31 14:00:14 2027 GMT
        Subject: CN=62bebb9e-176a-488b-b656-08851137763c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f7:ab:06:5f:99:14:1b:ee:a7:84:be:26:86:
                    d4:bd:0e:9f:50:11:5f:48:d7:ab:fe:43:bb:4e:60:
                    90:23:76:be:6e:24:27:87:e4:70:32:f4:c4:41:e4:
                    48:0d:2e:2d:46:02:cf:8c:6c:f1:32:2b:e3:e7:4f:
                    3e:0c:c3:89:fc:ef:b8:25:ae:02:a8:96:ce:a6:2f:
                    ec:53:4e:cf:fd:97:fd:55:f9:d8:7e:6a:b2:51:2c:
                    cc:6b:2c:42:f6:0f:14:82:d5:6e:07:3d:e8:e5:81:
                    49:51:24:4e:03:92:70:ea:e3:10:3a:9a:bc:ab:a1:
                    98:19:9b:7a:15:ce:aa:7e:47:4a:a4:c3:55:22:c7:
                    c3:3b:08:7b:f3:3d:98:46:b7:73:a9:02:da:6f:1d:
                    2c:20:0a:cf:05:50:03:40:97:9b:64:3a:9a:e1:e8:
                    62:30:9d:9f:e8:f1:32:9d:24:a6:67:da:38:14:24:
                    8d:ea:5f:e7:f6:ed:54:4b:b3:4c:a1:59:d6:f5:9c:
                    7c:bb:5f:76:97:94:06:12:5b:88:cc:1c:22:86:df:
                    76:68:95:07:70:a6:9c:11:67:55:f5:b5:b7:41:2c:
                    98:e9:3c:7a:5a:07:43:8f:03:93:80:80:84:29:e5:
                    d0:5c:a5:9c:a2:00:c2:b7:55:82:1f:9e:31:58:dc:
                    5f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1B:FE:CB:FA:A7:A6:70:66:FE:24:A6:B6:38:FF:CC:00:49:78:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/436969c5-cb05-3283-9f7b-0e4633497b1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041/7e860267-056f-4836-b9b4-0bc612378041.crl

            X509v3 Authority Key Identifier:
                keyid:BD:97:AB:39:F9:A2:F9:CB:9D:14:C2:1E:2C:87:3E:1A:F2:CA:F3:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7e860267-056f-4836-b9b4-0bc612378041.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:c1:3c:4e:64:af:d5:a4:78:b8:46:89:34:bc:1e:00:a1:
         6a:c0:c2:ca:83:80:78:48:53:d3:db:17:c8:eb:24:9c:55:58:
         42:fc:b0:f6:4b:79:c0:84:87:83:22:11:d2:86:a6:00:a3:61:
         4f:06:30:e8:b0:a8:cd:9e:87:4f:50:ee:8b:30:f3:7f:ef:51:
         f3:38:61:5f:5b:ba:13:65:f8:03:73:82:42:de:95:da:a2:aa:
         b4:c7:37:c2:6e:51:b8:d2:25:96:3c:65:57:ae:bb:05:d8:e4:
         0e:10:0a:73:40:43:06:85:d6:a3:61:85:89:05:d2:15:1d:e6:
         dd:76:2f:80:a5:62:f2:14:39:ad:40:44:08:f5:e9:64:e9:47:
         11:b3:8b:ed:41:c2:18:57:60:6f:60:f5:4f:a2:d7:08:ca:19:
         84:0f:0e:1d:39:bd:c9:7f:b7:73:72:1c:94:60:98:07:bd:fe:
         e5:25:38:c5:22:b5:a8:be:32:a2:f0:d9:7b:3e:f0:fe:e5:6c:
         6e:fe:db:4c:1c:04:6a:6c:45:1b:bf:19:07:9b:8b:fd:0b:a2:
         03:d3:c5:31:fc:9d:6b:5d:bf:13:14:d8:e6:68:90:02:b2:8f:
         fc:01:6e:96:96:b3:fd:67:29:81:9a:0f:e9:94:15:45:22:f1:
         78:4e:1a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:17:24 2026 by rpki-client