Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/38429b40-f245-3e9d-84c0-f352cab4b10d.roa
File:                     38429b40-f245-3e9d-84c0-f352cab4b10d.roa (raw, json)
Hash identifier:          TOuEcc2VH9NrnrSuPko8Nt9S40U4PRQyNm/Ul5uO1eo=
Subject key identifier:   BB:03:9C:DD:46:3E:26:B4:98:44:2F:9F:21:F6:BA:EF:8C:7B:77:FB
Certificate issuer:       /CN=492092dd-7457-4265-80ee-c447496a414c
Certificate serial:       010D0C9F4328584EA78769E4A6FC761485BFA1C0
Authority key identifier: E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/38429b40-f245-3e9d-84c0-f352cab4b10d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     1003
IP address blocks:        23.143.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:69:e4:a6:fc:76:14:85:bf:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=492092dd-7457-4265-80ee-c447496a414c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=4d2ae957-7575-46bd-b350-1382736840cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:15:bc:f1:e7:a6:ec:ed:5d:57:fb:57:22:66:
                    9b:ee:3f:25:60:ba:40:76:4d:78:23:c5:e6:77:94:
                    52:d1:ae:df:de:f0:32:ee:1a:49:35:55:49:62:32:
                    f6:94:4b:af:65:40:47:35:14:a0:3f:3b:ca:4d:21:
                    c3:2f:89:64:02:80:aa:71:ca:95:90:b7:07:83:62:
                    7c:7a:bc:f3:c2:b4:a5:be:02:38:b8:96:5b:6b:9d:
                    9e:ab:0a:d1:b5:1b:56:88:d7:a7:19:fb:ec:be:2a:
                    8a:2c:36:eb:00:c6:5d:d8:d2:24:f4:3e:c9:d2:be:
                    9b:03:bb:0c:ff:fe:bf:1e:e8:63:6f:8b:4b:d1:a7:
                    92:f8:ba:97:3a:bf:3e:a4:d1:a4:93:f5:13:92:b5:
                    24:78:59:cc:37:a4:9f:12:9c:78:31:b3:e4:c7:ac:
                    94:a6:7a:36:08:b3:09:a6:b2:f5:cb:6c:44:15:09:
                    46:31:ab:59:ee:ff:a1:f2:af:86:a7:70:49:f9:2b:
                    dd:99:9d:6c:4d:f5:bb:a0:d2:55:4b:ff:96:c3:57:
                    75:8f:a7:28:94:f4:36:3a:a4:81:f2:37:68:b7:e2:
                    6a:ae:dc:6e:02:43:2e:bd:af:4a:b7:19:a7:eb:93:
                    ae:49:a3:ef:c6:cc:d4:e2:05:cb:c2:df:7b:d6:f1:
                    47:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:03:9C:DD:46:3E:26:B4:98:44:2F:9F:21:F6:BA:EF:8C:7B:77:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/38429b40-f245-3e9d-84c0-f352cab4b10d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c/492092dd-7457-4265-80ee-c447496a414c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:69:F7:DB:81:66:7D:9D:CB:93:E9:EC:D1:71:7D:EB:3A:C5:0C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/492092dd-7457-4265-80ee-c447496a414c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:57:2a:e7:37:fc:0a:9c:b2:8d:87:d3:30:bb:e8:c5:d4:1f:
         a5:f4:96:0b:2c:ea:0a:65:0a:9c:2f:2c:00:6f:b7:9c:67:09:
         4b:4e:d4:df:51:e2:e2:e3:f0:2d:ad:22:0c:15:3d:26:96:12:
         0b:86:6c:6f:7e:80:b0:80:a7:f5:31:98:52:c3:91:88:d0:12:
         93:d6:b6:93:23:71:af:68:e1:2a:24:fa:46:5c:d4:1d:c6:ae:
         71:7b:cb:db:38:3e:e5:72:f7:8b:30:b2:d5:66:12:94:de:83:
         5f:56:7e:9f:b0:b4:87:af:11:c4:6f:2f:74:27:91:71:35:b0:
         49:74:07:78:6f:2e:c0:67:19:18:0b:a7:aa:01:a2:78:04:db:
         85:c4:36:23:ae:9c:84:ce:f8:46:ee:bf:4e:01:9d:a3:c3:93:
         d2:73:38:47:e8:e8:be:9a:09:c0:8c:f0:aa:a6:ab:6d:b1:23:
         46:01:91:52:5e:d5:c7:2c:93:f9:39:72:e6:75:25:16:58:d5:
         7d:92:78:14:c8:56:d2:f1:3f:71:20:be:e1:ea:a2:b5:e2:bc:
         6d:38:5d:07:22:8d:cc:b9:a9:e0:89:75:08:67:e3:35:e8:92:
         ae:0a:2a:97:02:4c:a4:5a:8e:a2:0a:af:05:cb:6e:cd:f9:2f:
         ec:74:d0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:33:24 2026 by rpki-client