Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/95fdf79c-6365-3f3e-a0b9-5d9066f23e82.roa
File:                     95fdf79c-6365-3f3e-a0b9-5d9066f23e82.roa (raw, json)
Hash identifier:          /DulmdlbYbJG/Nttj3XenZMtiLh0q/dZSiAjQESjdpI=
Subject key identifier:   1F:1B:E2:9A:2E:0E:16:B3:ED:85:33:6D:9C:AD:53:34:75:F0:31:90
Certificate issuer:       /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial:       010D0C9F4328584F331D2ED506D5467E69A27A40
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/95fdf79c-6365-3f3e-a0b9-5d9066f23e82.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     137857
IP address blocks:        170.149.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:2e:d5:06:d5:46:7e:69:a2:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=60c1ace4-c2b7-4505-8e31-00885fb622ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:28:9a:29:75:56:b1:78:d4:39:6e:20:cd:
                    f4:5a:fb:36:47:47:d1:b7:0e:39:e4:73:97:4d:c2:
                    e2:cb:99:6c:e8:b3:1f:2f:af:51:6f:6f:d9:b8:27:
                    cf:09:b8:e0:07:eb:56:2b:57:af:1f:d5:93:c8:e0:
                    31:10:88:d8:76:80:0a:14:d4:b6:89:fc:78:df:60:
                    b8:a4:a9:51:49:90:75:43:9c:a0:1f:f0:63:4b:c2:
                    97:5f:19:e4:97:24:eb:d3:2a:d5:b6:6b:24:24:ae:
                    50:cf:f8:3f:4b:e7:81:98:71:70:f1:ec:ad:65:99:
                    f1:23:af:ea:75:71:18:2d:a3:d2:68:51:19:60:56:
                    d5:1a:bc:f1:c5:10:fa:f3:ef:9e:a9:90:28:f7:10:
                    8e:a8:2d:2a:96:cf:49:e5:b4:36:84:4c:ff:3c:77:
                    48:44:44:f8:c8:f4:5e:81:58:41:18:2b:3c:3d:a2:
                    42:30:20:ed:c1:2c:1a:95:dd:ac:94:c8:6b:32:15:
                    08:9d:8c:e9:e3:2d:6a:ca:6a:58:8d:94:66:71:8f:
                    fc:d0:39:39:36:87:3d:33:0b:6c:cf:3e:d8:aa:18:
                    bb:66:be:6c:f9:2c:df:e0:fa:52:fa:26:f8:2c:0a:
                    49:19:77:5d:56:55:e3:c3:f6:ee:00:e8:b0:69:e1:
                    c9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1B:E2:9A:2E:0E:16:B3:ED:85:33:6D:9C:AD:53:34:75:F0:31:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/95fdf79c-6365-3f3e-a0b9-5d9066f23e82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl

            X509v3 Authority Key Identifier:
                keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.149.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:90:c3:f8:25:22:8e:b0:4e:79:e8:43:a7:68:ac:6a:4e:f1:
         db:6b:0b:2e:57:09:9d:ca:9f:ca:51:8b:54:cf:b4:90:48:17:
         6e:d9:5a:f1:29:ce:d5:96:d9:73:57:e9:e2:b0:db:4c:74:e2:
         3a:f4:9a:2a:a8:55:e4:e8:fc:b2:3a:b5:9a:26:73:4e:7b:ca:
         f8:51:dc:23:81:af:85:df:ce:60:aa:0d:06:89:8a:b6:b2:29:
         df:af:0f:15:67:24:bf:da:6b:39:92:cc:3e:1a:7d:96:1d:fe:
         d8:1f:4b:95:67:fe:7a:d0:ff:61:85:73:d7:f9:8f:34:ca:ba:
         20:a4:98:99:3a:07:9e:98:5e:a2:c3:89:4e:0b:ea:67:db:44:
         21:c3:c3:37:27:f3:29:ab:80:50:b2:5b:b8:ab:50:4c:1d:53:
         7f:b5:72:69:42:68:45:de:a1:07:17:ab:77:fd:08:18:41:f2:
         30:57:fa:08:c0:ea:80:75:6e:81:f6:32:38:c6:ce:52:0c:ba:
         ac:67:4b:3f:63:24:7d:0c:44:e7:92:c6:39:82:c9:af:09:07:
         0e:08:5c:dd:04:76:e6:52:ee:2d:64:fa:8e:ea:d0:c4:c5:0d:
         c4:f5:91:b5:c6:4f:d3:a0:e5:7e:66:2a:c3:ad:69:4d:dd:a7:
         25:a3:f9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:43:55 2026 by rpki-client