Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/a32f45b9-679b-350e-a7e8-9e4171046fd7.roa
File:                     a32f45b9-679b-350e-a7e8-9e4171046fd7.roa (raw, json)
Hash identifier:          1NbkElwqJW62vwTHPqVSQWoNfpZ3+dp4vFVj+rT0eZM=
Subject key identifier:   83:E0:5C:99:48:D4:94:94:1B:A7:8E:B6:68:1A:16:8C:F3:D7:8F:9B
Certificate issuer:       /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial:       010D0C9F4328584F331D1AF9393E1AB896E0F700
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/a32f45b9-679b-350e-a7e8-9e4171046fd7.roa
Signing time:             Thu 17 Sep 2026 01:00:11 +0000
ROA not before:           Thu 17 Sep 2026 01:00:11 +0000
ROA not after:            Wed 16 Dec 2026 02:00:11 +0000
asID:                     40833
IP address blocks:        170.149.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:33:1d:1a:f9:39:3e:1a:b8:96:e0:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
        Validity
            Not Before: Sep 17 01:00:11 2026 GMT
            Not After : Dec 16 02:00:11 2026 GMT
        Subject: CN=755e93f1-761b-49f7-aae4-577f82275c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:7a:2f:ee:74:f5:98:7b:c6:b3:7f:46:73:
                    74:04:04:8e:3c:41:b2:be:87:a7:08:db:9e:66:fe:
                    46:eb:6a:ae:4c:ff:23:47:57:64:a4:fe:bd:02:11:
                    ff:23:73:76:30:6e:d8:7c:de:ad:53:98:22:f8:ac:
                    62:d3:cc:7a:d3:e7:53:f0:35:76:47:6f:fe:14:17:
                    c6:8e:12:6b:a0:ff:1e:1a:a6:57:78:86:bd:eb:83:
                    d1:dd:45:25:7d:ad:1a:77:37:a3:4d:b6:e2:64:06:
                    37:c2:71:50:b4:42:a7:de:9f:b0:31:7d:34:24:d4:
                    98:89:54:b8:d5:0a:85:8c:09:ae:ac:dc:c9:70:6f:
                    25:e6:2f:10:68:8f:52:b8:81:ce:f3:ad:c5:5e:eb:
                    4c:24:46:d4:1c:54:67:bf:eb:7a:62:11:32:b3:61:
                    10:2b:4e:27:09:a8:b2:b9:3a:d0:d6:75:f3:3b:4e:
                    d5:9f:03:e8:53:08:fb:38:c6:cd:d8:ef:ce:87:a2:
                    95:8f:78:52:7e:cd:e6:8f:9a:c2:d8:16:c3:50:fd:
                    22:26:08:33:d8:11:2b:17:54:e6:8a:48:cb:48:8b:
                    5c:6f:59:70:71:48:b8:16:eb:81:aa:29:8c:d9:2f:
                    c8:8e:3e:3e:09:fc:82:dd:83:93:7d:f1:8e:c7:96:
                    58:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:E0:5C:99:48:D4:94:94:1B:A7:8E:B6:68:1A:16:8C:F3:D7:8F:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/a32f45b9-679b-350e-a7e8-9e4171046fd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl

            X509v3 Authority Key Identifier:
                keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.149.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:4e:c7:17:28:aa:17:71:20:12:0a:07:0a:70:e1:0e:95:04:
         ba:37:a8:80:7f:95:84:5e:b9:62:8b:d9:85:56:8d:09:f9:3f:
         43:2d:fb:fd:e1:d1:a6:cf:53:0f:6e:66:2d:70:ce:c5:f9:fe:
         86:ce:98:a4:ed:d6:84:75:ca:6e:a9:fb:62:d2:0a:d0:82:5d:
         64:30:79:76:8b:5c:cb:8c:48:83:f2:7e:51:cb:bf:1e:e7:15:
         96:56:04:db:96:3f:65:28:b1:f2:fe:af:82:7f:28:76:76:a5:
         f3:f1:2d:87:e9:df:db:89:cd:95:f7:80:ed:bf:15:e9:e7:e3:
         b3:ec:0f:8f:6b:4f:34:cd:a4:d1:d7:0e:35:25:5a:11:93:c6:
         fb:c6:97:7d:45:4b:87:9c:29:e9:be:68:8c:4a:6e:fd:0c:22:
         cb:ab:bb:85:11:90:98:6c:6f:1f:6e:26:cc:42:62:87:e0:d1:
         1f:4d:f7:cc:9c:cd:b0:9d:f0:f3:1d:4d:6c:17:d4:6e:e2:7f:
         be:7f:14:ea:20:7e:6d:fd:eb:67:a9:de:9b:9e:bf:bc:e1:82:
         55:0d:b4:d7:88:c2:a4:b2:fa:5f:40:6f:33:e1:04:84:1b:9b:
         1d:e3:66:c4:53:af:97:f2:86:4e:e7:5d:d0:4a:58:43:24:33:
         41:b6:3e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:33:08 2026 by rpki-client