Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa
File:                     41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa (raw, json)
Hash identifier:          wwRFNV5yAbkgVYSUavYgpFCKz6WLxRXLy5A1VbRvecs=
Subject key identifier:   44:A6:D4:9C:6E:EA:AF:35:A4:E7:4E:84:F7:F5:DD:AE:17:65:5A:E8
Certificate issuer:       /CN=749b2153-8fb9-49bc-b117-9e419bd6fddf
Certificate serial:       010D0C9F4328584EA7880DE9175E019B57DFEFC0
Authority key identifier: FB:4B:87:F3:B8:AF:6D:93:11:3A:0F:F6:B7:68:44:72:AC:49:BC:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     25737
IP address blocks:        23.162.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:0d:e9:17:5e:01:9b:57:df:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749b2153-8fb9-49bc-b117-9e419bd6fddf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=939c228c-3dcd-404e-860a-0841d72251dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9c:82:37:3a:9f:58:02:a8:b5:5f:c4:25:54:
                    1e:17:21:a9:88:cd:d7:40:52:e2:df:28:1b:9b:89:
                    d0:ff:68:7c:37:c0:00:40:07:38:24:25:e8:0d:1e:
                    60:b3:8b:44:21:a9:33:0b:15:e0:77:ec:5d:36:60:
                    71:fe:d0:18:42:82:b9:f9:4c:4c:47:fd:c1:b3:c0:
                    71:14:9e:89:a8:38:e0:61:eb:d3:3f:44:1b:14:35:
                    36:99:0b:ef:48:37:b1:f5:27:ce:0d:67:ae:d7:f5:
                    6f:1e:fe:68:e3:39:d7:2d:c3:b8:18:00:f9:8c:1c:
                    48:11:c7:4a:9d:72:62:88:a1:83:76:84:8e:f7:5b:
                    0c:ba:97:4c:ed:15:24:49:cc:8c:40:5d:9f:db:a1:
                    07:17:65:d5:ed:33:ca:1d:b3:8a:18:14:52:6a:30:
                    86:d1:19:31:69:04:56:04:52:43:55:d5:49:4b:40:
                    1e:66:cd:48:b0:73:c7:e5:5d:c8:d9:8f:fc:50:2b:
                    43:2f:6c:5e:fa:72:37:e9:52:59:6b:a9:c6:13:0b:
                    69:e8:a8:8b:3f:f1:97:46:d7:78:3c:20:91:89:97:
                    fe:e9:5f:30:29:b2:50:a6:f6:6f:17:53:c5:bc:8b:
                    eb:f8:fe:a6:52:b2:ac:4b:77:1d:56:3d:ce:e1:b7:
                    71:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A6:D4:9C:6E:EA:AF:35:A4:E7:4E:84:F7:F5:DD:AE:17:65:5A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/41eb4b95-9e8d-369b-b8fe-2cb0367ef7f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf/749b2153-8fb9-49bc-b117-9e419bd6fddf.crl

            X509v3 Authority Key Identifier:
                keyid:FB:4B:87:F3:B8:AF:6D:93:11:3A:0F:F6:B7:68:44:72:AC:49:BC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/749b2153-8fb9-49bc-b117-9e419bd6fddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:31:60:aa:15:b5:11:d4:5e:22:09:de:da:97:58:6d:42:82:
         db:78:65:44:71:e4:ef:fa:7a:7d:d5:1f:2a:58:19:05:b8:fe:
         3f:36:ef:96:53:c5:1f:10:5c:ea:6c:56:88:68:20:3c:bc:5d:
         92:ca:b1:0f:b4:ce:76:0a:6a:1f:4d:24:34:78:22:ab:ba:b5:
         b3:9d:b3:be:fe:45:c1:9b:b1:b9:c3:c0:97:e5:58:23:aa:ad:
         2c:7a:e4:b3:24:40:bc:a5:6a:9a:e6:93:e2:57:7d:e1:31:37:
         7c:b4:a0:58:b8:42:f6:0a:53:11:57:f6:35:53:5b:22:cf:bb:
         e3:2f:55:59:e7:cb:10:ca:b5:cf:c7:bf:6e:19:c4:ec:e6:13:
         c7:01:03:b5:1b:4d:bb:b5:c2:96:82:29:f7:c9:25:db:62:4d:
         60:7a:85:60:09:0e:cb:ed:64:b7:81:cb:32:f7:94:c8:64:e3:
         09:47:a9:c8:84:e1:9a:78:57:ac:1a:80:91:fa:29:b6:78:5d:
         e3:d7:d0:66:c4:2f:e0:8d:fe:08:60:e3:74:74:95:6b:6f:8c:
         fa:65:a4:23:0c:d6:09:da:65:8a:28:c6:ab:e9:ef:2e:32:44:
         57:9c:5a:a9:fe:a0:ca:b2:7d:70:4f:75:96:be:5a:3c:89:d8:
         b0:bd:61:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:31:50 2026 by rpki-client