Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/e3897077-3244-38c8-8022-d843cdb96403.roa
File:                     e3897077-3244-38c8-8022-d843cdb96403.roa (raw, json)
Hash identifier:          EOa9PDfcv6ZUzYSAT0btyU7wYoTpOx7qYUW1PJwhN28=
Subject key identifier:   B8:5F:87:B8:36:F3:FE:E2:F0:7D:9B:10:1E:5C:75:85:60:FF:1D:D2
Certificate issuer:       /CN=7c313e39-91f1-41fc-bc5c-d213a429e287
Certificate serial:       010D0C9F4328584EA78810A9D9E71D4CE708B680
Authority key identifier: 7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/e3897077-3244-38c8-8022-d843cdb96403.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     396865
IP address blocks:        23.144.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:10:a9:d9:e7:1d:4c:e7:08:b6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c313e39-91f1-41fc-bc5c-d213a429e287
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=f1d0e787-5870-452e-a489-d80040a7df0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:04:ee:50:25:8f:04:6c:43:d9:dc:87:70:c6:
                    4f:8a:d8:b4:80:e7:29:06:d2:51:18:a8:f0:ab:32:
                    ff:6f:cf:2c:aa:a4:9f:ab:8a:39:34:de:10:b7:d9:
                    be:6d:d8:69:86:1a:ec:7e:55:3d:f0:c5:b0:e7:ff:
                    91:b0:60:29:84:be:b0:4d:d1:3f:fd:ac:98:a9:ac:
                    cd:66:a9:ef:b3:a1:02:e1:34:0b:00:c5:9b:c0:e9:
                    79:cf:ca:7d:47:7e:a9:1d:00:c1:07:01:4c:2d:ca:
                    2e:0c:ca:21:68:be:17:9a:cf:bf:02:1e:87:3e:d8:
                    32:bf:67:d7:77:ae:1b:1e:07:83:76:ef:8d:ad:ce:
                    c5:16:76:e2:33:ae:c4:8e:28:e1:73:3a:60:fd:67:
                    6f:33:78:3f:a1:6c:18:c3:b4:b1:ee:ae:1f:15:7e:
                    d8:37:bf:6d:38:01:67:2e:bb:39:56:56:0c:1e:7e:
                    84:1b:31:92:5b:3b:cf:d0:81:46:07:38:f1:1f:68:
                    40:de:e0:7d:25:d6:a3:dc:86:b2:a3:f6:66:87:3f:
                    95:dc:8a:83:b7:a4:d5:6e:69:a3:4e:84:d1:3f:ad:
                    86:38:46:01:a1:4e:13:72:e7:6a:86:ac:7d:66:7e:
                    a1:d1:cc:84:da:b7:97:2e:66:4f:25:5e:bc:58:48:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:5F:87:B8:36:F3:FE:E2:F0:7D:9B:10:1E:5C:75:85:60:FF:1D:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/e3897077-3244-38c8-8022-d843cdb96403.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287/7c313e39-91f1-41fc-bc5c-d213a429e287.crl

            X509v3 Authority Key Identifier:
                keyid:7D:97:39:68:D8:16:C7:26:14:7E:9A:B9:25:05:92:E9:5D:3B:14:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7c313e39-91f1-41fc-bc5c-d213a429e287.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:0e:5f:c1:88:6d:2b:ae:d6:bd:ac:09:68:6c:6c:f0:73:de:
         14:3b:02:1b:46:e4:48:8d:69:4d:72:b2:24:93:85:e6:67:b5:
         d8:14:e4:b5:81:df:ca:f7:5f:c4:ca:7a:5e:1b:97:87:ac:ab:
         a9:f2:0e:18:77:ad:33:97:c5:e2:e2:26:55:38:e8:11:a9:52:
         14:5a:e3:f5:21:86:2e:96:b1:1b:d9:79:59:bf:b2:7f:bd:f3:
         e2:cd:9c:9a:dd:d4:26:b0:a5:84:15:dc:76:1c:6f:bb:68:63:
         ce:58:3f:87:a6:49:0c:15:56:22:07:14:d2:a1:84:b7:b7:e9:
         41:11:11:69:13:a7:ad:7b:0a:96:bb:e5:fd:49:99:a6:52:58:
         2d:e3:d5:1a:d5:88:1c:4b:a4:a7:22:f6:f7:f2:3b:6e:35:d9:
         ac:b9:ee:ba:29:08:e7:e9:35:5d:41:c7:bb:78:59:6c:59:03:
         4f:12:f7:74:3a:23:02:64:cd:c0:30:f9:45:6a:20:40:29:4f:
         df:b9:ad:c9:86:2b:26:f1:23:f8:cc:e2:8a:97:35:0d:69:0b:
         7d:3c:84:42:9f:12:a3:99:fd:e8:e8:70:43:38:b5:22:c5:6d:
         8c:11:04:2b:03:a7:c5:73:d5:38:d9:d9:09:b7:29:e9:25:9c:
         2d:a5:39:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:23:31 2026 by rpki-client