Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/aa7bcc79-f2df-351b-8ebb-d645c7ade989.roa
File:                     aa7bcc79-f2df-351b-8ebb-d645c7ade989.roa (raw, json)
Hash identifier:          R19SrhBsrRjs7ml9LfGnqw11UvCzVeuOVvHko8xn9lE=
Subject key identifier:   99:1D:C0:5D:61:F0:98:E8:4C:E6:DE:A7:D0:BA:8D:C0:FE:AA:7D:C6
Certificate issuer:       /CN=cf287819-e56f-4dbd-8904-66671e2f705d
Certificate serial:       010D0C9F4328584EF87CE334784BE46AFDE28540
Authority key identifier: 29:96:91:4F:62:C8:10:AF:B0:DF:ED:F5:E9:62:B2:2C:9B:88:1A:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/aa7bcc79-f2df-351b-8ebb-d645c7ade989.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     63023
IP address blocks:        23.139.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/cf287819-e56f-4dbd-8904-66671e2f705d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/cf287819-e56f-4dbd-8904-66671e2f705d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:e3:34:78:4b:e4:6a:fd:e2:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf287819-e56f-4dbd-8904-66671e2f705d
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=1e8e3810-3459-4808-90fa-503ecc83a72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:73:45:e9:25:90:d6:45:fc:7c:e4:73:ff:24:
                    00:cc:c1:d0:9c:0f:e9:e5:ca:99:6d:d9:0f:bb:72:
                    41:d1:e6:16:3a:1b:82:76:c0:54:d1:74:28:99:04:
                    9e:0b:3e:fb:de:1f:37:71:12:7e:a1:d8:09:ed:35:
                    d3:98:1e:d4:f5:49:8c:cc:f5:47:27:86:31:b5:71:
                    17:9b:e4:25:50:a1:22:66:37:79:5a:13:a9:b0:8e:
                    8e:cd:62:62:08:0b:4f:02:bb:7e:11:d5:fd:56:45:
                    ae:67:73:34:c1:5d:21:2a:b1:2e:49:a9:33:30:f9:
                    e7:25:7c:bc:55:12:f2:1a:fd:77:b1:9a:10:09:d7:
                    04:52:89:6c:62:da:07:ec:75:fb:83:58:03:82:a7:
                    b0:19:42:23:61:6f:e8:3f:87:1e:25:1b:33:5c:76:
                    a5:74:52:01:81:5c:87:7d:58:2a:cb:7e:5d:54:f2:
                    70:30:58:ee:94:7c:aa:e9:f2:66:65:02:52:03:73:
                    b0:8c:92:92:ca:bc:f3:50:c2:04:18:0d:d1:d2:3c:
                    ad:4e:6c:c3:7f:11:8d:00:40:c2:99:97:7d:92:b4:
                    f4:39:0c:05:dd:a0:19:72:79:f0:18:f1:cf:75:ee:
                    f5:d9:2b:8c:67:52:7c:62:85:a8:75:12:bc:a2:72:
                    74:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1D:C0:5D:61:F0:98:E8:4C:E6:DE:A7:D0:BA:8D:C0:FE:AA:7D:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/aa7bcc79-f2df-351b-8ebb-d645c7ade989.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d/cf287819-e56f-4dbd-8904-66671e2f705d.crl

            X509v3 Authority Key Identifier:
                keyid:29:96:91:4F:62:C8:10:AF:B0:DF:ED:F5:E9:62:B2:2C:9B:88:1A:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cf287819-e56f-4dbd-8904-66671e2f705d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:9a:49:fe:ed:a3:83:22:db:44:bc:21:96:29:75:07:dc:ae:
         e5:e2:09:63:89:55:ad:46:3f:40:39:3d:99:a8:f9:1a:6b:30:
         2a:41:78:71:96:0a:7b:29:7f:14:85:a6:1c:fe:94:ea:51:7a:
         c6:31:fb:73:df:09:73:47:93:f0:21:63:5e:0e:dc:2f:2b:c6:
         34:40:43:77:37:2b:b4:6d:b9:3b:53:ae:d6:20:4c:bd:db:ef:
         b8:6f:b2:ca:05:31:20:8d:09:0e:9d:a9:8a:3c:21:3d:b0:c7:
         77:a0:84:0a:c8:bf:de:e5:f3:81:3c:4c:95:b4:48:fd:19:24:
         6f:de:13:86:2a:20:ee:47:93:57:5d:5e:34:9d:7e:37:e5:7c:
         12:b1:f5:e0:1b:47:2c:6e:f4:81:95:06:eb:43:cd:1c:14:e4:
         25:60:68:bd:54:75:1b:a7:ea:99:db:64:cd:08:88:b5:fe:7b:
         b1:e8:b0:43:8e:a6:91:5d:55:04:64:4c:4e:01:1e:85:88:b5:
         d1:3c:6f:db:b4:55:d6:52:5f:7c:58:37:63:a6:08:dc:7a:8d:
         61:07:96:9c:e6:65:6e:c7:bd:45:dd:19:c9:80:ad:18:3e:79:
         c6:a6:4e:11:1d:83:cb:34:09:f1:b3:7f:f1:cb:87:19:17:b9:
         c5:4e:77:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:19:52 2026 by rpki-client