Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/fa748556-faf0-30b0-a6b7-1631ab2d0769.roa
File:                     fa748556-faf0-30b0-a6b7-1631ab2d0769.roa (raw, json)
Hash identifier:          oxaNxd31+JBAv7Ev0uDLkb4BflefLIG4aEhtOb5yoiY=
Subject key identifier:   03:63:D6:BA:64:67:40:3D:66:B2:65:0C:37:00:20:9B:B4:65:58:EA
Certificate issuer:       /CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7
Certificate serial:       010D0C9F4328584F2957C794F9FB018F2EFED840
Authority key identifier: 1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/fa748556-faf0-30b0-a6b7-1631ab2d0769.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     214483
IP address blocks:        23.131.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:c7:94:f9:fb:01:8f:2e:fe:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=fc44a985-b166-444d-8fcf-cf294962150f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d7:1d:7b:7e:83:a5:a2:ef:97:00:f7:38:76:
                    72:e5:8f:1b:79:e0:b5:4c:d0:f1:b3:13:5a:32:5a:
                    18:57:fc:d8:64:6c:3d:0f:62:d7:bd:cf:62:cf:ab:
                    cb:24:5d:64:7f:fe:1c:9a:43:a2:da:ef:12:28:b6:
                    58:6f:ed:71:d1:31:76:79:06:c6:70:3e:bf:92:09:
                    2d:fe:b3:b5:48:92:5a:96:c8:ea:fc:2d:48:4b:57:
                    17:49:1e:82:ab:bb:13:a0:6e:ef:eb:d3:27:62:79:
                    01:b1:7e:61:f2:0d:b9:38:4d:fd:28:d4:24:ee:d0:
                    8e:9f:3c:a1:b5:c1:53:d4:15:3c:46:7c:6b:4d:5e:
                    3b:a5:73:6c:c5:c4:11:82:4e:60:e0:7c:af:8f:ae:
                    3d:2c:c1:46:a7:e5:d8:bb:39:e3:65:ed:b7:62:41:
                    2a:54:87:dc:be:3c:61:4f:24:1e:4e:2f:98:89:93:
                    e4:89:95:e4:18:9e:3e:08:7e:ff:10:51:36:8a:9b:
                    07:83:8e:ea:4c:e7:42:b3:03:45:8d:e5:8d:78:5e:
                    90:58:46:a3:4f:db:db:99:e5:f1:95:72:94:8a:41:
                    33:1b:c0:c6:39:f6:f7:95:aa:99:e5:41:fd:47:9d:
                    75:d8:9b:dd:5b:7a:db:1a:1a:6c:56:0d:46:31:a9:
                    c4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:63:D6:BA:64:67:40:3D:66:B2:65:0C:37:00:20:9B:B4:65:58:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/fa748556-faf0-30b0-a6b7-1631ab2d0769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C1:30:50:A3:52:2D:3C:9C:17:AD:6C:F0:EE:55:82:42:33:93:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7bba0e0-fb7b-49e5-bcf8-5494a1f4cde7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.131.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:e3:e7:ad:c6:13:7b:29:41:23:99:98:c6:0f:e9:a6:8e:42:
         37:a8:3f:bf:a0:ac:49:93:b7:7f:ac:60:ec:b8:3e:96:34:7c:
         06:8b:3f:26:ab:16:3c:7b:6c:32:99:ad:48:9f:67:80:3e:ce:
         85:a2:d0:3b:c6:b9:7d:10:74:ac:8a:0d:ac:7f:de:fd:d5:a3:
         01:c1:4e:9c:2c:4d:39:6b:ce:5e:4b:da:31:c4:85:41:80:df:
         0d:91:48:97:6c:d3:ff:96:f0:9c:02:56:aa:4b:6c:1a:be:b2:
         92:cf:fe:0b:95:c8:6a:a9:11:b8:6f:be:5a:34:18:db:20:4e:
         57:fb:05:04:93:07:a0:07:6d:6a:fd:69:73:63:16:1c:6a:c3:
         e7:f3:dc:d1:c6:8a:d5:5e:d9:12:05:d0:02:fd:75:ba:2e:b5:
         1c:78:65:62:ef:08:f8:cd:c5:18:6a:3b:41:47:7d:e0:60:d6:
         d5:8d:85:24:4a:98:a0:e8:3d:96:69:5c:a6:df:b4:56:a4:71:
         83:68:dd:7c:a3:db:c0:7f:26:9e:92:c0:50:64:05:99:82:40:
         9d:bf:9b:f9:48:91:b9:23:fa:e9:67:71:af:05:fe:b3:95:d9:
         af:0e:d5:ff:78:78:a9:a3:76:95:eb:1e:5d:63:5a:06:b4:e4:
         86:53:67:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:33:01 2026 by rpki-client