Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/5a0ed2e0-efb4-3b93-aa7b-ccaeb273dc2a.roa
File:                     5a0ed2e0-efb4-3b93-aa7b-ccaeb273dc2a.roa (raw, json)
Hash identifier:          r8Q746VHGwfr7P7CmO3z/3ZT0YLlMRidq7gU2yR6dIc=
Subject key identifier:   63:AD:72:D6:3D:11:15:D5:1C:11:92:B3:30:E5:C1:64:DA:B8:5E:8F
Certificate issuer:       /CN=a58fe14b-04a0-43bf-b9b8-f6564f858306
Certificate serial:       010D0C9F4328584F6F22DA121FA10340C672FA00
Authority key identifier: 68:90:F5:E8:05:4F:CA:75:7B:B7:17:12:88:17:D0:65:2D:46:41:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/5a0ed2e0-efb4-3b93-aa7b-ccaeb273dc2a.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     32639
IP address blocks:        23.130.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:da:12:1f:a1:03:40:c6:72:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a58fe14b-04a0-43bf-b9b8-f6564f858306
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=121dc20a-1947-41c4-95a9-8d1e23678571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:54:98:f0:f7:a6:98:7b:3d:cb:ec:03:ce:0f:
                    00:0a:05:fe:e3:c1:0f:0f:f1:d3:4d:8a:98:86:ee:
                    6b:e7:d5:b4:58:79:3b:e4:fc:93:c8:49:df:1e:01:
                    28:d5:0d:d4:cf:65:83:b4:ec:bc:95:5f:ae:93:6a:
                    95:0d:71:f7:79:4b:c1:50:a4:2b:c3:96:4e:3e:4d:
                    54:4e:cd:2e:dc:d0:fd:9c:2d:33:09:e5:66:80:08:
                    6d:be:98:14:e9:a3:66:85:68:07:13:41:14:a9:da:
                    fc:90:25:29:a5:36:ad:59:43:52:8d:bd:cd:ca:dd:
                    3f:cb:15:8e:32:d7:a0:67:63:11:99:48:7d:74:f5:
                    73:f5:8e:89:3c:0e:21:60:19:b2:20:8a:55:10:6f:
                    96:da:22:64:ba:d6:8d:70:6d:7f:25:9d:fe:b0:ee:
                    7a:16:a1:e3:d6:fc:5e:39:95:07:b9:b9:aa:44:4d:
                    25:66:8b:c4:48:68:6d:84:34:10:3d:52:1d:0b:22:
                    97:06:a4:d4:0c:8b:e0:be:47:0d:0d:5c:db:fd:64:
                    68:cf:09:cf:ef:79:d6:6a:4b:ec:d4:06:37:38:c8:
                    79:e4:61:a4:07:c7:be:d2:14:1d:af:33:a1:a6:79:
                    a9:7f:e4:e2:39:a7:30:32:98:76:9d:f4:d8:99:dc:
                    81:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AD:72:D6:3D:11:15:D5:1C:11:92:B3:30:E5:C1:64:DA:B8:5E:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/5a0ed2e0-efb4-3b93-aa7b-ccaeb273dc2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.crl

            X509v3 Authority Key Identifier:
                keyid:68:90:F5:E8:05:4F:CA:75:7B:B7:17:12:88:17:D0:65:2D:46:41:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:98:19:b0:3a:8e:ec:6e:e4:70:b0:34:01:1a:31:53:3c:c6:
         2a:cf:57:2d:9a:fa:b1:a5:6b:d1:87:cf:b9:d3:c0:25:0e:55:
         e9:60:c4:78:13:81:a0:c6:d4:16:d3:20:56:65:89:7f:a7:6b:
         4c:fc:6e:c6:58:e7:32:32:5d:2b:88:cb:85:92:89:d6:db:2f:
         69:e8:f3:fb:4e:b0:bd:ae:f2:af:49:22:92:97:5a:a1:f7:ae:
         2f:08:50:94:ad:5c:65:a4:94:7e:b9:a2:00:31:f4:2f:bb:d7:
         d9:26:49:37:32:0e:b9:96:5f:ef:67:f4:8e:d0:a2:66:14:85:
         cd:8d:2d:a7:59:5a:a3:98:f2:36:80:b1:da:98:da:fb:43:cf:
         e4:43:91:34:c9:dd:9b:d7:ed:a9:30:7d:f6:32:61:b7:f7:8e:
         06:da:a5:97:a2:47:67:06:03:0f:41:6b:87:b8:d8:4d:1f:a3:
         80:1b:0d:78:31:97:d2:6a:b3:e9:f6:0b:5a:23:c3:cb:87:f5:
         62:63:1d:61:a0:46:c4:23:75:a1:86:11:61:0f:6f:4a:98:a1:
         a6:de:6f:8d:4c:65:fb:8c:14:1d:94:25:52:ca:0b:64:98:32:
         c2:fe:cd:bc:90:61:5d:9b:2d:29:b2:16:f4:a0:99:27:af:90:
         ac:69:d3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:04:55 2026 by rpki-client