Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/4d961e8d-bb3b-3f70-934d-1ea4c2184a3f.roa
File:                     4d961e8d-bb3b-3f70-934d-1ea4c2184a3f.roa (raw, json)
Hash identifier:          s/ViJjfccsX2xPEMQeOWJzOay5Ibk49ZRvo5xQ+lUWk=
Subject key identifier:   68:82:A7:E5:FE:98:45:59:73:92:12:18:7C:4D:88:E4:B6:33:30:AF
Certificate issuer:       /CN=a6bf83f0-8367-4e3e-bd9f-59d247528cc0
Certificate serial:       010D0C9F4328584F1F92490010C3E7600434D5C0
Authority key identifier: 15:A8:25:57:DA:DA:4D:0D:7E:E5:42:0E:66:8C:7B:11:81:9A:9A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/4d961e8d-bb3b-3f70-934d-1ea4c2184a3f.roa
Signing time:             Thu 10 Sep 2026 01:00:12 +0000
ROA not before:           Thu 10 Sep 2026 01:00:12 +0000
ROA not after:            Wed 09 Dec 2026 02:00:12 +0000
asID:                     53544
IP address blocks:        23.144.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1f:92:49:00:10:c3:e7:60:04:34:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6bf83f0-8367-4e3e-bd9f-59d247528cc0
        Validity
            Not Before: Sep 10 01:00:12 2026 GMT
            Not After : Dec  9 02:00:12 2026 GMT
        Subject: CN=6d772a9d-d83d-4428-ac99-93c586ff134f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:62:bb:7f:4f:1e:8b:a3:c9:1b:f2:39:ce:08:
                    ab:6c:54:2f:06:34:5c:6f:cb:90:de:15:ad:cc:d2:
                    8c:05:75:55:18:14:aa:31:75:b9:52:7b:7a:44:ea:
                    1b:b8:80:83:9e:21:4c:3b:0e:13:7c:dc:4c:2e:ff:
                    d1:6a:65:58:e9:e7:d3:52:3d:55:43:76:c9:6a:86:
                    39:f9:d5:9e:a8:e2:90:ab:5c:fb:5c:dd:cf:9e:4e:
                    f5:8e:d1:c3:9f:f0:87:e4:34:ac:13:9f:73:31:f5:
                    05:a5:bb:fe:54:8c:9a:0c:e5:01:fe:fd:34:93:99:
                    63:f3:ee:cd:04:72:78:2e:19:66:83:7e:6f:50:88:
                    a9:52:cb:6a:24:f2:40:c2:9c:c4:bb:3a:ee:89:d1:
                    45:94:bf:49:6a:12:20:76:75:75:4d:f0:89:3c:41:
                    50:43:75:80:06:da:02:f0:ab:d0:5c:94:b1:29:87:
                    49:77:c6:74:91:cb:ce:76:1e:57:a9:a4:16:71:46:
                    42:22:41:f6:20:40:c2:3b:6f:48:5c:15:ab:0d:e6:
                    5c:52:d2:28:8b:d5:5d:a9:22:f2:26:86:6f:36:61:
                    f8:38:fa:42:2e:68:db:2d:70:4d:7f:a9:51:05:28:
                    27:e4:0a:d7:0b:4a:86:e3:d4:24:ba:2d:dc:00:b6:
                    1a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:82:A7:E5:FE:98:45:59:73:92:12:18:7C:4D:88:E4:B6:33:30:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/4d961e8d-bb3b-3f70-934d-1ea4c2184a3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.crl

            X509v3 Authority Key Identifier:
                keyid:15:A8:25:57:DA:DA:4D:0D:7E:E5:42:0E:66:8C:7B:11:81:9A:9A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a6bf83f0-8367-4e3e-bd9f-59d247528cc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2c:a7:40:63:e6:6c:37:ad:32:79:bd:82:35:ed:bf:ce:89:
         ce:38:d6:30:c9:bc:6b:d8:a1:ee:5f:54:b2:26:8c:9a:62:2d:
         bf:6e:73:a7:af:0f:69:b6:6b:11:dc:8a:f5:87:d4:5d:46:94:
         3f:bb:40:51:81:13:a1:52:73:d0:6d:92:a5:c3:85:f7:5c:f1:
         6b:d4:9b:fd:28:c6:03:c4:48:c0:69:19:fb:7a:2d:6b:97:be:
         78:52:76:37:86:cd:93:fb:c2:3b:5b:65:b6:b6:03:4b:dd:70:
         49:c5:a0:6c:b8:bd:c1:d9:5c:63:56:3c:f1:eb:98:d1:4b:14:
         3c:ba:5d:c6:3a:53:64:ef:c6:b3:5a:a1:45:0f:b5:2e:13:2f:
         c3:bb:7d:6d:c9:05:1d:0c:53:83:91:0d:ad:5f:e7:aa:62:6f:
         17:a5:c7:01:59:b6:e6:a2:c4:bc:4b:94:8c:68:3f:b7:06:cc:
         0f:49:30:30:dc:39:bd:61:50:85:35:3e:1f:14:a6:a3:d9:68:
         0c:9f:3b:96:d9:c6:a4:10:ae:58:08:03:62:ec:01:df:ca:48:
         84:86:5d:b6:f5:61:94:1c:54:89:04:48:c0:74:ab:bc:cf:d0:
         6e:a4:63:0f:5b:f2:51:ab:d0:af:29:94:d4:9c:af:6c:5a:1f:
         36:82:bf:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:04:28 2026 by rpki-client