Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/8e87b93f-f077-3393-9870-dbc62c961c83.roa
File:                     8e87b93f-f077-3393-9870-dbc62c961c83.roa (raw, json)
Hash identifier:          R2uGUpL++UXGKzuYFyPfwLihkagIDzwVTIM1TgHLqac=
Subject key identifier:   02:4C:91:1E:54:AF:8D:93:F2:DB:36:67:70:28:F2:E9:62:8A:EC:00
Certificate issuer:       /CN=cb00fdf5-e28b-4e9d-9620-9504972438e2
Certificate serial:       010D0C9F4328584F4F080F5A89F567084D499300
Authority key identifier: 49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/8e87b93f-f077-3393-9870-dbc62c961c83.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     54004
IP address blocks:        23.141.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:0f:5a:89:f5:67:08:4d:49:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb00fdf5-e28b-4e9d-9620-9504972438e2
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=01523535-2acd-47a2-b67e-613e6273fb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:92:98:c5:6b:8b:5a:6b:12:62:fb:9c:33:
                    10:14:1b:74:c9:43:bf:ab:7b:55:19:46:8c:9e:fb:
                    3d:36:d7:5f:28:cf:6e:41:f6:da:5c:e3:66:62:97:
                    5f:64:92:bc:ea:f6:e6:6c:81:2a:51:fc:51:07:65:
                    c5:22:03:32:95:dc:71:21:01:9b:65:5e:0f:b7:b3:
                    89:15:f3:d0:94:06:24:3f:ab:8b:0a:59:d4:08:57:
                    eb:81:89:dc:c9:f5:ae:a1:85:cf:a6:bf:8d:3c:a0:
                    ab:fb:05:9b:30:96:8c:ab:a0:db:49:87:12:95:1c:
                    bd:7c:a1:ca:95:5d:66:a1:59:a1:81:75:84:a0:48:
                    ca:8e:0f:06:8a:47:27:b2:57:73:5f:b3:c4:7b:49:
                    e6:58:1f:f3:f6:87:c1:8e:d1:ad:74:11:02:fc:21:
                    83:7b:2c:7e:19:fe:33:37:72:7f:e3:9a:9d:dd:a5:
                    f8:33:15:8e:e5:0b:2e:e5:d7:d8:f7:d6:b1:d7:b2:
                    28:a0:82:4a:7f:6d:67:73:8c:b9:be:4c:fa:83:ae:
                    01:f0:f6:28:45:02:20:1b:9a:28:fa:40:b4:d8:1d:
                    64:66:4d:e6:57:cf:c0:b5:cb:5c:7a:3f:d7:94:40:
                    62:46:4c:e9:ba:1c:cd:35:72:ad:a2:83:02:98:98:
                    b5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4C:91:1E:54:AF:8D:93:F2:DB:36:67:70:28:F2:E9:62:8A:EC:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/8e87b93f-f077-3393-9870-dbc62c961c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl

            X509v3 Authority Key Identifier:
                keyid:49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:9d:03:24:88:e1:f4:29:eb:88:e9:ea:8f:59:83:4e:bf:b5:
         ab:63:f2:58:c3:87:60:6a:53:bd:1a:d8:82:e9:43:cc:10:42:
         b5:94:63:fd:84:eb:32:4d:da:33:32:f2:84:15:93:af:39:96:
         83:84:b8:d5:09:46:6e:c3:7d:0b:8a:73:60:3d:50:98:20:7f:
         dd:72:d5:41:6d:40:d8:bd:b4:a8:b5:c3:b8:01:51:a2:bf:50:
         4d:2e:43:36:c7:de:17:b2:b1:1b:93:e6:3e:e7:4a:20:83:b5:
         33:b1:ce:fd:4e:53:6d:5c:74:a9:8b:55:d9:b8:e3:33:ed:23:
         c5:a6:a3:d0:5d:d4:c3:e5:11:de:98:f9:e8:fc:66:4f:56:52:
         71:77:3a:dc:fb:78:d9:2c:a9:13:5a:f6:68:e2:d4:47:0c:d6:
         b9:82:b3:0d:fb:3c:a1:cb:78:d7:1b:a1:31:91:6e:eb:2b:b9:
         ce:6a:24:50:54:8d:6d:59:1c:af:3e:93:ec:44:35:55:86:d3:
         e6:2b:6f:a8:9b:bc:bc:1b:24:c0:d3:de:3e:54:ee:a0:2c:af:
         28:6e:5b:12:7e:be:ad:f4:f5:0b:9f:a2:d0:5b:56:19:66:f6:
         81:de:d6:03:70:57:cd:ab:27:bb:02:40:dc:8e:7d:85:58:f5:
         20:e4:3c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:24:59 2026 by rpki-client