Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/f3805def-12ab-3eea-993c-463a8a73c36a.roa
File:                     f3805def-12ab-3eea-993c-463a8a73c36a.roa (raw, json)
Hash identifier:          LoeS3hufbUMhK+zRqCNWfaiuWFseMscSyLeXBCa1auo=
Subject key identifier:   8B:CB:32:DB:00:5E:4C:80:F1:8C:38:1C:85:14:FE:AD:9F:28:9E:6D
Certificate issuer:       /CN=a4607f8f-ba19-4447-a356-e3ec6823f923
Certificate serial:       010D0C9F4328584EB2B1C24044114E9560E0D680
Authority key identifier: 3D:96:7D:2C:26:DD:A2:17:5F:C9:83:33:0B:43:4A:AA:38:74:01:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/f3805def-12ab-3eea-993c-463a8a73c36a.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     400938
IP address blocks:        23.143.248.0/24 maxlen: 24
                          74.120.232.0/22 maxlen: 22
                          2602:fad1::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/a4607f8f-ba19-4447-a356-e3ec6823f923.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/a4607f8f-ba19-4447-a356-e3ec6823f923.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:c2:40:44:11:4e:95:60:e0:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4607f8f-ba19-4447-a356-e3ec6823f923
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=35d45c52-adfe-423a-8c9d-edaed9fe61b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:a0:08:7c:5f:41:63:2c:66:70:af:f8:c2:
                    06:dc:ee:36:11:61:4f:c5:de:48:74:ef:a2:65:77:
                    ff:16:ec:77:ff:37:5f:4e:4f:3c:7a:51:15:95:68:
                    65:a9:82:3a:ca:81:4e:56:ca:78:05:a1:65:e8:30:
                    69:d1:57:f4:0d:98:a5:b3:a2:ab:bd:58:08:fb:b1:
                    28:c0:5c:bc:89:ba:d5:f2:b2:0b:4e:a4:b7:0d:8f:
                    fc:21:54:76:12:d4:5e:27:f5:f7:ad:a6:4a:d0:51:
                    b5:01:25:18:5e:5d:2c:bf:3a:33:6b:5a:93:98:87:
                    88:97:a8:11:4a:1e:36:c3:70:c0:f9:a6:b2:b1:f5:
                    fb:82:38:82:40:f4:b3:f9:81:fa:20:27:93:c4:b2:
                    26:21:f0:a2:cc:26:66:3f:1a:63:cf:89:86:3f:89:
                    f3:d4:8e:94:e1:4c:6a:2d:fc:45:ef:37:9e:a2:a8:
                    90:3b:e8:d3:cb:f1:b9:1b:a8:b3:96:87:78:34:95:
                    67:c6:26:22:97:5e:73:de:04:fc:ad:55:0d:9c:e8:
                    69:16:da:3e:9a:7d:6b:3e:d1:f4:66:10:2d:fc:23:
                    00:fe:01:1c:9b:e5:68:ea:8a:d4:78:08:a1:f5:ab:
                    06:c0:b3:86:e3:77:d6:4a:d1:26:96:06:8a:4a:41:
                    9c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:CB:32:DB:00:5E:4C:80:F1:8C:38:1C:85:14:FE:AD:9F:28:9E:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/f3805def-12ab-3eea-993c-463a8a73c36a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923/a4607f8f-ba19-4447-a356-e3ec6823f923.crl

            X509v3 Authority Key Identifier:
                keyid:3D:96:7D:2C:26:DD:A2:17:5F:C9:83:33:0B:43:4A:AA:38:74:01:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a4607f8f-ba19-4447-a356-e3ec6823f923.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.248.0/24
                  74.120.232.0/22
                IPv6:
                  2602:fad1::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:40:48:9e:eb:35:fe:d5:92:b6:34:ad:c2:54:b2:88:63:0a:
         4b:c8:0d:08:1b:f9:e5:01:b8:1c:73:a2:9d:50:48:63:89:e9:
         99:3c:a8:ce:2f:b1:04:2e:cd:d3:3d:ce:6e:a7:10:91:be:1a:
         26:73:dc:92:a1:d1:ea:64:cb:d6:c5:0c:f9:b7:76:7b:f5:a1:
         c7:87:4f:c8:95:ef:68:29:cf:49:09:f1:c3:1e:5a:6e:61:7d:
         8e:c9:16:dd:37:4e:fb:5a:2d:5d:f7:a0:d7:49:7b:46:65:9f:
         cf:54:93:6a:66:1e:3e:6a:e0:92:7a:32:27:d5:d7:bd:f1:df:
         e4:9d:41:2e:51:04:11:6d:77:c7:81:42:ce:2b:a2:c6:f9:27:
         bb:7c:d1:08:f2:82:b9:ed:4e:c4:25:80:bc:bc:a4:74:21:37:
         4e:d3:06:c7:c9:61:46:2d:c0:94:70:03:a9:e4:d2:08:04:31:
         04:8f:bc:88:44:3d:8b:01:5a:a0:f2:94:06:31:86:a7:b1:56:
         b0:cf:6b:79:e3:e9:e0:78:d5:2a:96:eb:27:1c:55:c6:e3:13:
         42:6d:0a:2c:7f:f7:44:a0:bf:a8:fa:de:52:9f:b5:30:ea:8a:
         f3:fc:e2:9c:45:24:51:ef:6d:75:c4:8c:05:90:6f:7e:d8:bf:
         97:ed:9a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:19:28 2026 by rpki-client