Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa
File:                     2997a217-d468-3059-978d-6d7d89969d6d.roa (raw, json)
Hash identifier:          M44a7XLOzTeviCjTVsA0YQL4lCu7W3IqV8WuhPTXZ88=
Subject key identifier:   E7:DE:55:96:55:F7:CD:B3:1F:21:C9:94:79:D0:3C:1B:40:DC:1E:94
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584EBDDC5FD62BB4DA68613973B0
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa
Signing time:             Thu 06 Aug 2026 01:00:12 +0000
ROA not before:           Thu 06 Aug 2026 01:00:12 +0000
ROA not after:            Wed 04 Nov 2026 02:00:12 +0000
asID:                     54905
IP address blocks:        23.234.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bd:dc:5f:d6:2b:b4:da:68:61:39:73:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Aug  6 01:00:12 2026 GMT
            Not After : Nov  4 02:00:12 2026 GMT
        Subject: CN=3dbd0748-8074-4211-adca-2fd2982e8ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:98:b9:f8:ad:8e:94:a2:6e:3e:1f:88:a4:
                    5f:f3:1f:99:b7:0d:31:1c:33:ff:56:70:34:43:02:
                    b5:e5:c3:f5:2e:3b:d6:30:e5:7b:e5:28:52:01:5a:
                    82:5a:a5:4d:e8:25:d4:8a:51:77:1b:1b:96:e2:1e:
                    35:2c:03:13:76:19:cf:69:cb:56:45:99:f8:90:74:
                    11:65:5b:92:03:41:4b:a6:24:cd:69:52:50:bd:90:
                    08:75:35:08:cf:a6:6c:ae:82:d4:17:2f:6b:79:be:
                    58:13:e3:52:f0:30:20:4f:1b:fc:fe:8a:6f:55:3b:
                    1f:c7:e2:d5:66:53:05:7a:6a:cc:43:66:02:97:e7:
                    31:b1:3f:84:3a:2b:3a:52:10:90:02:df:30:36:19:
                    70:f6:c1:ef:11:76:02:24:a9:6a:88:34:9a:08:09:
                    ab:dd:25:20:c0:5c:28:c7:92:7c:02:5c:75:3a:65:
                    59:f9:b5:f7:a4:09:17:92:e9:3b:2d:a4:22:17:c9:
                    cf:a6:f5:a4:8d:85:c6:ec:51:3e:26:2b:8d:28:6a:
                    2f:0b:db:9a:56:b0:e1:81:9f:8f:df:48:3e:5f:c9:
                    f0:08:2d:79:ab:33:1e:a2:3d:41:cf:54:1e:91:73:
                    26:19:4d:27:8b:a2:a2:ed:b5:a8:13:cc:36:52:09:
                    b5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DE:55:96:55:F7:CD:B3:1F:21:C9:94:79:D0:3C:1B:40:DC:1E:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/2997a217-d468-3059-978d-6d7d89969d6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.234.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:6c:2d:84:c7:c9:a0:ac:90:1c:fd:f7:24:81:7e:d1:df:b8:
         99:4b:50:e0:c5:be:69:c2:ef:fe:da:39:8c:f1:eb:8a:6a:c4:
         59:b4:33:cd:eb:1f:1f:b7:11:44:85:86:37:0e:f7:09:25:52:
         2f:80:8a:ac:20:e2:f7:a3:ae:b1:fa:99:2c:76:2b:a0:cd:8d:
         f7:36:a3:8b:93:48:8b:d2:5b:92:21:37:70:45:8a:0b:37:aa:
         df:be:24:34:5a:d1:c3:26:07:fd:ab:cb:bb:48:dc:aa:2b:90:
         5b:89:b6:ae:08:33:93:33:5b:dd:9c:df:ec:2c:ac:fb:e3:1a:
         aa:dd:99:f8:a4:b3:3e:f0:44:b0:9b:74:ab:f8:f4:f1:81:52:
         6a:c3:7a:f0:86:53:db:83:74:67:3e:84:0c:71:b4:28:41:a2:
         b4:f0:39:cb:2b:29:f7:04:e0:0f:68:e0:fd:05:d1:24:d2:d7:
         83:58:28:67:62:6d:35:73:c0:42:67:36:83:2f:91:85:7f:ae:
         b2:47:cb:e1:31:f1:c0:21:fd:cd:7b:1a:c6:4d:9c:47:df:fb:
         f8:86:8b:32:ac:e4:80:69:6f:b9:e4:b0:e7:f6:e3:eb:43:9f:
         5c:e1:76:21:d8:59:bd:34:54:48:f6:c5:c5:d3:ce:e5:51:8d:
         55:4e:f1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 01:04:42 2026 by rpki-client