Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/d6e1721b-615d-3192-86d5-7b54114d4581.roa
File:                     d6e1721b-615d-3192-86d5-7b54114d4581.roa (raw, json)
Hash identifier:          DY/NjsDxDDtp9ddiZbO6jL1XHJgLklKXJZVrGynjdc8=
Subject key identifier:   C9:EF:8E:32:45:B9:C3:2F:97:8B:13:95:99:73:1B:63:31:85:C5:72
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584EF28261784DCDC534F6FE2AF0
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/d6e1721b-615d-3192-86d5-7b54114d4581.roa
Signing time:             Mon 24 Aug 2026 21:36:50 +0000
ROA not before:           Mon 24 Aug 2026 21:36:50 +0000
ROA not after:            Tue 27 Oct 2026 00:27:47 +0000
asID:                     174
IP address blocks:        23.227.92.0/22 maxlen: 24
                          23.234.144.0/22 maxlen: 24
                          107.166.24.0/22 maxlen: 24
                          107.166.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f2:82:61:78:4d:cd:c5:34:f6:fe:2a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Aug 24 21:36:50 2026 GMT
            Not After : Oct 27 00:27:47 2026 GMT
        Subject: CN=866f2029-c1d7-4189-8d9d-b7559ed0ccbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:60:0b:df:c4:85:1e:98:e7:25:ef:08:bf:d2:
                    18:c9:9b:ed:9e:ee:9f:45:e0:14:4d:54:a4:fa:ad:
                    0c:95:ee:5a:80:40:9c:3a:eb:40:22:21:56:e5:96:
                    07:6b:ba:b8:26:4c:1a:7a:3b:ec:ad:4f:0f:eb:e9:
                    ec:2c:04:53:3c:bd:ea:65:30:81:d3:23:de:60:9f:
                    25:bc:ba:4a:97:4b:51:84:88:06:de:4d:0b:31:07:
                    cf:00:42:61:55:20:ef:fb:4f:24:97:01:ca:f5:be:
                    ad:b1:a7:c7:fd:e4:8c:5e:01:ad:12:90:fa:16:2d:
                    b2:8c:93:e3:66:92:c1:91:e9:aa:d5:51:00:40:40:
                    68:a8:b1:86:58:26:7b:79:6f:26:92:0a:c1:e5:a2:
                    0d:c3:e9:97:0d:da:dc:7d:3e:aa:9c:74:42:dd:76:
                    11:d0:2f:6d:fa:bd:8a:cf:00:25:51:7f:b7:5e:97:
                    46:15:34:63:c9:72:46:c5:54:87:7e:37:4c:6c:47:
                    3e:96:91:8a:75:3f:0d:09:3c:b3:da:58:05:d0:2a:
                    5e:4b:d5:1d:f9:c6:01:33:2a:9d:2e:88:46:ec:68:
                    91:df:da:88:f4:d3:fe:92:d6:c0:5a:41:56:a0:e6:
                    11:e4:1d:26:71:ac:ac:1c:c4:03:d8:67:15:93:2f:
                    ef:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EF:8E:32:45:B9:C3:2F:97:8B:13:95:99:73:1B:63:31:85:C5:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/d6e1721b-615d-3192-86d5-7b54114d4581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.92.0/22
                  23.234.144.0/22
                  107.166.24.0/22
                  107.166.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ce:48:59:bf:71:27:a1:17:92:6e:4d:46:35:c8:6b:37:e3:
         1f:c7:0c:8e:04:b2:5b:7e:83:61:75:7e:0e:3e:16:b3:06:c5:
         ef:bb:88:2f:95:75:82:69:72:95:46:5e:8c:57:c7:3f:57:49:
         84:04:ef:66:f7:2f:d3:32:00:c1:fa:91:11:43:86:c7:fa:a5:
         24:3b:f8:6e:2a:fb:ed:3d:72:52:a0:f7:da:a6:e5:d5:66:39:
         b0:b5:c0:ef:e3:a0:11:2d:3c:e6:eb:fc:93:0d:da:65:76:a4:
         fb:3f:e6:d7:24:64:ad:43:be:f0:0f:d1:a9:b7:3c:98:10:dd:
         5b:03:64:ce:01:06:72:32:04:a8:6f:f9:f4:23:83:5c:99:b0:
         d3:44:d4:36:32:29:af:87:fc:ac:d3:c6:7d:56:6d:4f:2e:61:
         18:cc:65:18:bc:3f:73:ef:d8:73:bf:2d:59:0d:88:24:ff:06:
         9c:42:67:e6:f1:98:ec:b3:3e:7c:3a:21:c1:f5:56:7d:ad:28:
         0b:39:76:90:e6:a9:18:fd:8b:34:1d:4f:21:ed:d2:b7:ae:bf:
         5a:fe:13:ca:20:f2:63:c9:a1:4e:54:ee:84:85:bf:83:ce:dd:
         75:b9:e4:2b:2b:31:ec:0b:c8:67:3d:e4:04:5d:27:a0:60:0e:
         48:b5:1f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 07:56:53 2026 by rpki-client