Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c141b17-8c2d-4240-9e2a-ab1a5e19d007/8736efb0-fb9e-37c0-a866-5299951c0b6b.roa
File:                     8736efb0-fb9e-37c0-a866-5299951c0b6b.roa (raw, json)
Hash identifier:          KwppsI+sPghp+y+E/9ELAE9f+x1U9kfS+3kgoTuSlvo=
Subject key identifier:   F7:75:91:77:37:55:3B:2A:6A:C7:46:9E:D8:37:A7:6F:5D:15:B0:C3
Certificate issuer:       /CN=6c141b17-8c2d-4240-9e2a-ab1a5e19d007
Certificate serial:       010D0C9F4328584EA794E66B24163ABB09667560
Authority key identifier: 47:8E:68:12:14:E5:EC:DF:FC:1E:97:B8:3C:62:58:C3:6F:00:6E:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c141b17-8c2d-4240-9e2a-ab1a5e19d007.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c141b17-8c2d-4240-9e2a-ab1a5e19d007/8736efb0-fb9e-37c0-a866-5299951c0b6b.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     394656
IP address blocks:        23.184.0.0/24 maxlen: 24
                          66.85.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c141b17-8c2d-4240-9e2a-ab1a5e19d007/6c141b17-8c2d-4240-9e2a-ab1a5e19d007.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c141b17-8c2d-4240-9e2a-ab1a5e19d007/6c141b17-8c2d-4240-9e2a-ab1a5e19d007.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c141b17-8c2d-4240-9e2a-ab1a5e19d007.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:e6:6b:24:16:3a:bb:09:66:75:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c141b17-8c2d-4240-9e2a-ab1a5e19d007
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=003f438c-6e5b-440c-91c8-3c1d68de0f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b5:1e:b9:80:02:79:99:15:77:00:db:93:af:
                    98:a5:94:9e:35:98:cb:de:1d:8c:7e:f7:c8:8e:b9:
                    4d:28:87:7b:d3:87:80:fb:0f:a2:b1:13:ec:40:f8:
                    06:1e:17:3a:55:09:a4:bf:85:a9:8e:5d:9d:9a:21:
                    6f:02:3d:c7:34:cf:1b:e7:17:1f:a0:f7:8c:69:cc:
                    65:63:e7:04:9e:2e:6c:d0:ee:94:b2:b6:83:97:23:
                    09:2c:9c:6c:5f:04:75:ec:8b:f5:c3:9b:d9:7f:b8:
                    82:93:23:30:5c:41:ad:69:f6:c5:05:11:df:fa:49:
                    08:dd:ba:e5:fd:8f:11:7e:09:e2:90:9d:d1:cc:27:
                    5a:09:87:8d:3d:4f:eb:66:e0:5d:19:49:07:8e:51:
                    65:b8:d1:8e:a8:c7:10:e5:29:2f:15:b4:38:ec:3c:
                    32:18:64:4a:b4:f2:3c:3d:b9:58:84:fa:71:10:fa:
                    e8:dc:50:2e:ba:36:51:5b:90:69:9e:0c:21:92:ce:
                    fb:2d:2b:24:10:84:a6:97:91:86:e8:af:35:be:e2:
                    d3:5a:9f:af:49:eb:a6:97:d5:c6:53:c0:b6:20:68:
                    75:9d:11:2e:c1:57:c7:11:25:c3:b9:90:bd:8d:5e:
                    75:5d:f1:3c:92:67:f9:cf:e0:5c:65:f8:d0:51:61:
                    68:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:75:91:77:37:55:3B:2A:6A:C7:46:9E:D8:37:A7:6F:5D:15:B0:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c141b17-8c2d-4240-9e2a-ab1a5e19d007/8736efb0-fb9e-37c0-a866-5299951c0b6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c141b17-8c2d-4240-9e2a-ab1a5e19d007/6c141b17-8c2d-4240-9e2a-ab1a5e19d007.crl

            X509v3 Authority Key Identifier:
                keyid:47:8E:68:12:14:E5:EC:DF:FC:1E:97:B8:3C:62:58:C3:6F:00:6E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6c141b17-8c2d-4240-9e2a-ab1a5e19d007.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.184.0.0/24
                  66.85.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:98:79:e8:82:2c:f4:a4:86:ee:8d:13:b2:5f:93:43:9b:d3:
         66:89:9a:70:f4:13:16:2e:19:82:a5:30:d6:4e:d0:0d:16:17:
         bc:21:33:81:0c:a6:1d:42:dc:a5:05:62:25:57:73:bf:f4:87:
         3c:aa:19:7c:c8:a0:2e:ec:d0:31:e5:fe:2b:39:db:c8:ce:e0:
         47:5e:24:24:c3:91:df:3d:e5:30:78:37:96:60:c8:56:83:e4:
         6a:ca:ed:e9:d1:bd:00:71:95:f4:20:0a:25:7e:5c:99:1c:91:
         b8:c8:08:aa:27:ab:39:0c:db:b7:c2:7f:28:0f:d0:64:db:3c:
         42:6b:a1:1c:f4:2c:e2:ce:22:ee:3d:47:04:4f:ef:19:18:4a:
         98:2b:4a:a9:e0:df:90:3a:67:59:ab:82:3c:39:be:1e:a8:ed:
         e1:e7:f8:f4:31:09:46:0c:e5:be:dc:87:db:b3:ee:24:6f:27:
         87:92:b2:91:2c:68:c1:76:03:5f:22:18:cb:d3:8d:8e:34:50:
         dc:5e:c7:d0:92:de:02:04:da:34:4d:57:a6:c6:e0:79:94:f3:
         5a:2f:fb:31:b0:52:92:16:76:a9:98:76:57:55:3a:cb:bc:3a:
         6a:4c:8c:17:5f:82:63:84:9b:09:83:19:fe:be:23:f8:1d:d6:
         b8:d9:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:10:12 2026 by rpki-client