Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/c7c3204e-e7d4-3aed-a808-92e98691f9de.roa
File:                     c7c3204e-e7d4-3aed-a808-92e98691f9de.roa (raw, json)
Hash identifier:          okupHs0SMbBQCW9AvvDM9FgpHIktKr4R3EvJ4zOvJW0=
Subject key identifier:   85:58:84:D1:F3:AA:07:BA:AC:38:C2:C2:A5:05:9E:5D:9A:16:E1:A9
Certificate issuer:       /CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9
Certificate serial:       010D0C9F4328584EED52215C2426099E18570300
Authority key identifier: 39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/c7c3204e-e7d4-3aed-a808-92e98691f9de.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     396982
IP address blocks:        168.235.225.0/24 maxlen: 24
                          168.235.226.0/24 maxlen: 24
                          168.235.227.0/24 maxlen: 24
                          168.235.228.0/24 maxlen: 24
                          168.235.229.0/24 maxlen: 24
                          168.235.230.0/24 maxlen: 24
                          168.235.231.0/24 maxlen: 24
                          168.235.232.0/24 maxlen: 24
                          168.235.233.0/24 maxlen: 24
                          168.235.235.0/24 maxlen: 24
                          168.235.236.0/24 maxlen: 24
                          168.235.237.0/24 maxlen: 24
                          168.235.238.0/24 maxlen: 24
                          168.235.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:21:5c:24:26:09:9e:18:57:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e407c8fd-b808-41d1-af5e-a88d2dd556f9
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=14ae6c1b-8e6d-42df-9c10-59600ae1977e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6f:cd:69:ae:5a:74:b8:76:d0:76:33:7f:83:
                    67:5b:3f:16:c8:7d:74:f2:75:bf:92:bb:78:2b:e5:
                    05:55:6d:75:59:03:95:62:6a:8d:68:96:6c:3f:5a:
                    29:6c:ee:04:85:3a:4c:fc:f7:c6:27:8a:63:c6:82:
                    1e:0a:fa:f7:31:08:e3:91:8f:0b:0f:00:e3:2a:39:
                    1f:bb:0e:a8:27:68:41:e9:39:e7:3e:90:22:3d:63:
                    c5:fe:c9:4e:4c:d9:2c:4b:84:c8:7b:48:8c:4f:04:
                    48:71:c9:7d:01:97:0a:7a:34:95:a0:a0:e5:36:e1:
                    63:e7:1e:f1:a0:07:8c:c2:9c:92:05:7f:e6:9c:5d:
                    d2:6e:96:5f:43:92:1a:8f:ce:7c:5e:34:8b:6f:1d:
                    0f:33:e5:02:e7:30:f1:92:f0:58:56:36:a6:70:a7:
                    68:8d:00:32:bd:c5:df:95:89:fb:3a:f3:6f:12:e6:
                    a8:a4:ee:65:77:1c:a9:5c:38:79:ea:4a:65:df:2d:
                    46:52:82:89:4e:1a:22:bf:16:16:56:7e:66:35:3d:
                    e5:6d:00:da:97:b7:8f:6b:81:21:f8:85:61:70:fa:
                    79:f7:27:f6:96:fe:0b:27:28:37:85:01:31:60:77:
                    2c:4c:94:b7:28:86:d0:21:61:e0:6b:a0:19:78:c9:
                    e2:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:58:84:D1:F3:AA:07:BA:AC:38:C2:C2:A5:05:9E:5D:9A:16:E1:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/c7c3204e-e7d4-3aed-a808-92e98691f9de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9/e407c8fd-b808-41d1-af5e-a88d2dd556f9.crl

            X509v3 Authority Key Identifier:
                keyid:39:88:56:13:51:28:01:35:37:02:BA:15:76:26:0A:52:03:98:3E:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e407c8fd-b808-41d1-af5e-a88d2dd556f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.235.225.0-168.235.233.255
                  168.235.235.0-168.235.239.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:22:17:87:ab:23:c1:0f:78:8f:e3:ea:66:96:bd:e5:7a:5e:
         7f:72:18:8c:8d:72:05:ba:22:c5:cd:3a:98:37:41:da:17:0c:
         16:a7:cb:01:f9:e6:f1:68:0e:91:52:f1:f5:fe:76:ed:e7:8b:
         17:b2:49:f6:03:58:38:6d:8c:70:52:6f:9d:d1:e8:2e:9b:5c:
         4f:f9:34:6a:f8:b7:4c:73:2e:b6:7c:ec:88:89:43:4f:75:d7:
         30:6e:d5:88:6b:96:a1:ec:51:f4:d8:4b:0a:65:6d:7c:81:92:
         8f:66:5b:ad:52:4d:52:74:e8:0e:c5:17:45:64:b3:5a:7a:a1:
         2e:74:9c:89:05:79:4b:6f:ad:43:a2:58:b9:af:fa:75:d3:85:
         aa:22:cb:7e:09:c4:90:46:c3:b2:52:2f:55:b7:a1:70:7d:bf:
         83:df:53:7f:c4:48:77:b3:fc:2e:e0:e6:88:3c:37:0d:56:a8:
         98:a2:d8:1f:a6:10:67:61:ce:e3:a2:9a:40:ed:99:8b:f1:61:
         22:95:ed:f6:83:d9:d0:f0:6d:85:f9:dc:83:3a:3c:60:ca:8d:
         58:fe:e5:f8:e5:46:aa:e5:6f:0d:7e:42:c9:af:76:f6:45:6f:
         f1:18:9d:4c:e9:fb:82:41:1f:4b:0e:d9:e2:b4:dd:41:e7:f0:
         b7:d6:ce:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:42:25 2026 by rpki-client