Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa
File:                     c88482ce-5336-3c12-a513-f86f7726f25a.roa (raw, json)
Hash identifier:          WpPSmPagxGNSX9wxhIW0rQ5w4OoERJYHIxLVAlicqk4=
Subject key identifier:   72:CC:6A:6D:EE:5B:12:63:37:9E:AD:1F:4B:01:79:60:B3:29:16:87
Certificate issuer:       /CN=3572e9fa-d098-46d4-a528-9373b3585402
Certificate serial:       010D0C9F4328584F03A77D2091C878EBE636AEA0
Authority key identifier: B7:27:E5:DF:31:B7:70:E8:F4:1E:DA:8A:6E:34:0B:F3:08:8B:30:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     40139
IP address blocks:        23.186.144.0/24 maxlen: 24
                          23.186.145.0/24 maxlen: 24
                          23.186.146.0/24 maxlen: 24
                          23.186.147.0/24 maxlen: 24
                          23.186.148.0/24 maxlen: 24
                          23.186.149.0/24 maxlen: 24
                          23.186.150.0/24 maxlen: 24
                          23.186.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:7d:20:91:c8:78:eb:e6:36:ae:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3572e9fa-d098-46d4-a528-9373b3585402
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=dfeb6b9b-79e7-4ebe-8a03-a159b4b7ce93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8a:4f:d1:07:a4:8e:66:4c:80:67:c5:a1:41:
                    ff:7e:cd:1e:a4:7f:a8:44:f1:4c:27:93:89:86:75:
                    09:72:d9:ad:7f:67:94:a3:e5:d2:0e:dc:a0:5d:9d:
                    d1:25:31:f8:b6:23:34:8a:9e:ba:ea:b8:8e:ed:34:
                    85:c7:6e:e5:ca:08:1a:43:62:ab:5f:46:63:96:97:
                    97:b0:f4:0c:82:0f:1f:87:a2:bb:30:56:0d:2d:5e:
                    6c:c9:2b:4c:6f:b9:c9:d9:78:a8:14:42:c1:32:7f:
                    54:10:1d:23:1b:b2:2e:6d:e2:c9:3f:9d:bf:bf:c8:
                    42:34:cf:84:c3:14:55:b4:0e:32:df:f0:0d:11:af:
                    d6:db:d9:79:75:61:37:d3:fc:8a:42:fc:2f:7f:c8:
                    d3:81:12:a3:4b:2d:b2:9b:9f:5a:bf:86:31:0b:e1:
                    c7:84:25:53:7b:39:ad:0c:6c:07:d5:a9:16:58:55:
                    32:80:56:57:e5:2a:e2:e9:31:da:df:c4:c6:0a:cd:
                    6d:3a:af:67:ef:43:1a:a1:17:a5:0a:2f:95:88:1e:
                    d2:e9:a0:0f:d8:c3:f5:34:5f:7b:3a:fc:16:44:a6:
                    44:26:c4:84:d3:7e:a8:51:64:7e:a1:f1:c8:49:0f:
                    6f:9a:94:62:9b:9a:78:dd:e2:a4:3f:74:a3:63:36:
                    ed:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:CC:6A:6D:EE:5B:12:63:37:9E:AD:1F:4B:01:79:60:B3:29:16:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.crl

            X509v3 Authority Key Identifier:
                keyid:B7:27:E5:DF:31:B7:70:E8:F4:1E:DA:8A:6E:34:0B:F3:08:8B:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.186.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:7f:e8:fd:17:a0:c3:d6:79:f7:f0:fb:1c:b9:dc:b5:92:ac:
         31:4b:a7:7c:49:0a:13:09:7c:e7:b4:6b:2c:39:49:5d:83:8d:
         32:d6:e2:3d:2b:66:68:28:f0:1d:3c:b3:9d:c7:b8:f9:f7:3c:
         80:0c:f5:85:df:ca:68:b4:2d:96:af:65:e1:18:cd:da:9c:07:
         5d:fd:14:58:eb:62:72:17:e8:08:f3:f5:04:9b:56:7f:fa:fb:
         a5:2e:46:9c:f3:8c:55:ae:2a:ee:07:ff:af:6e:39:c7:60:67:
         cb:65:57:ab:0b:ba:4e:51:84:8f:46:d0:b4:6b:37:09:b0:bd:
         2f:9f:5f:78:99:f4:43:51:dd:24:8e:ad:52:7f:1c:f1:c1:4b:
         74:ed:8c:37:5a:08:c0:dc:4e:ae:19:19:96:19:02:9a:b3:24:
         59:64:b1:c0:30:7a:af:52:d8:49:62:5a:ff:85:67:95:5f:68:
         ae:a6:35:71:b4:31:13:72:a5:c3:10:0c:78:92:e9:c8:7e:3b:
         e9:5a:c5:f7:87:a3:76:37:81:9d:23:2b:dc:2a:99:e0:28:b4:
         e5:32:33:32:a8:5d:a9:c5:a0:ff:b7:02:16:a7:0c:d2:d4:07:
         4d:8c:3d:fa:c2:69:e4:7a:fb:c3:61:4d:cd:d8:bd:c0:8f:42:
         b2:58:bc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 23:02:18 2026 by rpki-client