Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/d6e1721b-615d-3192-86d5-7b54114d4581.roa
File:                     d6e1721b-615d-3192-86d5-7b54114d4581.roa (raw, json)
Hash identifier:          GVRMU4KVmg/a0pI6IQllA/XtUNobPiF0U/fUaaWlp7Q=
Subject key identifier:   CB:1F:04:A4:05:7C:35:F3:5E:5E:D1:24:B5:44:18:6B:8D:91:F3:67
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584F5C37AF1DD29C127D22B71F20
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/d6e1721b-615d-3192-86d5-7b54114d4581.roa
Signing time:             Thu 01 Oct 2026 18:22:01 +0000
ROA not before:           Thu 01 Oct 2026 18:22:01 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     174
IP address blocks:        23.227.92.0/22 maxlen: 24
                          23.234.144.0/22 maxlen: 24
                          107.166.16.0/22 maxlen: 24
                          107.166.24.0/22 maxlen: 24
                          107.166.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:37:af:1d:d2:9c:12:7d:22:b7:1f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Oct  1 18:22:01 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cf83be34-3ebb-4b90-a706-483a512e4347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:df:41:3e:ff:ba:d0:85:79:5a:00:d5:d9:9c:
                    76:62:a8:d5:12:12:ac:f4:74:44:21:b1:61:00:db:
                    22:16:5a:a8:54:1a:31:8c:1b:09:a0:29:7a:8e:eb:
                    db:c3:1c:7a:d2:00:d9:32:35:76:fe:c9:31:a2:48:
                    0f:02:99:cf:29:43:ac:2a:cd:99:ee:25:73:6a:87:
                    bf:74:64:85:f6:cc:5a:71:a9:5f:3e:2b:9c:5e:d8:
                    3a:65:a4:10:95:45:f9:1a:21:ac:13:8e:d2:fb:80:
                    76:b6:fb:6d:87:7b:14:a0:02:ea:c2:48:fa:b0:a5:
                    37:2c:27:dc:1f:b4:56:f0:4c:c8:17:51:3f:54:d7:
                    62:a6:c5:c6:a9:cd:86:80:05:1c:9c:1f:ec:ee:e8:
                    3b:6b:31:ff:d3:34:45:74:71:18:0c:c5:37:25:ba:
                    02:e4:9f:32:f6:c8:a5:84:f9:7d:a6:c1:c1:67:b5:
                    07:52:58:b3:f6:bc:70:db:2e:45:4a:aa:b5:97:aa:
                    a3:2a:79:e1:b6:3a:49:31:d1:56:dc:a6:84:7e:72:
                    07:4e:79:d5:1c:a8:9b:89:2f:54:39:37:5a:b6:71:
                    36:4f:f0:fa:2d:3d:56:d6:e9:91:b1:d6:1c:cd:97:
                    44:e1:f7:f0:f3:7c:47:58:f0:d7:59:81:8b:d0:be:
                    53:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1F:04:A4:05:7C:35:F3:5E:5E:D1:24:B5:44:18:6B:8D:91:F3:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/d6e1721b-615d-3192-86d5-7b54114d4581.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.92.0/22
                  23.234.144.0/22
                  107.166.16.0/22
                  107.166.24.0/22
                  107.166.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:0f:63:ab:c1:91:bb:aa:69:cb:fb:82:ca:f1:67:99:0c:91:
         f3:01:75:aa:b3:20:07:b7:c5:6d:db:e7:dc:c3:74:8f:24:05:
         e5:14:95:73:48:71:34:a1:16:05:85:41:d3:9a:c0:9d:7f:5d:
         18:9c:5c:94:4d:94:f0:1e:da:02:30:24:17:85:7d:a6:76:44:
         e1:7c:3b:b8:45:e1:39:2d:97:4e:1f:4e:54:d9:f8:f1:52:bb:
         1f:25:a0:bc:16:5c:bb:81:79:4f:a3:e2:47:3b:71:1c:aa:a0:
         c9:f3:ef:ce:47:1c:df:7d:61:f2:14:6f:7f:19:dd:0e:a3:10:
         ed:c2:1d:4f:d4:5a:6a:79:03:f3:d0:d6:52:22:41:8d:03:73:
         b1:2c:4c:4a:e6:c2:a6:e2:25:ce:e2:32:a9:10:a5:ce:d2:32:
         1b:ae:8f:09:b1:48:11:fa:26:c7:89:5c:73:33:f4:7d:df:2d:
         05:dc:b3:9b:80:05:75:83:40:20:95:8e:7f:be:aa:1d:e6:ce:
         f2:14:93:8c:d0:f8:c3:cb:ad:75:b8:55:d1:cf:2b:82:97:51:
         25:8f:97:1d:27:82:54:ed:e0:cf:ab:45:08:30:db:fa:22:94:
         d7:d8:31:7b:ff:db:80:5b:a4:67:fa:bf:11:99:8f:b9:0f:d0:
         85:8a:74:61
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Oct 9 22:38:22 2026 by rpki-client