Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/ec91cff2-38f7-3064-b7d7-904db585b8d4.roa
File:                     ec91cff2-38f7-3064-b7d7-904db585b8d4.roa (raw, json)
Hash identifier:          2V3Vb/FdtWBHcRUmGUZJeMTb87xqt+UxHJztmgMro8M=
Subject key identifier:   3D:63:4F:06:A6:9C:8B:F9:B3:66:C5:BD:BE:D4:87:96:96:26:58:F9
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584EB2B1F61DE8DA45BC0D9061E0
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/ec91cff2-38f7-3064-b7d7-904db585b8d4.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     396982
IP address blocks:        23.227.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:f6:1d:e8:da:45:bc:0d:90:61:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=f6725fdf-5567-46a4-9451-a2e92fea7733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6a:43:35:56:30:a8:f4:96:06:9e:ef:77:ba:
                    32:da:03:eb:85:ed:93:51:86:57:88:87:6c:31:18:
                    92:1b:fe:b7:46:31:f7:7c:92:2e:2c:bc:15:9d:0e:
                    75:3e:26:64:b9:f4:73:06:4c:b3:e9:0b:05:de:19:
                    d4:ba:e7:de:55:46:40:fb:c4:0d:fd:de:43:16:d0:
                    78:3f:8e:d1:6d:0e:2b:3f:17:32:34:fc:4a:99:aa:
                    29:ef:6d:d8:e0:40:5b:2f:f6:6a:21:35:a9:84:3d:
                    d6:8a:f5:1a:ef:49:9f:56:94:aa:d4:f2:99:52:4d:
                    f1:80:d6:0f:9a:80:14:d1:6c:0f:a1:ab:77:b9:31:
                    97:2d:fd:cd:05:fc:fc:63:bf:55:4e:15:bc:39:45:
                    32:f0:98:2a:30:68:7d:fa:e5:b3:e3:fd:95:cc:2e:
                    be:c9:92:73:14:7d:60:56:ee:79:3a:77:94:37:03:
                    db:5b:92:7e:b9:76:4f:c5:c5:a7:1d:c4:89:80:e7:
                    df:5a:68:33:36:c8:f3:98:33:9a:2c:3a:87:b8:0b:
                    8e:06:f9:c6:34:38:40:74:3e:17:a2:0d:41:06:c3:
                    cf:2e:0a:93:12:f6:f1:0d:56:8e:a8:a4:1e:55:fe:
                    ff:c2:ca:b2:ed:4c:44:bd:04:24:26:69:ae:95:d2:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:63:4F:06:A6:9C:8B:F9:B3:66:C5:BD:BE:D4:87:96:96:26:58:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/ec91cff2-38f7-3064-b7d7-904db585b8d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c6:aa:fb:6f:9f:0c:e8:31:22:8b:8f:e5:39:63:82:5d:c6:
         01:9e:a2:55:8e:e5:cb:7d:98:31:53:b0:af:54:b4:10:fd:3e:
         af:c7:c8:7c:a2:83:52:ef:14:e9:d1:f3:95:16:1b:c8:9c:52:
         aa:dc:df:b6:78:b0:40:53:31:90:80:b8:76:c7:cd:a8:96:64:
         87:af:b2:ec:fb:b8:54:4a:60:68:95:ed:c2:78:c7:83:43:1d:
         67:cb:74:c7:89:4a:d1:f4:2f:5e:65:29:97:f6:7f:f5:9a:85:
         79:0a:38:f3:97:91:c5:9e:08:1f:b4:5c:65:fd:f5:e6:95:00:
         cb:73:a8:aa:c9:fa:06:e3:3b:33:f2:ea:97:36:a8:0c:0c:82:
         c2:b3:4b:6b:05:cf:8b:a0:a0:c1:41:6d:c4:4c:f2:53:ab:ef:
         cf:9f:13:55:f2:9c:c8:87:9a:80:15:08:8f:77:ab:fa:c3:f8:
         20:a9:10:b8:90:65:09:95:e7:2a:36:cb:e6:01:69:29:cf:b7:
         21:ed:77:7e:e7:0a:2a:e5:77:63:f2:c4:fd:4b:10:b8:5e:d0:
         32:1e:c0:a5:c5:83:29:e5:56:13:7c:55:07:31:74:29:4a:59:
         93:6a:0d:1d:cc:b8:e5:24:ed:15:8f:02:15:e0:22:fa:8c:69:
         64:e8:84:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:31:29 2026 by rpki-client