Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa
File:                     210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa (raw, json)
Hash identifier:          A7MJ05tgVDdGgHYjdSEG0kPNxLTQxjnURoLOS3IH18w=
Subject key identifier:   8B:6E:5C:D5:C3:00:FD:1B:2F:C0:33:0A:2A:6D:10:B2:AA:2F:66:31
Certificate issuer:       /CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3
Certificate serial:       010D0C9F4328584F4542876BBCE6AB04AF3A0100
Authority key identifier: 66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa
Signing time:             Wed 23 Sep 2026 13:00:11 +0000
ROA not before:           Wed 23 Sep 2026 13:00:11 +0000
ROA not after:            Tue 22 Dec 2026 14:00:11 +0000
asID:                     400005
IP address blocks:        23.185.240.0/24 maxlen: 24
                          23.185.241.0/24 maxlen: 24
                          2602:fc46::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:42:87:6b:bc:e6:ab:04:af:3a:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3
        Validity
            Not Before: Sep 23 13:00:11 2026 GMT
            Not After : Dec 22 14:00:11 2026 GMT
        Subject: CN=9753437f-844a-4816-9e03-d8630e6d3a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6a:14:6a:1e:b4:34:33:b1:1f:31:99:c3:c4:
                    75:ef:0d:0f:69:2b:0a:85:3c:7f:cd:f0:6e:b4:92:
                    70:5e:b6:69:c3:88:51:b0:40:ff:8d:4e:16:ee:bd:
                    24:6a:72:b0:58:83:18:ff:6e:e8:00:49:9c:23:cf:
                    9f:28:d3:19:f6:43:f8:10:af:a4:44:25:67:0b:d7:
                    7b:db:2c:ab:66:3c:3e:d9:70:e0:3f:95:0f:6b:c4:
                    08:1f:4b:fe:7a:8e:2b:32:c3:64:96:26:70:d6:cd:
                    79:45:ba:d8:8c:d9:78:fe:86:28:2b:f2:31:22:4f:
                    40:a9:84:b1:f8:50:cc:a9:5b:d0:52:6a:ee:7f:55:
                    bf:da:d3:69:03:70:c7:9c:9e:d5:ef:e9:e3:8e:a8:
                    01:52:a8:dd:80:d7:21:8a:5d:a6:cc:f8:4c:c7:3d:
                    78:56:bb:2a:e0:03:9d:dc:f7:6d:ab:c6:81:4e:e9:
                    f2:30:e3:35:dd:5a:83:1c:b7:de:3d:7b:d5:cf:39:
                    cc:11:da:8d:74:d9:f7:cf:c0:41:59:48:b2:37:f9:
                    d2:e4:29:8f:34:70:e5:67:f4:3b:63:01:e3:4d:98:
                    2d:66:17:39:04:5c:cd:1c:e0:e7:6d:2e:18:4f:f4:
                    bc:85:77:56:55:07:d9:53:d4:30:9a:76:bb:15:80:
                    1f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6E:5C:D5:C3:00:FD:1B:2F:C0:33:0A:2A:6D:10:B2:AA:2F:66:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl

            X509v3 Authority Key Identifier:
                keyid:66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.240.0/23
                IPv6:
                  2602:fc46::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:43:ce:65:af:78:ae:c8:52:48:51:32:ed:7e:ee:45:55:2c:
         42:64:1f:14:8e:76:f8:d6:d5:63:13:00:98:02:32:83:d2:9a:
         e0:57:db:99:56:6a:7e:2f:70:e0:4d:4e:f7:0f:14:a6:05:3b:
         1c:e1:52:f0:b3:74:5a:6d:08:ef:06:88:dd:eb:ac:2b:c3:b2:
         a9:3d:55:2c:0b:a0:1d:c7:5a:c6:6a:42:42:f3:7e:c7:6d:65:
         58:29:d8:8b:2b:94:e0:1c:e3:48:34:14:a1:c5:9a:7a:1c:fd:
         7b:06:5c:a6:8a:08:c9:d5:de:15:34:eb:ea:16:c0:f7:f7:b8:
         ea:e3:86:8d:91:17:fa:01:a1:2c:c0:72:92:39:17:32:32:5c:
         b6:f8:cd:3a:00:ff:f6:31:a5:24:ca:4a:8d:d3:d9:ea:bc:e7:
         bd:67:ed:d7:44:05:70:ae:8e:1b:17:b1:c6:c0:ee:64:74:47:
         2a:00:0d:e6:fc:8c:e7:fc:86:74:50:51:e2:5c:53:68:e1:da:
         10:36:29:7c:d5:0e:0e:9a:b5:fb:37:a2:e9:31:e1:a9:71:8a:
         9e:dc:b4:c7:85:83:23:3f:57:db:c8:d3:73:1b:e9:e8:02:09:
         f5:8d:5c:23:48:f4:ff:a2:da:1e:60:ea:e7:0c:50:61:7e:04:
         1e:06:a0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:07:58 2026 by rpki-client