Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28a41872-63b1-3476-b351-97f772fb1f96.roa
File:                     28a41872-63b1-3476-b351-97f772fb1f96.roa (raw, json)
Hash identifier:          bLsB3yoXyVfFj8yZYE75BgLSg2/dY6dP74xbbAI/Yqc=
Subject key identifier:   22:1A:47:3C:27:EE:0D:C8:3F:CE:54:09:D7:FD:02:9A:5B:77:CB:60
Certificate issuer:       /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial:       010D0C9F4328584CB981CFFA1C6F83B430735E80
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28a41872-63b1-3476-b351-97f772fb1f96.roa
Signing time:             Mon 02 Feb 2026 02:00:32 +0000
ROA not before:           Mon 02 Feb 2026 02:00:32 +0000
ROA not after:            Sun 03 May 2026 01:00:32 +0000
asID:                     398712
IP address blocks:        23.227.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b9:81:cf:fa:1c:6f:83:b4:30:73:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
        Validity
            Not Before: Feb  2 02:00:32 2026 GMT
            Not After : May  3 01:00:32 2026 GMT
        Subject: CN=41b42ef7-2208-4e02-befe-7f3fbe39e31a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1d:f6:67:68:75:5e:4f:b6:f6:2d:ed:c6:94:
                    67:c0:b1:cc:28:eb:50:c3:91:23:40:9e:34:05:f2:
                    90:54:22:08:7e:52:d5:09:6a:cf:82:50:23:d6:cf:
                    a0:14:64:80:ef:de:4d:82:c9:46:c1:4a:32:ed:df:
                    2a:12:1c:9e:84:6b:03:17:3f:49:f2:16:2f:f2:b2:
                    41:be:39:22:2b:6a:76:39:13:63:bd:24:26:7a:e4:
                    dc:03:a0:05:94:a4:1a:82:0b:79:e6:18:50:07:cb:
                    dd:a9:de:c2:da:63:6d:82:e8:2c:ba:1f:d4:bd:97:
                    78:78:e2:d1:b1:8f:3c:82:3e:c0:96:c7:bd:48:5c:
                    0d:19:83:45:26:b9:36:ec:97:a4:83:97:0a:fa:a2:
                    5a:1f:5f:76:a0:48:84:e5:24:85:00:c0:5c:36:95:
                    28:b0:73:7f:b5:af:fd:d1:50:e7:e0:2b:ed:a2:ad:
                    6c:e6:09:d8:8c:4d:91:cb:14:ca:44:76:78:ea:9b:
                    91:91:07:b1:ad:7d:20:a9:a8:12:b8:80:d9:0f:61:
                    36:68:11:d3:bb:41:3b:4b:d3:df:7d:0c:9d:13:95:
                    c9:9f:f6:3d:17:fa:f6:d1:f0:78:29:ef:ac:a6:b8:
                    7b:f5:71:92:4b:6b:b8:cb:2c:4a:66:db:dc:66:b5:
                    87:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:1A:47:3C:27:EE:0D:C8:3F:CE:54:09:D7:FD:02:9A:5B:77:CB:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28a41872-63b1-3476-b351-97f772fb1f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl

            X509v3 Authority Key Identifier:
                keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:c0:f4:2c:6d:35:f7:b1:2f:a8:db:c5:06:3c:cd:de:7c:70:
         a9:41:c0:92:53:6d:ae:2b:e1:7d:25:d0:fb:f1:d8:03:4c:cc:
         d4:97:f4:63:42:31:94:91:09:1a:bf:e4:c3:14:57:2c:26:4e:
         66:c5:ac:a4:3f:63:1a:e7:27:e8:9f:ae:1d:b7:7c:68:d1:88:
         ea:93:bb:5c:f5:1a:3e:77:bb:99:ed:c4:80:a4:c9:82:c8:9d:
         20:44:d8:57:41:cc:29:a9:2d:0c:4a:d8:ee:b0:bb:3b:b2:3b:
         ce:a8:e5:e4:0a:51:30:ae:bf:71:93:90:06:94:0b:57:66:a4:
         df:e1:29:c7:cb:89:45:1c:6c:62:fa:7f:d1:22:2b:fc:00:c8:
         a8:f7:46:87:78:1c:ff:48:54:62:ac:c9:ac:f1:d7:ca:d4:b8:
         e2:34:59:a8:7b:a8:81:94:cc:9c:a9:f6:ac:20:5d:62:b9:c0:
         4f:17:ab:9d:22:eb:92:48:61:b7:e4:3e:bb:82:dc:af:0e:82:
         45:77:5e:27:a4:e7:85:e7:4d:10:b9:07:f9:1f:7a:d9:69:89:
         f8:2a:74:49:62:42:8d:58:54:17:2d:c1:5c:e7:63:20:6b:17:
         6f:7c:94:67:9f:fb:d5:83:a9:75:3f:c9:3f:74:85:c5:6f:af:
         a2:c5:f9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:41 2026 by rpki-client