Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/39aca870-b6a7-3cf1-a719-5bb99dfcb408.roa
File:                     39aca870-b6a7-3cf1-a719-5bb99dfcb408.roa (raw, json)
Hash identifier:          frjbcRrlIAhhCMonD3hNE9o77wrYUVNHQkbwQHwFXBU=
Subject key identifier:   86:26:F4:A7:6A:B9:B1:01:F0:98:19:E4:BF:3A:49:3E:80:6F:D0:C0
Certificate issuer:       /CN=3feec52d-ec77-4869-a96c-bed4aa519781
Certificate serial:       010D0C9F4328584F2D87BB1E41DFDBDA68414D80
Authority key identifier: DA:6F:E9:A2:F5:75:58:68:74:D1:A7:22:FB:3C:06:33:80:E6:0A:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/39aca870-b6a7-3cf1-a719-5bb99dfcb408.roa
Signing time:             Tue 15 Sep 2026 01:00:12 +0000
ROA not before:           Tue 15 Sep 2026 01:00:12 +0000
ROA not after:            Mon 14 Dec 2026 02:00:12 +0000
asID:                     36710
IP address blocks:        23.132.32.0/24 maxlen: 24
                          23.132.33.0/24 maxlen: 24
                          2620:138:6000::/48 maxlen: 48
                          2620:138:6001::/48 maxlen: 48
                          2620:138:6002::/48 maxlen: 48
                          2620:138:6003::/48 maxlen: 48
                          2620:138:6004::/48 maxlen: 48
                          2620:138:6005::/48 maxlen: 48
                          2620:138:6006::/48 maxlen: 48
                          2620:138:6007::/48 maxlen: 48
                          2620:138:6008::/48 maxlen: 48
                          2620:138:6009::/48 maxlen: 48
                          2620:138:600a::/48 maxlen: 48
                          2620:138:600b::/48 maxlen: 48
                          2620:138:600c::/48 maxlen: 48
                          2620:138:600d::/48 maxlen: 48
                          2620:138:600e::/48 maxlen: 48
                          2620:138:600f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/3feec52d-ec77-4869-a96c-bed4aa519781.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/3feec52d-ec77-4869-a96c-bed4aa519781.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2d:87:bb:1e:41:df:db:da:68:41:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3feec52d-ec77-4869-a96c-bed4aa519781
        Validity
            Not Before: Sep 15 01:00:12 2026 GMT
            Not After : Dec 14 02:00:12 2026 GMT
        Subject: CN=65494a93-7da4-4d30-b13c-4952bbd5df70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:aa:ee:9d:03:fb:27:63:b1:bc:06:bd:0e:0d:
                    e8:f7:57:99:c1:41:da:02:38:31:7f:77:40:b1:f5:
                    73:71:5a:e4:27:54:d1:5e:67:dc:dd:c0:b3:66:8a:
                    1f:ec:22:9e:9e:9a:e0:e4:51:c1:81:bd:ee:35:eb:
                    2f:c7:95:20:df:d5:ab:62:47:12:92:99:cd:8b:1f:
                    0e:1b:28:56:f2:09:26:c3:88:40:c2:15:9d:67:21:
                    94:55:2a:02:9f:86:79:19:b2:07:0c:18:94:fb:0c:
                    e7:db:1f:1c:bd:1c:c9:ca:cf:07:09:1a:41:6d:89:
                    b0:10:b3:99:e8:b6:7f:98:39:b8:30:b8:d6:b9:f2:
                    b4:38:2c:f5:4c:99:ae:ca:f1:36:71:97:47:26:29:
                    c7:49:ce:62:3a:90:98:a0:cc:4e:cb:54:b2:10:34:
                    3f:96:94:c0:ae:dc:5a:9c:bc:f0:cb:9c:3b:47:ee:
                    af:4c:90:07:2c:84:51:3f:6f:29:2d:26:61:9f:a8:
                    cd:8b:1e:93:40:09:06:91:19:3f:0c:05:d2:df:3b:
                    96:22:e4:2f:d2:65:15:c7:4d:47:3d:20:85:bf:79:
                    98:7a:45:0b:4e:24:8f:04:0d:39:dc:25:65:16:27:
                    78:85:79:a2:cc:85:3e:9b:3f:88:66:2c:b5:30:2d:
                    21:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:26:F4:A7:6A:B9:B1:01:F0:98:19:E4:BF:3A:49:3E:80:6F:D0:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/39aca870-b6a7-3cf1-a719-5bb99dfcb408.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781/3feec52d-ec77-4869-a96c-bed4aa519781.crl

            X509v3 Authority Key Identifier:
                keyid:DA:6F:E9:A2:F5:75:58:68:74:D1:A7:22:FB:3C:06:33:80:E6:0A:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3feec52d-ec77-4869-a96c-bed4aa519781.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.32.0/23
                IPv6:
                  2620:138:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:fc:7f:4a:6f:fe:9e:29:10:e5:35:28:59:46:86:c6:5f:94:
         43:df:9f:8f:18:f0:37:b1:79:95:08:c7:22:f4:67:8c:87:52:
         06:93:d1:ba:4a:54:39:29:2f:b2:a1:4b:99:85:8b:db:1a:dc:
         6d:15:b7:9a:7e:f9:2d:cc:ea:d3:bd:01:4a:45:a3:19:00:5b:
         49:af:49:db:24:2f:1e:b3:45:eb:88:86:82:34:89:82:38:42:
         5e:42:4b:88:01:48:3d:84:74:fd:5a:3a:1f:71:ea:ba:a3:ab:
         ac:3b:5a:d4:53:df:5e:03:7d:b0:69:b4:42:3e:b1:e4:4c:5c:
         11:19:82:ea:57:9d:92:3a:26:ce:d8:be:a7:a1:cc:d0:c4:ae:
         1f:b5:8d:f3:19:77:d1:43:ba:24:1c:ea:2b:0a:42:50:1a:9f:
         65:d0:36:b6:7c:bf:c1:c2:4b:c9:79:ff:a1:62:66:e5:c6:57:
         dd:a6:0e:c3:c1:b6:b3:f2:0e:a5:e8:4f:eb:3e:2c:52:85:7e:
         1c:ed:eb:ad:15:1c:f5:9d:6e:c5:b9:8b:6f:53:70:18:83:2f:
         80:be:e8:38:07:62:c6:d3:d8:a2:f5:81:bb:cf:79:a5:8d:0d:
         7c:62:e9:86:69:b2:b5:ee:ae:e1:d2:ec:12:9b:d3:55:b3:53:
         71:9b:6b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:54:08 2026 by rpki-client