Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01f527b7-ba39-3175-b093-3bcfc19885ff.roa
File:                     01f527b7-ba39-3175-b093-3bcfc19885ff.roa (raw, json)
Hash identifier:          U7ECnpril4rG5FfoQdHQB9u6BRa2UVt+Ny9UNRCrbaM=
Subject key identifier:   B9:AB:FD:4E:D3:E8:B0:7D:6A:E2:C8:21:57:93:BD:A2:C5:A3:60:2F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E9EAFEFBE1B8A06865E73E700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01f527b7-ba39-3175-b093-3bcfc19885ff.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     20940
IP address blocks:        23.46.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:ef:be:1b:8a:06:86:5e:73:e7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=38d8885e-ad73-420e-a4f6-20dee2e89bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:c4:33:b8:d2:d4:2c:6f:7c:ce:ab:43:80:d6:
                    52:bc:8c:e2:73:28:5d:0d:49:2d:bf:77:32:68:6c:
                    a0:79:61:47:37:a5:bf:b1:5b:7b:d7:2a:48:52:22:
                    2d:c0:26:8b:f4:f3:e9:a8:18:ec:e4:4f:1d:98:d3:
                    b6:64:67:a4:62:4f:1f:7d:7d:f1:44:e0:30:8b:6e:
                    05:84:95:6d:3a:e1:71:af:98:9c:6a:1c:4c:b6:f3:
                    60:a7:78:79:71:4c:c0:3c:23:bb:80:4b:63:b8:ff:
                    fe:85:7f:a0:b4:6d:d1:53:d6:2b:85:e0:e6:c7:2a:
                    06:99:db:52:54:df:4b:ce:2e:a4:69:f9:18:e5:59:
                    13:15:60:41:14:55:98:38:ba:70:04:23:26:4e:df:
                    69:58:bc:d0:09:01:ab:d1:2c:c7:69:5f:90:39:bb:
                    fa:3b:77:27:de:23:8c:a1:0c:a1:c1:a1:df:6e:02:
                    f1:db:01:64:0d:f2:36:6b:84:25:97:d5:4b:92:c9:
                    99:62:0c:38:9c:9b:7e:0f:4c:74:62:c3:18:b7:77:
                    62:b2:6c:dc:49:81:9b:cb:a7:82:43:28:d8:39:22:
                    a7:6a:c6:19:7f:1f:59:ba:a3:8e:ed:21:d9:86:64:
                    a3:62:4f:b5:c6:71:e4:fc:0e:2e:2b:5d:0a:5b:01:
                    f2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AB:FD:4E:D3:E8:B0:7D:6A:E2:C8:21:57:93:BD:A2:C5:A3:60:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01f527b7-ba39-3175-b093-3bcfc19885ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.46.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:90:ce:6d:49:30:58:70:68:b3:16:4d:ec:34:b1:d5:eb:c7:
         cf:12:05:f5:5c:1d:f4:56:32:60:0c:e0:22:b0:7f:0b:71:8f:
         bf:22:b7:ab:8f:66:92:67:2d:19:19:ed:45:e6:7d:a9:24:af:
         80:ac:21:d4:9e:09:b9:46:da:f9:4c:cb:34:9b:73:cf:f5:7e:
         cd:1e:8d:2a:7b:c7:44:b4:25:da:d9:a4:f2:26:fb:fc:46:c5:
         e0:8d:ec:61:9b:d0:68:91:e3:fa:60:74:9d:ee:9e:63:af:9e:
         f8:a3:14:2e:31:06:a2:b1:7c:62:65:f9:33:9b:ae:72:fb:74:
         71:28:f9:47:c5:6b:04:77:4f:7c:86:69:d1:4a:30:06:cc:ab:
         e0:bd:c9:ac:ea:8e:9e:0e:55:0b:78:67:d0:2d:e5:a8:54:f4:
         00:8a:79:e8:5f:10:db:c4:d6:72:3a:ea:6a:59:e9:18:40:75:
         55:6d:c9:a5:35:99:c6:32:70:00:0a:40:cc:fe:35:f4:71:0c:
         e4:1b:8f:e6:81:5e:b6:64:c4:11:0f:a0:19:dc:0c:2d:7a:ca:
         73:01:16:5f:63:d6:85:36:8b:84:66:d2:bc:06:cf:29:be:c5:
         e8:8e:33:fe:32:2e:6a:78:e7:a6:7e:61:75:6d:ad:da:68:3e:
         69:d8:3f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:34:06 2026 by rpki-client