Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16a31f3d-4869-3d0c-bd85-c252b9a1e5d2.roa
File:                     16a31f3d-4869-3d0c-bd85-c252b9a1e5d2.roa (raw, json)
Hash identifier:          K3jAsmmtja+jgqhXa87ANsWsBmBubIMGfX45ymDbQVo=
Subject key identifier:   66:E6:C6:2A:11:0B:8A:F5:3C:2F:EE:44:43:2D:EB:EB:E0:3B:C2:FF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA5AA7E659CA5DAD972972400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16a31f3d-4869-3d0c-bd85-c252b9a1e5d2.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     16625
IP address blocks:        23.52.142.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:7e:65:9c:a5:da:d9:72:97:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=a48d2191-37ab-4570-9ef9-d86d9cc21ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:59:35:76:8a:78:e3:8a:5b:76:58:d1:03:
                    e3:4b:a9:b7:ea:13:ca:7e:30:c8:19:12:ad:41:11:
                    5a:a9:ae:fd:be:a8:ed:89:cd:fd:5b:87:b0:d9:1b:
                    cc:66:28:17:13:bd:68:66:ad:8f:97:52:4f:ec:d9:
                    19:d8:82:f9:6a:de:27:3c:fc:21:af:ca:90:ec:c5:
                    10:4d:e0:2b:38:c0:c2:c3:d9:0d:c9:94:e3:b8:14:
                    34:9a:fc:cf:e6:1e:3a:ee:68:72:c3:6e:3b:12:38:
                    87:4b:5e:d8:ae:fe:06:3e:74:1c:d9:08:b1:df:40:
                    dd:f5:30:44:3b:da:94:81:21:1b:2b:cf:ef:20:a5:
                    42:47:a3:6c:9f:61:87:1a:c9:11:2c:fd:a2:00:b2:
                    9e:62:1e:81:90:74:fe:72:a1:00:38:c0:eb:f4:10:
                    43:22:04:e1:87:89:ed:21:e5:52:5c:af:c4:bb:62:
                    95:3b:f7:72:42:7a:eb:3d:42:89:55:6d:b5:a0:3c:
                    34:52:8f:97:77:d4:ad:ba:58:65:2f:06:8f:2e:90:
                    ce:97:3e:4c:d4:7c:f6:42:31:ec:3c:23:2e:1f:0c:
                    80:81:a6:f9:50:38:f5:99:0d:ee:42:b8:a4:43:53:
                    25:11:a9:eb:66:2f:a6:83:25:14:1b:70:d2:aa:03:
                    8a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E6:C6:2A:11:0B:8A:F5:3C:2F:EE:44:43:2D:EB:EB:E0:3B:C2:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16a31f3d-4869-3d0c-bd85-c252b9a1e5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.142.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:04:22:27:30:65:1a:a6:e5:e4:22:6d:08:bb:3a:82:6d:1f:
         86:8b:a9:70:72:c2:7e:f0:f1:d7:4a:e9:75:b8:b5:1c:a0:f5:
         e6:32:9d:f0:2a:d6:20:d7:86:23:8d:6e:9c:ea:ce:4a:2a:36:
         b3:5d:ed:27:11:22:4f:04:67:a9:73:56:1c:7c:8d:18:7f:59:
         67:bc:d0:c8:34:65:81:5b:27:d3:15:58:19:f2:74:57:c0:da:
         26:34:33:4f:6b:40:4b:97:a4:c9:d8:4f:7d:8b:86:ff:fd:8b:
         36:78:33:30:80:6d:23:96:96:5d:e6:93:07:1e:9e:a8:c1:43:
         47:72:16:b8:16:19:fd:e0:64:7f:ea:6e:d3:b1:25:94:58:ed:
         4d:e5:45:2b:23:e8:8c:4a:a4:ba:32:39:ea:b8:55:21:64:c5:
         61:ea:99:2e:c2:e3:51:c2:4f:bf:92:78:8c:e5:07:b7:2f:22:
         c7:9e:43:38:86:c5:8e:33:b9:d8:85:53:3b:40:87:a7:79:9b:
         2e:98:93:30:43:e2:65:da:d2:ed:8f:0f:2e:1d:4b:ad:a3:f0:
         04:59:ff:4d:be:15:4e:1a:0e:c3:28:a4:a3:bf:5e:dd:36:fa:
         02:dd:db:25:bf:7b:5d:a7:84:8a:d7:87:8f:d2:e3:da:7a:76:
         6b:b3:30:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:55 2026 by rpki-client