Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26cd4a9c-987a-3005-ac35-3db6f0481aa3.roa
File:                     26cd4a9c-987a-3005-ac35-3db6f0481aa3.roa (raw, json)
Hash identifier:          0uqBRo4wWSvlod15J6xzrb8RCL48s8TlsJ3rW2TWfNY=
Subject key identifier:   4F:37:51:AE:D0:B6:7E:0E:E1:83:76:9F:9B:E1:37:00:9E:C3:13:54
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7918943FDE87DCB3416A000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26cd4a9c-987a-3005-ac35-3db6f0481aa3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16625
IP address blocks:        23.199.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:89:43:fd:e8:7d:cb:34:16:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=bcd26cab-1be3-4e54-b0db-dd3aa6e7361e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5c:e6:7e:cc:30:14:5e:af:62:c7:2e:b2:a8:
                    6d:e6:45:91:fd:4e:45:30:1c:bf:41:71:79:78:74:
                    3b:92:20:2d:54:0e:5b:70:18:e0:c2:d8:65:e5:8b:
                    18:36:f0:c0:44:04:b8:af:a8:dc:57:da:a3:1b:6d:
                    69:f4:dc:31:ff:5f:69:1f:20:43:25:7d:00:a6:37:
                    ee:e1:c3:48:66:a9:7d:20:ba:34:ab:f4:8d:e5:4b:
                    d5:26:4e:fd:fd:af:7b:54:de:d5:4d:b9:cf:5b:64:
                    af:d4:b4:2d:44:ab:57:d2:79:ab:41:25:a5:e8:9f:
                    8a:c4:57:5e:f9:76:57:f3:9d:6b:14:e0:ea:b6:10:
                    9e:63:57:f6:58:fb:14:24:da:f0:61:13:fd:81:bd:
                    50:4b:6d:ae:3a:5a:0a:56:5c:27:9b:79:13:ed:1a:
                    ee:46:cf:a3:6d:0d:8d:a3:28:90:28:a0:87:08:1f:
                    ee:f4:07:11:5f:6d:81:9b:50:e0:c0:61:cb:b9:38:
                    74:35:de:79:b1:59:98:ed:f0:85:85:45:6b:f2:83:
                    ba:71:67:87:05:cc:f2:92:c0:81:60:b5:0e:4d:de:
                    38:e3:81:a8:cb:1a:d3:91:32:e9:89:c8:64:c4:9a:
                    9e:16:35:fd:99:a6:01:05:7f:21:64:1c:66:ed:9f:
                    ad:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:37:51:AE:D0:B6:7E:0E:E1:83:76:9F:9B:E1:37:00:9E:C3:13:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/26cd4a9c-987a-3005-ac35-3db6f0481aa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.199.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:1b:77:a1:82:ba:a0:7c:f5:49:ec:e3:fd:13:38:e0:8f:b7:
         8c:5b:a0:dc:e2:fa:23:17:0a:76:91:48:7a:78:4e:ca:86:98:
         1c:bc:58:3b:c9:70:59:2c:e2:9c:09:8c:90:6b:c7:4c:fa:7a:
         40:0b:24:1f:94:4e:4b:49:48:d4:90:14:0f:aa:2f:49:f8:53:
         1a:e5:bf:c4:b6:5e:e2:ab:71:8c:c8:4b:88:1c:6a:73:c4:07:
         c0:21:2e:18:cf:0e:cc:70:0e:a0:88:27:7a:f4:4c:e3:83:02:
         35:81:18:0a:ca:ce:fd:bf:df:5c:46:13:09:b9:c9:bf:69:d3:
         aa:5c:5e:40:0b:ad:08:5a:76:b7:0d:6b:bf:36:fb:73:2c:eb:
         02:b0:05:34:d3:45:75:47:74:7b:81:49:79:0e:15:d2:ac:df:
         e3:81:12:eb:e1:44:1e:62:ec:ad:bf:e3:8f:30:d6:a6:48:70:
         39:01:60:dc:39:70:fe:24:38:65:71:67:45:19:e3:00:aa:d2:
         ad:a5:f8:24:ee:dd:be:f8:7f:58:7f:aa:bd:25:61:34:55:10:
         c0:1b:c6:47:72:73:9f:41:73:92:cd:23:a9:0b:d2:a6:c6:73:
         8f:48:6e:39:ed:ae:4d:03:e0:82:83:07:e3:ea:e7:5d:d3:72:
         21:61:15:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:12:07 2026 by rpki-client