Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435f33b2-752c-39e4-877d-e9e4ac1bf294.roa
File:                     435f33b2-752c-39e4-877d-e9e4ac1bf294.roa (raw, json)
Hash identifier:          2dz9S0DEYKsWIB/WwZ6PEkJBrPdsbelA55RbdoSYuAI=
Subject key identifier:   F7:AE:83:34:7A:D6:48:83:97:26:4E:24:D6:EA:C0:9D:37:A2:D9:60
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D869565DDFE3CC80C45A9ED80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435f33b2-752c-39e4-877d-e9e4ac1bf294.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     16625
IP address blocks:        23.15.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:65:dd:fe:3c:c8:0c:45:a9:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=0d5e06b1-04b4-42cd-88ae-052276250eb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:31:13:7f:b4:7a:ac:cb:70:14:11:13:9f:
                    26:28:41:01:6c:3f:aa:bf:2d:b6:f4:96:81:65:b7:
                    eb:6d:ec:74:61:77:e5:74:46:36:0c:cc:da:68:91:
                    cb:4f:f4:d8:63:51:a9:9b:40:79:26:dd:e1:49:92:
                    7f:66:15:f7:45:04:d4:28:fd:5f:ff:46:c2:18:63:
                    c5:4a:d2:34:df:13:c2:76:6c:66:93:c2:90:92:14:
                    79:52:f1:1e:ff:a4:79:e7:9d:26:75:2e:f3:45:e6:
                    7a:a8:74:aa:8e:a7:bb:0a:d2:91:51:59:7e:32:3d:
                    83:e3:08:de:7a:21:46:4c:17:cf:8e:79:81:6b:18:
                    c1:ba:26:3d:71:7c:b5:b3:55:7d:1b:08:54:59:0a:
                    b8:38:3d:ef:7c:78:25:0e:b3:2c:a5:b2:f8:ca:94:
                    21:b2:22:db:52:66:13:be:2e:4b:4e:4e:59:2d:a5:
                    13:ba:df:4e:74:e7:23:5a:0e:3b:1f:36:2f:6d:6a:
                    53:6f:4c:ad:6c:21:6e:8f:83:8b:ec:89:04:8f:f1:
                    3e:aa:e9:c1:b8:d1:af:f1:f1:6a:81:49:c2:1f:45:
                    4f:b3:50:31:4c:ae:f6:a2:6d:8e:d5:16:a8:62:6d:
                    9b:36:5b:36:34:f2:af:dd:73:1f:8b:51:00:cd:8c:
                    bd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AE:83:34:7A:D6:48:83:97:26:4E:24:D6:EA:C0:9D:37:A2:D9:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/435f33b2-752c-39e4-877d-e9e4ac1bf294.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.15.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:30:8c:3f:e6:25:fe:f6:94:b5:d0:c5:3e:c1:9c:61:8a:cb:
         dc:81:ff:16:5e:28:8c:c7:61:a6:29:c6:08:eb:80:d8:85:40:
         4d:63:38:fb:46:f5:e2:62:c1:21:18:fd:9e:f6:e1:7d:87:7c:
         5a:24:64:a1:a8:b5:1d:94:ac:03:96:aa:be:c2:ef:e3:45:7e:
         64:40:8d:89:86:03:e9:a3:a2:2f:aa:f4:b5:1c:52:2b:18:d4:
         2e:0c:fa:72:bb:01:79:12:bf:3b:63:a1:2a:18:f5:7e:ba:9b:
         21:08:53:7d:1c:c4:ab:73:9c:da:04:76:48:b0:17:4b:e9:e1:
         59:c0:de:8e:c1:c2:6e:bd:83:b3:e4:ea:65:40:50:3c:9e:93:
         ec:7d:fe:63:b0:21:d7:94:68:4c:73:e3:63:5e:38:3f:92:4d:
         d7:bf:1d:be:0b:da:ec:3a:f3:88:7d:83:37:77:61:ba:16:34:
         b2:5c:a4:cd:a4:09:9c:d7:85:42:c2:6c:f2:7c:5d:e3:20:6f:
         4f:f5:69:3f:76:d8:9e:a7:e3:5e:83:d8:af:01:2c:17:08:08:
         8a:51:57:ad:57:3b:3d:80:0d:60:36:49:41:4b:7d:11:23:8f:
         83:7e:0e:1a:28:ab:3f:7b:39:96:92:76:c6:f6:4a:89:b1:b3:
         3a:3b:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:37 2026 by rpki-client