Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51c596c4-646c-3188-be40-fe7afeee2157.roa
File:                     51c596c4-646c-3188-be40-fe7afeee2157.roa (raw, json)
Hash identifier:          koLKNckpPhBLFaZ9NxOPZNnqfprvhFies+thQTo9otw=
Subject key identifier:   08:0D:5E:01:F5:C8:79:F8:BE:70:04:52:8F:4A:0F:30:07:17:FF:5A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D8695642AA21AA466F7C5B508
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51c596c4-646c-3188-be40-fe7afeee2157.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     16625
IP address blocks:        23.8.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:64:2a:a2:1a:a4:66:f7:c5:b5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=f1f2898e-7571-490d-9bf2-5aaa57a524ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:36:87:d7:c5:93:e8:6f:da:5d:8b:e4:9d:9d:
                    e8:75:6d:70:fe:19:0c:fd:c6:50:f3:78:a7:8e:0e:
                    66:6f:fa:dc:00:9c:2d:c2:ae:81:76:58:12:b7:e6:
                    25:b3:8c:df:8e:54:1f:cb:4c:b8:3e:5f:03:73:92:
                    72:1b:9b:5e:3c:9e:e0:8d:5c:36:a0:13:ad:47:48:
                    30:b1:94:86:cb:ee:cb:6d:ea:70:62:7a:48:86:ee:
                    34:2c:bc:78:70:e2:fe:7f:84:32:9f:57:73:b9:90:
                    af:d8:47:82:54:84:e4:b9:5c:f9:a0:71:4c:83:99:
                    39:37:75:9d:fb:dc:50:36:42:0f:b5:6c:fb:a7:55:
                    2b:b2:d0:71:1a:0b:68:45:77:1e:cb:92:29:8e:9d:
                    f8:a3:11:56:34:5c:51:d7:c0:ce:f4:85:1d:ac:55:
                    74:29:a1:74:1a:7e:cd:44:bb:5e:e0:89:23:31:7e:
                    7e:e7:7f:16:b2:26:65:7e:cf:52:64:cf:71:68:d2:
                    43:15:11:07:f9:e8:31:7f:b6:67:71:f7:62:be:5b:
                    77:40:8e:08:37:4a:c5:ae:9a:9c:08:cc:60:1a:ee:
                    3a:f0:02:17:85:a8:c7:f1:0f:5c:3f:46:0d:75:be:
                    1a:42:dd:d6:50:e4:a9:6a:07:a0:3c:87:2d:69:ee:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0D:5E:01:F5:C8:79:F8:BE:70:04:52:8F:4A:0F:30:07:17:FF:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51c596c4-646c-3188-be40-fe7afeee2157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.8.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:2a:c9:52:1b:95:6a:37:b1:a2:91:30:ed:e7:01:da:3e:07:
         ee:83:07:d4:fb:1a:9b:bc:17:e4:02:d0:65:c5:80:c8:5e:2c:
         36:3e:61:32:a5:5a:40:91:1e:4f:df:25:ca:d4:8b:2c:e7:59:
         8f:d2:4a:a8:76:1c:74:81:a6:ed:21:f6:31:8a:ea:69:59:7e:
         9f:84:10:66:64:c5:7f:18:66:d9:2d:f2:eb:b1:9d:d5:11:ed:
         cf:1f:fa:ce:c6:7b:8d:57:cd:44:b7:a2:b8:50:54:b7:2f:cd:
         73:6c:cb:a3:42:56:94:c0:87:0e:2b:c4:2f:10:e7:81:59:cb:
         70:e2:3f:45:06:6a:f9:3e:94:8d:03:43:a9:f0:44:d8:dc:24:
         af:d2:74:71:d7:05:45:23:ce:5f:bd:e2:ec:79:20:01:60:0c:
         7f:fa:b2:da:dc:7a:17:94:6e:98:20:e0:4a:ff:55:fe:a8:0e:
         b7:06:79:21:17:8e:b9:fe:67:37:99:e2:9e:8d:ce:a6:99:cd:
         26:bd:43:1b:0a:1b:53:c6:f0:6e:3f:8a:b9:e7:ff:2e:6f:83:
         4f:f7:68:33:be:c8:68:ea:12:22:42:54:8e:63:15:79:a9:24:
         c6:eb:03:da:a6:28:f7:ee:1f:25:a1:7a:03:61:72:b8:63:2b:
         21:5e:f1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:53 2026 by rpki-client