Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65ed61c6-ff7e-36cd-89e4-7015566a633b.roa
File:                     65ed61c6-ff7e-36cd-89e4-7015566a633b.roa (raw, json)
Hash identifier:          dFPDmho7RSVIvih92xqHy/cTW1SP+Xe+J5s38I0j2ss=
Subject key identifier:   65:6C:1A:21:2E:3E:19:95:01:10:0D:73:0D:66:4F:BC:BA:FC:8D:94
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D07AD19528087470FB0AE42C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65ed61c6-ff7e-36cd-89e4-7015566a633b.roa
Signing time:             Mon 02 Mar 2026 02:00:31 +0000
ROA not before:           Mon 02 Mar 2026 02:00:31 +0000
ROA not after:            Sun 31 May 2026 01:00:31 +0000
asID:                     20940
IP address blocks:        23.201.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:07:ad:19:52:80:87:47:0f:b0:ae:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  2 02:00:31 2026 GMT
            Not After : May 31 01:00:31 2026 GMT
        Subject: CN=204d6c04-c857-429a-ba6c-5dcfe87893fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:f7:86:93:d9:b5:b7:25:1c:c5:fb:19:aa:
                    70:11:2e:53:59:4c:75:c8:4e:10:12:42:16:63:47:
                    12:e8:58:ca:37:ca:af:c5:22:26:97:7f:85:cf:aa:
                    3e:eb:cd:d5:b5:04:c2:d0:f9:1d:20:5d:80:e6:6f:
                    0c:61:82:bc:81:49:c9:e1:f8:3a:bb:c2:19:a8:28:
                    b4:3a:eb:1f:54:53:8d:46:28:f9:78:e0:a5:7a:b5:
                    79:e3:4d:a1:d1:36:61:ad:74:3b:47:93:9b:0e:02:
                    52:4f:dc:3f:f7:29:a3:ca:fd:fb:93:9e:af:b4:22:
                    77:24:8d:9e:7c:3c:a2:1f:4e:50:7c:4d:00:bc:cb:
                    01:f3:b8:ab:a4:5b:af:66:ed:42:0d:d3:66:25:23:
                    63:77:bc:71:c2:ea:22:f1:2c:14:ab:4c:be:b2:c7:
                    ac:75:7e:49:5b:20:e0:4d:d1:a6:1d:49:06:f9:73:
                    67:dc:a6:24:a0:64:6a:03:0b:ef:44:81:29:59:68:
                    5e:e5:28:24:c5:01:eb:7e:11:34:93:a9:9a:de:5a:
                    76:26:d4:25:44:82:86:27:7f:80:47:1a:ec:c0:c9:
                    37:64:98:7a:67:46:fb:b2:5a:1e:2d:bc:4f:92:af:
                    03:e8:74:8c:72:56:e8:ce:2b:77:7d:7e:41:40:cb:
                    11:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6C:1A:21:2E:3E:19:95:01:10:0D:73:0D:66:4F:BC:BA:FC:8D:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/65ed61c6-ff7e-36cd-89e4-7015566a633b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:39:bd:65:ab:59:1a:c8:b1:ed:a7:45:32:3f:7e:ee:48:3c:
         b8:b8:ce:af:f3:28:13:1b:a9:b3:fa:0d:7e:04:16:1f:e1:7d:
         6f:06:23:e0:94:b6:c7:62:78:e4:c3:70:c7:20:a1:b0:71:3e:
         ea:5a:c3:d5:cd:dc:04:ba:ec:80:f8:90:bc:d8:ad:bd:d8:07:
         ac:dc:c4:ce:85:3e:68:0f:99:38:4c:1e:e7:5b:62:9e:b0:a3:
         a5:84:6e:73:2c:f6:14:d8:55:b4:24:d9:1e:ec:ff:87:58:86:
         34:31:e2:95:99:64:70:89:ba:76:fa:a5:ad:29:6c:77:09:29:
         3a:00:c0:67:31:cc:b6:1e:d8:f9:a2:17:80:15:bd:ec:fa:1a:
         43:6d:8d:1c:a3:2a:67:46:20:e1:7d:16:98:9c:8f:a5:6f:94:
         fe:7f:98:26:fa:2c:1e:6a:e0:9e:03:31:f7:5c:74:90:cc:94:
         db:d1:2a:71:09:43:12:d4:79:a3:70:20:b5:57:b9:83:eb:95:
         54:fc:a5:43:e5:dc:ca:cd:9e:cf:dc:d1:9f:67:97:e1:4d:fd:
         20:41:cc:0f:6b:22:c5:50:0b:6f:09:46:91:50:5b:b8:0d:1e:
         7f:c1:da:9a:9a:9f:ba:2e:8a:cf:29:cd:7b:ae:5e:6e:03:28:
         a6:a5:b1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:26:34 2026 by rpki-client