Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68ad9ad7-d6d3-3cba-a5cf-bef57d7f8e4e.roa
File:                     68ad9ad7-d6d3-3cba-a5cf-bef57d7f8e4e.roa (raw, json)
Hash identifier:          +aOJaDhkRxXKz+AxxDLb7jNDGCj8cCpyRGc0FJnG4qw=
Subject key identifier:   50:44:A3:6D:8B:25:14:41:66:B6:A8:75:47:7C:5F:31:DF:B4:02:09
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D6AAA6FFDE2C1C826408FFAE0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68ad9ad7-d6d3-3cba-a5cf-bef57d7f8e4e.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     24319
IP address blocks:        23.54.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:6f:fd:e2:c1:c8:26:40:8f:fa:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=683d2cf9-c55e-45eb-af63-6228974cf703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:09:23:7c:1e:08:66:52:55:91:57:f4:2b:e6:
                    cf:1d:ca:85:27:98:42:b2:90:22:65:86:5f:47:0e:
                    ac:2a:b4:a6:bd:14:b2:d5:a7:ea:b6:90:bb:3f:56:
                    82:bc:90:e8:5d:92:c2:41:24:34:58:99:98:c8:53:
                    09:9a:a5:79:47:5c:f7:b0:e8:d6:7e:f6:56:cb:a7:
                    8f:af:40:e7:e3:fe:63:0b:8f:c2:47:16:08:fe:e6:
                    40:b7:63:eb:e2:0a:ab:19:3b:4e:e9:59:96:6b:23:
                    e1:96:f1:e7:3c:eb:ff:b1:2d:bd:92:75:b1:6b:50:
                    f5:29:0e:b5:b1:82:26:8b:a7:6f:d3:c8:5e:63:14:
                    8c:61:25:4e:81:6c:38:0d:e5:32:fa:77:35:1b:de:
                    bf:12:65:32:39:39:78:d1:5c:ae:26:bb:74:58:7a:
                    f4:15:52:31:0c:e8:3d:88:80:9f:c0:be:4c:e3:ab:
                    99:0e:f3:f7:9f:38:c0:ee:d5:14:04:fc:a7:66:cd:
                    2a:a9:75:b4:b2:6f:ee:6b:1f:d2:9d:5b:9f:e9:67:
                    88:42:4b:4a:4a:87:92:2d:c5:ea:cd:5c:af:1b:2f:
                    21:89:6f:8f:ad:88:93:e3:9f:a6:06:bd:df:94:8e:
                    ea:5c:7e:7b:6a:69:d4:5f:31:a6:a2:75:b5:63:83:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:44:A3:6D:8B:25:14:41:66:B6:A8:75:47:7C:5F:31:DF:B4:02:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/68ad9ad7-d6d3-3cba-a5cf-bef57d7f8e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:56:fe:42:83:9e:90:03:79:56:6c:8d:9f:11:cf:dc:35:0f:
         e5:be:52:a3:fa:b0:54:89:1d:00:2e:75:3e:d5:28:62:c6:ce:
         80:b7:b3:4a:51:a2:f6:40:8f:58:9e:da:ed:22:2d:6c:84:1d:
         09:66:18:b0:db:f9:3c:e8:9c:2e:d4:d6:23:7f:39:14:21:4a:
         f0:54:65:7c:6a:fd:38:75:b5:1c:43:58:b4:be:41:fa:ee:04:
         92:3b:8f:10:9e:70:81:f9:a4:80:89:2e:69:ed:73:67:8f:3f:
         25:d4:3b:f5:53:d9:df:d9:78:d1:05:df:78:15:3a:ea:12:28:
         08:31:fb:a0:ef:2f:1d:87:ad:fb:2b:ba:39:30:b3:16:39:48:
         a7:13:34:c2:e8:12:06:79:4e:d2:f1:f0:b8:1a:f4:d5:b4:e1:
         83:95:4d:36:88:37:e2:09:27:6f:4d:c4:fa:e4:72:49:e3:fc:
         7e:7e:0f:e0:10:b7:18:26:70:60:e2:92:3b:0d:f1:81:2e:cc:
         1e:4e:e2:aa:23:92:48:20:59:02:87:06:a4:e1:6a:64:f9:42:
         57:a0:68:8e:e5:aa:92:18:5b:d7:d7:5d:5d:c7:31:d2:5f:86:
         e1:b0:f5:f0:01:75:32:5a:54:a1:3d:dc:e6:5f:43:3e:1a:02:
         64:47:bb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:13 2026 by rpki-client