Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1389414-9f3f-36b2-8aa8-3d67dfb1bd6a.roa
File:                     c1389414-9f3f-36b2-8aa8-3d67dfb1bd6a.roa (raw, json)
Hash identifier:          1PBuQsp6ZuTDJkeO8G7yUvcZ9J/C08xsmnUjcI7foR8=
Subject key identifier:   DF:AD:5F:44:23:D3:F7:30:D0:DF:9F:61:20:83:FA:2A:2B:8F:09:22
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D4D5A99E5031397A2A46F4C80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1389414-9f3f-36b2-8aa8-3d67dfb1bd6a.roa
Signing time:             Fri 27 Mar 2026 01:00:31 +0000
ROA not before:           Fri 27 Mar 2026 01:00:31 +0000
ROA not after:            Thu 25 Jun 2026 01:00:31 +0000
asID:                     20940
IP address blocks:        23.216.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4d:5a:99:e5:03:13:97:a2:a4:6f:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 27 01:00:31 2026 GMT
            Not After : Jun 25 01:00:31 2026 GMT
        Subject: CN=ac0e12e8-09f4-47b7-9528-dcb8fd99609b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:86:14:38:44:e9:18:b5:e6:80:f0:e7:bb:d7:
                    82:d5:29:db:9e:96:dd:08:e8:fc:de:b9:4f:dd:9b:
                    84:ea:07:0f:14:e4:33:c8:d8:e2:aa:46:63:0b:0a:
                    60:18:3f:f6:66:cc:fe:2c:f0:68:19:bd:71:e3:65:
                    c5:d3:8a:87:f0:1b:d6:09:7f:be:a8:36:b1:f8:83:
                    85:22:e6:8a:9a:69:f8:44:2f:8b:bd:40:8c:78:28:
                    b3:da:b4:a3:f5:e6:4f:a9:56:78:39:7f:90:26:7e:
                    b3:f1:d3:96:bd:dd:b0:ff:0e:04:b8:d7:50:6e:f8:
                    7e:85:fc:c2:3e:a5:3e:1f:26:93:a1:44:4e:02:5c:
                    d5:26:f3:f8:d5:b1:c1:27:f5:c9:26:6f:5e:81:4a:
                    92:9e:46:ed:ea:60:7c:30:dd:bf:19:9c:e0:68:ec:
                    0e:44:cc:30:05:76:e8:a6:ef:d2:c6:c8:1f:c4:5d:
                    75:5d:ab:42:7a:ce:f9:ca:1c:29:11:78:2f:69:c0:
                    b5:4f:4b:c0:3a:25:3f:bf:13:6c:4d:4d:c6:f3:84:
                    04:99:4a:7b:9b:bd:fa:36:92:26:da:13:2f:47:e2:
                    a7:95:be:c3:e4:a0:0b:ed:57:52:58:04:50:84:50:
                    46:84:14:21:82:2d:19:9f:4e:f1:d1:cd:4b:37:37:
                    f8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AD:5F:44:23:D3:F7:30:D0:DF:9F:61:20:83:FA:2A:2B:8F:09:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c1389414-9f3f-36b2-8aa8-3d67dfb1bd6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.216.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:30:2c:bb:7f:ec:8f:f6:5b:9a:12:48:e0:dd:e5:59:f4:88:
         54:98:f8:74:6e:75:6f:ea:16:42:d7:e6:39:57:aa:44:fd:67:
         cf:d6:21:e4:e3:f5:da:e1:b3:be:77:fe:03:f2:d6:c6:c4:ee:
         f7:33:88:5a:cc:b4:59:d1:c0:cc:25:1e:24:7a:4e:8a:8c:1a:
         aa:fc:30:fe:bf:af:f1:bf:53:22:62:05:1d:66:ad:c5:26:4e:
         12:8c:fd:b6:4d:b8:ef:f3:26:c6:40:91:8b:56:c2:7b:c5:42:
         47:c5:a1:a9:fb:0f:5e:57:23:aa:b8:29:d8:0e:9e:76:4b:84:
         1e:bc:7b:12:53:91:5d:68:4d:9a:87:cb:56:a2:12:a0:09:da:
         ee:3e:54:c4:4f:2f:ef:bb:ef:f7:d4:46:c8:50:3b:ca:5f:1f:
         09:ea:0a:47:17:d4:76:7e:b5:69:76:b4:6f:30:6e:c5:ca:6b:
         ca:3f:e9:3d:04:08:3f:fb:fb:51:2d:af:e9:a8:5d:b9:c6:29:
         56:12:10:be:ee:9e:db:57:cb:58:2d:16:d2:d5:b1:77:fd:5e:
         06:e2:50:68:29:40:1d:72:12:f5:13:6e:0c:f3:5a:a9:26:c0:
         a9:66:fd:a7:1e:f5:34:c3:32:b9:39:9d:82:5e:b3:b5:d6:d7:
         e7:ee:ea:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:29:45 2026 by rpki-client