Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafec815-3ec3-3f35-ad7c-db4fbebf5aca.roa
File:                     dafec815-3ec3-3f35-ad7c-db4fbebf5aca.roa (raw, json)
Hash identifier:          Duqif1wXJwku8nrCMF9TkAPgOa+4iMfvEOHZZR86LWQ=
Subject key identifier:   C7:A6:95:E0:1E:06:86:B3:57:A0:30:2B:FF:F2:AB:F2:6B:3B:21:D1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D87FA91D1F90B965D10C4AC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafec815-3ec3-3f35-ad7c-db4fbebf5aca.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     16625
IP address blocks:        23.59.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:91:d1:f9:0b:96:5d:10:c4:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=a668c956-7fb0-4fc6-9554-c0b2796f3817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:7f:3f:97:6d:36:d7:0c:d1:c6:4c:75:31:
                    c4:e9:26:7b:de:c8:70:6f:06:57:be:6b:66:22:17:
                    c7:26:0e:ac:65:4b:f5:2a:73:69:f4:1c:4c:92:0e:
                    9a:b8:d9:bb:3c:bb:99:e0:a2:03:3c:bd:84:2b:ee:
                    20:c9:d3:cd:92:23:e1:b5:51:63:8e:cf:49:c3:58:
                    f8:50:97:0c:a9:01:5e:1b:ad:bc:91:93:1d:5e:0b:
                    c2:c3:d6:50:20:d4:63:45:e3:c5:31:1c:30:b2:65:
                    0b:36:23:9e:cd:2f:f6:1b:ab:e5:4c:be:25:1b:29:
                    22:00:5b:72:2b:53:de:72:0b:49:59:6e:7c:68:77:
                    26:d9:1e:7a:99:5a:01:f4:6e:dd:b1:8c:41:c3:12:
                    e8:5b:19:84:1e:a2:05:e9:4b:59:b3:2d:e1:47:49:
                    a0:4d:c1:8f:07:f5:49:f0:b4:41:2a:56:43:75:d3:
                    3e:76:e1:5c:67:bb:a1:5b:a6:15:3c:3c:85:65:fd:
                    0d:3b:13:6a:85:db:d4:0b:41:37:d0:4b:98:85:bd:
                    57:e6:0e:b6:bc:ee:ca:c1:e0:8d:d1:8b:85:62:63:
                    74:b4:6a:0a:22:76:b8:25:8b:14:1b:4b:0a:a5:f3:
                    ec:45:2f:1e:e1:cf:33:5c:6d:0c:85:c7:6c:8b:36:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A6:95:E0:1E:06:86:B3:57:A0:30:2B:FF:F2:AB:F2:6B:3B:21:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dafec815-3ec3-3f35-ad7c-db4fbebf5aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:a4:ab:6d:a7:9a:db:96:b9:28:96:b7:19:c2:80:bf:80:94:
         34:66:7c:5e:c2:f5:32:0b:83:2c:c5:0f:fb:99:93:f6:6a:af:
         76:33:ed:88:26:23:84:8d:75:a6:48:ef:16:70:8c:a1:14:24:
         16:18:f1:22:54:3b:6f:2e:f7:f8:73:5f:c5:93:1c:7f:9e:26:
         1d:45:d3:ed:64:4c:18:26:2a:81:f3:3a:14:34:31:bf:e5:69:
         f0:bd:4f:a6:4e:78:46:92:d7:7a:45:a8:77:06:c9:d4:b5:19:
         51:31:3a:ff:78:0e:9e:aa:36:0a:78:9c:ff:25:be:26:77:70:
         1f:3b:2e:7c:ae:ba:b1:fd:53:67:07:29:af:28:93:16:49:da:
         da:54:8b:53:12:64:01:53:9c:4a:52:d3:84:ac:b1:ed:90:c7:
         1b:02:11:c5:90:ca:91:5f:b8:47:d3:e7:b6:be:57:fe:03:89:
         f4:19:f4:5a:51:cd:a6:39:97:93:9b:5e:ce:f0:1a:f0:8f:d0:
         22:7d:fc:6e:b7:e6:0b:08:17:6a:aa:dc:1f:e8:d9:61:0f:46:
         07:00:da:55:ea:13:db:0f:96:21:84:1a:f4:ad:c5:0e:41:c3:
         94:3c:5f:35:93:f9:d1:be:5b:a4:5a:8d:b6:c0:a3:e2:f6:4d:
         2f:bf:f3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:35:00 2026 by rpki-client