Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd6b1bfa-5ac7-3045-8e1d-16de423af862.roa
File:                     dd6b1bfa-5ac7-3045-8e1d-16de423af862.roa (raw, json)
Hash identifier:          cyhXZRqtyenTrw56iGdFnbl6GoH/77tzpS0SjBBeuCk=
Subject key identifier:   91:25:AC:0F:AA:F9:1E:5E:8A:4F:9F:D7:2F:EB:17:A3:79:7A:6B:F3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DF2108805262C76F5E33F4E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd6b1bfa-5ac7-3045-8e1d-16de423af862.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        23.55.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:88:05:26:2c:76:f5:e3:3f:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=9c35f575-b95f-4b62-b9d5-d38447b738af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:8d:cb:dc:c9:55:47:3b:9c:79:08:df:a2:
                    5d:6e:e9:8b:94:0e:3f:24:b3:79:29:d6:d1:e9:39:
                    41:95:a0:1f:e9:e8:bd:f8:b6:9e:88:b0:e6:2f:7b:
                    0b:3d:99:de:6a:58:60:e4:4c:b7:ee:08:26:2e:84:
                    63:8c:6f:31:e3:68:a1:82:6d:53:57:3a:86:69:bd:
                    c1:d3:a2:16:72:26:29:7e:64:df:65:a0:cc:10:6e:
                    26:f3:3d:2b:4c:20:c0:fe:3c:d8:ed:77:61:e7:78:
                    81:d8:0a:66:be:5f:3e:15:42:dd:56:33:7a:f3:cf:
                    f7:bc:e2:57:25:04:5d:f0:5f:ed:82:76:7a:e5:3a:
                    22:ae:1e:e5:d6:bf:5c:c1:79:07:12:b3:f2:1d:29:
                    74:f0:5a:38:21:83:ce:97:d9:a6:53:0d:9c:eb:ef:
                    38:54:3c:a8:82:f6:1c:3e:d9:ee:e6:ad:7a:3f:24:
                    d3:67:29:fe:dc:18:f7:8c:4e:9a:fd:eb:a0:e6:d2:
                    d0:5a:f4:53:a1:fd:f2:04:47:f1:53:58:3c:56:c6:
                    95:19:27:59:3c:a3:dd:af:85:ad:8c:98:c5:57:a4:
                    21:34:04:f1:40:25:08:be:15:62:1c:7c:60:22:18:
                    cf:ce:31:ca:c8:81:13:09:8a:fc:01:c5:35:e9:ff:
                    7e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:25:AC:0F:AA:F9:1E:5E:8A:4F:9F:D7:2F:EB:17:A3:79:7A:6B:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dd6b1bfa-5ac7-3045-8e1d-16de423af862.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ca:75:89:d6:94:83:1c:2c:7e:2f:5a:20:62:35:aa:5b:2c:
         66:cb:f8:28:84:48:25:31:a1:86:82:92:8c:8c:40:dc:9a:ac:
         c0:c8:4c:ed:36:8a:2f:ea:27:93:d8:e0:c7:90:a1:57:bc:89:
         eb:14:73:cf:26:65:06:0c:18:1a:13:9e:47:a1:bc:03:58:4a:
         9a:9f:f7:b0:88:a8:f9:6b:f6:8c:80:61:d1:6c:e4:00:f7:89:
         20:46:c6:d2:c6:2c:9c:5a:74:58:53:03:82:ed:cc:1b:0e:fb:
         f1:fc:68:78:69:37:dd:2b:ba:4b:8f:21:6c:3f:4e:43:c1:35:
         6a:0e:aa:f8:fe:66:3d:0d:b1:a4:54:02:f8:10:2c:24:84:bd:
         73:6e:d8:2b:73:97:9c:b0:10:bf:60:bf:c4:16:53:7a:a9:fb:
         e7:b1:e9:d7:07:d5:ac:d0:eb:46:f8:48:f9:71:2a:98:73:5b:
         de:e3:9d:07:4c:47:b9:94:6c:a2:41:b5:40:e5:10:a8:eb:f8:
         2b:c0:c9:f3:e4:60:bd:c1:54:73:a2:ca:68:50:38:3e:70:0e:
         d9:64:e1:be:5a:53:af:cb:e8:94:b9:77:72:d0:2b:41:7e:67:
         34:72:f3:15:ae:29:a0:d6:8d:bf:bb:b7:cc:eb:ee:61:5f:37:
         43:1c:17:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:19:15 2026 by rpki-client