Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df0e045f-81fa-3af0-9d2d-ae23f924f72b.roa
File:                     df0e045f-81fa-3af0-9d2d-ae23f924f72b.roa (raw, json)
Hash identifier:          lykx/2UIqBNCZehPshcZPspfjljOny7/bMo5gVgqSKw=
Subject key identifier:   B3:BD:4E:55:81:AE:21:E9:77:13:74:75:09:0F:A9:0C:F5:B6:EA:48
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D869564500A243492F65A6B60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df0e045f-81fa-3af0-9d2d-ae23f924f72b.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     16625
IP address blocks:        23.10.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:64:50:0a:24:34:92:f6:5a:6b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=e6a34e30-007b-4efc-811d-503b3578709f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:dd:f1:cb:e4:61:b4:47:26:0a:9c:f8:f5:
                    5d:c1:9d:16:75:c8:41:a0:de:40:cf:a5:b1:66:59:
                    3b:a2:63:29:bb:07:bd:e8:35:ea:51:57:0f:b9:20:
                    40:b7:30:59:b2:fe:14:1f:74:42:6e:92:e8:75:d8:
                    9f:2a:e8:10:72:ec:ab:29:61:eb:8b:25:ef:14:31:
                    57:02:39:50:bc:95:ae:96:27:3c:34:0e:59:68:ec:
                    15:2f:2e:ef:ae:8a:b3:25:6f:57:6f:40:db:f7:ad:
                    83:6e:e0:af:3e:ad:b4:2b:0a:a9:1f:da:f4:07:24:
                    9b:40:2a:da:c5:19:2e:61:d6:9f:44:6e:f5:81:45:
                    dd:e5:d1:57:d4:1e:3b:46:e6:ee:b4:f7:c5:e6:04:
                    6e:78:ae:00:a3:e5:39:b8:cc:38:79:c3:84:e8:38:
                    a9:70:d8:2c:58:7c:ee:4b:ca:aa:7a:a8:53:43:c0:
                    0e:cb:e7:b6:c9:1e:63:3d:7b:eb:ff:9b:56:ba:af:
                    a2:00:53:99:56:24:ef:2a:8a:17:b4:4f:f6:5d:9d:
                    51:b2:19:04:29:07:d9:4f:4c:4a:59:86:77:22:c9:
                    c8:6f:0c:45:3f:f4:b9:f9:7d:b9:07:b8:75:17:90:
                    99:4f:e3:0d:fc:29:7d:23:85:d3:d5:9d:3f:e6:3c:
                    85:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BD:4E:55:81:AE:21:E9:77:13:74:75:09:0F:A9:0C:F5:B6:EA:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/df0e045f-81fa-3af0-9d2d-ae23f924f72b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.10.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:16:1e:a2:77:29:e8:06:0f:eb:65:fa:ca:82:90:0e:9e:13:
         24:be:a6:7e:3d:d2:86:61:a6:28:e6:bb:ef:2b:88:80:af:ef:
         91:43:de:31:0a:96:06:6a:ef:62:47:d1:45:c5:3c:a8:d4:16:
         e2:0d:23:68:d6:c7:00:67:65:37:ca:05:ea:5f:52:25:73:12:
         6c:be:a2:3f:d4:77:cd:cc:de:66:d4:51:73:7f:77:11:25:81:
         13:81:25:1f:d9:9f:58:45:a3:b9:6d:42:c0:31:83:d4:b2:a6:
         99:cc:5f:58:e2:7a:7b:8a:7d:c4:b0:de:ea:9f:dc:22:ae:03:
         c7:41:2f:d5:a9:07:5c:b5:7f:75:35:52:3a:86:cc:2c:f7:d5:
         ba:97:1c:71:77:ee:fd:da:ba:75:b9:31:3d:e8:37:b6:c6:9e:
         14:7c:92:c6:2b:b0:9d:df:dc:20:2a:45:42:f6:f0:58:a5:2f:
         18:a9:ed:17:c5:5d:96:26:fb:f9:9e:25:a0:ad:86:be:dd:66:
         fa:20:3d:cb:90:06:84:99:42:e3:1c:d0:34:95:19:66:db:80:
         2f:18:1c:78:df:71:1e:63:92:12:0d:e0:1b:66:8f:64:b1:0e:
         9e:2d:d4:d4:22:ca:cb:e9:e8:d1:75:8f:b5:aa:f0:de:96:18:
         19:a7:8c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:54:52 2026 by rpki-client