Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
File:                     5cc65789-e006-3aa4-ab5b-31603ba48809.roa (raw, json)
Hash identifier:          IbUmbtBMlOLLGxHpsRWoUH7FYclSbzIMWJ8hQE6MWoY=
Subject key identifier:   29:9D:75:C9:2A:2A:32:D7:1B:F3:C7:D5:50:92:91:C1:3B:19:70:D4
Certificate issuer:       /CN=af7885f2-5b14-4ded-b2dd-7befe215db07
Certificate serial:       010D0C9F4328584E3E5F3D49844B6DBC152193C0
Authority key identifier: BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     20067
IP address blocks:        23.148.8.0/24 maxlen: 24
                          2602:811:c000::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:3d:49:84:4b:6d:bc:15:21:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af7885f2-5b14-4ded-b2dd-7befe215db07
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=b16f27d4-5aa8-43df-a8a7-cbf11795335c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c1:c0:1e:68:c4:92:b7:07:19:81:50:64:12:
                    2d:21:de:93:83:e8:90:1b:d2:5a:b8:18:93:f5:c9:
                    68:e6:4d:38:dd:75:8d:fa:91:b4:3e:7e:9c:7b:c6:
                    10:35:76:03:b0:16:fb:25:fa:82:48:6c:b9:95:f8:
                    bc:e5:aa:dd:02:b4:bd:e0:3e:52:a4:71:d1:36:e8:
                    a3:5d:d9:88:f1:c4:54:ed:7f:13:0a:0e:5a:f4:18:
                    3d:c2:c8:5e:74:0a:9c:69:26:4e:a4:11:0b:22:f5:
                    62:a1:7b:da:2e:5c:cc:34:aa:6e:7b:d0:e7:f6:c0:
                    15:ff:eb:f8:cb:7f:90:af:c2:7a:b7:ef:b8:82:61:
                    c6:fb:99:7e:8c:43:8a:14:73:e2:f8:c9:7d:2c:9c:
                    72:90:35:88:ff:97:0a:c3:18:33:b9:f8:4a:92:0a:
                    74:e1:e4:71:39:b9:ee:cb:c6:02:48:69:87:a0:35:
                    df:33:1e:b9:88:90:dc:a8:a4:0c:f9:9f:01:5b:da:
                    1b:ea:8c:dd:c4:8e:57:9f:fb:4a:2b:ec:75:6c:c0:
                    06:94:bb:d7:1a:4a:10:91:1b:26:dc:5f:5b:b9:8f:
                    76:00:b4:06:ff:78:34:23:a5:aa:32:95:ef:15:4d:
                    ca:fa:ca:06:9e:af:0d:3b:2a:cc:9a:44:49:5c:cf:
                    19:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:9D:75:C9:2A:2A:32:D7:1B:F3:C7:D5:50:92:91:C1:3B:19:70:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl

            X509v3 Authority Key Identifier:
                keyid:BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.148.8.0/24
                IPv6:
                  2602:811:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f2:eb:2c:bc:3a:bc:77:3c:3e:ae:59:61:dd:b4:a7:c6:0a:
         91:ef:32:2a:3b:5e:5c:6d:99:d2:e4:46:68:ec:ba:61:51:38:
         6e:ff:e3:91:23:13:a4:a1:39:6f:0b:e0:ae:65:5a:80:b8:18:
         ff:61:8e:f4:28:7c:a7:ba:a7:12:83:45:af:a4:37:8d:62:5d:
         f2:0b:96:be:81:2b:a4:9b:e3:97:7f:77:3c:37:fd:e4:d6:88:
         90:24:0b:90:ff:43:d1:03:c4:72:02:63:b6:b0:ac:ba:5b:dc:
         0a:a4:c5:5d:fa:b4:57:2d:2c:24:0a:87:f8:bb:58:90:e4:70:
         66:50:c8:f3:ac:53:ba:28:87:56:0f:ac:42:60:a4:10:38:94:
         1f:09:68:6e:b7:95:01:28:61:35:ec:5d:31:5b:7a:7d:65:11:
         ab:6b:90:3e:2a:60:c0:52:b2:2d:9d:32:80:d6:9c:89:06:68:
         4b:fe:10:4d:9e:bb:81:8a:fc:3e:74:f0:82:7e:08:21:f5:42:
         13:59:36:00:5a:79:50:8e:f9:ee:bc:73:0d:db:72:91:2b:5a:
         37:b7:18:aa:94:db:d7:3a:42:4f:4d:4c:8e:2a:7d:7c:54:32:
         ec:c9:a2:18:25:e8:d0:75:3f:ad:37:0c:8d:24:ff:b8:d5:64:
         b0:68:41:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:29 2026 by rpki-client