Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa
File:                     25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa (raw, json)
Hash identifier:          dN7UBXTM9G3O1L7Oj8wLklVHGH3X/w3TMUVVz2H87EY=
Subject key identifier:   06:C2:64:1F:64:C4:C7:37:3D:AB:10:F2:95:6C:E5:B5:2C:8D:F0:A8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E94EA536F2C20FAECAD5AFC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     20940
IP address blocks:        23.207.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:53:6f:2c:20:fa:ec:ad:5a:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=2e075897-2ff5-4014-990f-3e024be93159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2b:b3:94:97:6c:eb:35:7d:29:cb:5f:60:74:
                    de:78:5f:d6:b7:3e:8a:8e:95:91:5f:ef:3a:e8:3b:
                    34:22:4f:61:4d:3e:34:85:a8:53:b2:63:0d:c1:ab:
                    e9:fd:e7:62:25:f9:c4:18:a8:f1:c2:b4:36:42:6f:
                    ce:ef:c6:c3:4d:47:0f:bf:68:30:88:41:ff:13:a3:
                    14:3f:c1:6b:42:6b:61:d0:62:1b:e4:cc:2e:41:31:
                    0f:e3:50:01:ff:ba:b5:58:70:8e:78:4a:c7:9c:13:
                    0d:88:a9:3e:96:df:5f:70:a7:3f:40:dc:ac:7a:13:
                    df:7c:c8:ce:14:ba:72:52:1f:84:da:a6:51:fb:4f:
                    47:8a:95:46:7a:20:bd:76:78:8f:85:8b:9d:55:fa:
                    f6:b8:49:ce:4c:5a:71:6a:0a:4d:27:ef:6c:3a:89:
                    f3:e4:97:76:31:54:c9:fe:75:98:96:79:65:63:a0:
                    f8:da:3f:1f:38:15:c8:04:70:43:8e:fe:76:09:0d:
                    1d:9c:fb:56:78:db:5e:2c:4c:9e:b3:54:ac:5a:4d:
                    5d:96:ae:b1:78:30:ed:16:8a:43:f3:65:80:9f:45:
                    48:10:2f:01:2a:25:45:29:1a:03:83:42:c8:5c:d0:
                    87:d7:e4:5a:74:cc:1c:e0:4b:e9:07:88:ec:f4:bd:
                    d5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C2:64:1F:64:C4:C7:37:3D:AB:10:F2:95:6C:E5:B5:2C:8D:F0:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/25e9fe1c-36a8-3d91-aaa8-c813a3b465ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.207.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:27:64:a8:49:66:03:05:15:75:1d:1a:69:18:07:ba:b9:47:
         eb:f3:98:13:41:ec:7f:b6:62:b0:8e:74:68:db:a8:bc:83:dc:
         39:85:31:37:d4:56:b0:f7:f6:80:37:cd:65:a3:f5:56:ef:ed:
         fb:5f:cf:52:ce:99:ec:91:68:c6:30:11:ce:29:21:12:57:1f:
         fa:c8:48:ef:e9:db:17:f6:c2:17:32:81:06:ea:b5:0e:c4:01:
         db:76:50:b9:80:2b:f6:62:a1:b3:25:34:ea:52:c6:2e:7b:2b:
         c2:43:c2:22:61:1a:01:d3:da:d7:04:dd:ed:0b:20:b8:c9:c3:
         d9:25:3e:e4:a0:ea:0c:f6:d4:8e:c5:9b:7d:3a:26:03:52:91:
         07:82:a6:c9:7b:93:f3:7c:b1:d1:d1:c6:da:5f:70:7e:53:22:
         94:fc:ad:3b:d9:e3:f0:ce:7c:e0:9b:30:0d:12:c1:3a:c7:89:
         7a:3f:7f:9a:01:54:10:46:7f:35:05:45:89:a0:fc:7c:15:9d:
         f8:4c:45:25:89:fa:e5:3e:45:98:25:41:54:b4:69:ad:1f:0b:
         63:b0:9c:f0:7f:9e:26:f0:2e:08:07:fc:bb:d2:d1:a3:58:86:
         06:8f:a7:f2:0e:24:8b:06:33:14:6e:3d:4e:43:53:f9:f7:91:
         4e:e8:f4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:33:50 2026 by rpki-client