Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38b36f73-bf8f-3932-8d9f-f05f933598dd.roa
File:                     38b36f73-bf8f-3932-8d9f-f05f933598dd.roa (raw, json)
Hash identifier:          kbTPXYq9Q8Yg20PPOfyMTL3iJjsr5wxkpFkRUfERVM4=
Subject key identifier:   8A:65:F4:1D:01:31:32:EB:1D:06:94:B5:1A:9E:E6:10:C7:3C:0E:9B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DC565A938177829F5279E4280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38b36f73-bf8f-3932-8d9f-f05f933598dd.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     16625
IP address blocks:        23.52.192.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:a9:38:17:78:29:f5:27:9e:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=807a7ee7-305a-45ff-bcd1-83b81a3dbad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:30:5d:b1:95:f8:0e:6d:cf:03:68:2d:e0:3f:
                    41:86:3a:20:ad:0e:05:da:49:a0:33:82:14:80:a5:
                    e4:6c:72:9d:0e:ec:f6:17:28:94:5d:09:03:d2:e8:
                    aa:35:5b:ec:d8:d5:75:04:43:63:a7:db:1d:a6:15:
                    41:1b:28:cd:5e:40:09:2a:bf:ea:f8:04:03:51:69:
                    c9:3b:71:63:49:7f:65:96:d1:b3:b7:8e:b8:19:20:
                    c9:24:a3:f7:a8:6a:af:c2:10:7c:b5:80:58:34:cf:
                    e2:d7:41:4d:21:df:8f:93:17:42:df:6f:83:a1:89:
                    47:da:4e:15:fb:cb:d3:0b:9c:a9:fa:43:c8:55:1b:
                    49:7c:fb:8c:55:00:b2:70:b1:f2:bb:7e:aa:43:db:
                    c8:3b:56:e0:88:ae:20:2e:35:b8:1c:f8:98:d3:a5:
                    03:7f:a7:4a:11:7a:06:56:09:b6:7a:16:d3:fe:b9:
                    0b:06:9c:9f:6f:5f:a7:44:95:36:2f:12:2b:1b:19:
                    0c:19:b9:ae:6f:e9:55:cf:cd:07:73:3e:82:be:f5:
                    be:09:79:29:90:f3:2f:99:3c:ce:25:36:d2:9e:f5:
                    49:18:f6:84:ba:fe:81:9d:e7:1b:ea:cf:45:5b:a8:
                    db:2f:bc:13:65:2f:ed:53:78:12:24:d6:00:c9:fa:
                    13:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:65:F4:1D:01:31:32:EB:1D:06:94:B5:1A:9E:E6:10:C7:3C:0E:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/38b36f73-bf8f-3932-8d9f-f05f933598dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c5:96:39:f5:12:1e:f1:ef:b7:6e:b3:ab:f1:dc:8d:f2:7c:
         63:2a:6c:3c:2d:c0:f1:85:d4:06:6c:e9:0e:79:c9:4a:b4:f6:
         6e:19:b3:64:7a:a4:7d:e7:d7:d3:00:9c:f8:60:1c:32:27:0c:
         a5:a2:ae:d9:48:36:f1:e0:98:d1:f6:ee:27:a6:a0:fd:7a:92:
         a4:6e:f7:de:1f:1a:f7:eb:dd:18:5f:92:bf:d9:c3:2b:9a:f2:
         cc:03:c1:28:ba:c1:94:fe:ad:09:48:a8:85:ca:b8:73:ac:8c:
         49:e9:dd:da:95:ab:b8:c2:85:b0:d7:f6:ac:d1:cd:6f:66:44:
         06:56:d8:34:9d:5d:67:b4:75:75:da:fe:18:9c:ce:e4:a7:92:
         91:9a:64:4e:cd:c1:ca:b3:34:02:17:7e:24:41:21:34:f5:2f:
         b8:0a:85:0d:e1:55:a9:90:7a:08:e2:ef:7a:29:3d:c5:45:79:
         55:63:73:d8:b7:e0:88:33:1e:d6:bc:4c:d6:1e:2f:a4:e9:b9:
         79:60:9d:3b:d8:3b:b6:02:0c:2e:37:d8:0d:8f:1a:9f:b9:76:
         60:cf:ac:bd:2d:c8:04:a2:2f:84:5c:3e:44:31:b0:8f:45:0b:
         11:e1:78:55:82:f8:3b:98:c4:74:3e:03:42:46:5a:20:1c:af:
         48:4b:8b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:12:10 2026 by rpki-client