Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b90f406-a065-3ee6-a8ca-9c45bc36adc5.roa
File:                     4b90f406-a065-3ee6-a8ca-9c45bc36adc5.roa (raw, json)
Hash identifier:          /8JIv0ruWnRbbcUV+S5tfpzZgz9K1MoSo9WHn3+MUQk=
Subject key identifier:   EE:4C:F1:86:7B:9E:6A:3F:72:8B:03:78:2F:3E:B9:AF:9B:67:FB:8E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D316F721D437640CEBD391040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b90f406-a065-3ee6-a8ca-9c45bc36adc5.roa
Signing time:             Tue 17 Mar 2026 01:00:32 +0000
ROA not before:           Tue 17 Mar 2026 01:00:32 +0000
ROA not after:            Mon 15 Jun 2026 01:00:32 +0000
asID:                     16625
IP address blocks:        23.47.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:31:6f:72:1d:43:76:40:ce:bd:39:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 17 01:00:32 2026 GMT
            Not After : Jun 15 01:00:32 2026 GMT
        Subject: CN=c947dd71-f24b-4af8-8e0b-c99ab90540ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4a:4a:53:dd:87:60:fa:41:2e:99:be:dc:45:
                    ab:0d:b3:4d:91:19:a6:df:02:a4:cb:c2:13:a7:49:
                    c9:bc:ed:17:07:d6:7a:c0:d7:e8:3f:74:f1:43:1d:
                    79:4d:fc:92:49:80:21:47:7c:41:48:ee:ef:ab:61:
                    97:f8:c3:e3:f6:66:1f:9a:bf:9e:bb:51:85:7e:55:
                    e3:92:e9:0e:81:1f:90:3c:1e:4f:40:90:aa:67:0f:
                    77:e8:76:4a:16:7a:a6:4d:63:ae:07:c6:90:ad:c8:
                    84:ef:f8:1d:c1:22:01:a0:15:de:d9:7a:a6:55:f0:
                    de:5f:f7:1f:3a:e6:af:74:ab:66:67:aa:13:fe:a7:
                    42:ca:4b:72:9c:cb:e5:18:61:a9:4d:c8:2c:5d:78:
                    33:97:43:70:1b:45:74:c7:ff:f0:8e:90:23:48:6a:
                    d2:86:02:59:9e:ca:ec:8b:21:0f:e0:cb:b8:75:78:
                    5b:aa:bf:ff:3d:c0:65:54:2d:c2:a8:4b:9d:d4:69:
                    56:01:a4:f2:3b:89:f5:04:aa:13:21:d2:d1:c6:be:
                    ce:da:d1:0a:7c:23:99:99:0d:a9:3d:b3:90:a6:6a:
                    54:19:d5:46:ce:cc:48:a6:b4:e4:14:42:4f:bd:bb:
                    3d:2f:c2:44:e9:e7:6a:37:73:3d:5c:db:3a:08:d7:
                    ec:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4C:F1:86:7B:9E:6A:3F:72:8B:03:78:2F:3E:B9:AF:9B:67:FB:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4b90f406-a065-3ee6-a8ca-9c45bc36adc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:25:10:8f:c7:82:fb:ec:a4:27:1d:5d:cc:7d:f3:0b:3a:b9:
         a3:5d:57:29:0a:0d:14:ab:8a:04:e1:50:c6:cf:02:02:77:d5:
         7a:dd:ad:d9:30:b5:41:f7:42:67:be:15:96:a1:ad:41:83:43:
         87:6f:f8:fa:24:87:26:83:a2:32:1a:de:ad:f3:12:70:bc:e9:
         b9:68:f6:0e:a8:39:7a:4a:c4:69:b1:8c:7a:4c:cc:ea:bf:51:
         e7:84:c9:22:a9:db:90:9d:bb:3e:ad:98:ac:a7:75:47:e3:48:
         47:1d:85:6d:7f:7f:0c:df:35:1e:92:fd:a2:7e:f9:a9:62:d6:
         e7:d9:69:a4:77:d9:af:60:fe:e0:51:f3:29:4a:cc:a5:a4:69:
         db:52:67:48:13:b1:d8:f4:c2:36:f4:6d:cf:37:cd:bf:6e:4e:
         e9:8f:c9:01:28:b6:54:80:b6:07:4b:db:a6:4d:cc:42:b0:c3:
         fb:c2:c6:1c:63:1f:60:33:e5:93:69:e2:82:28:2e:fb:a6:ad:
         73:78:3f:65:73:6b:26:ea:ae:d5:bc:38:44:ce:b7:d1:e7:96:
         c0:a3:e3:00:75:87:84:4a:48:0e:e8:43:b9:0e:cc:f7:b9:fa:
         8a:d9:fd:06:b5:5e:ce:fc:a0:b6:64:d8:1a:68:a5:93:33:7d:
         1a:94:41:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:45:54 2026 by rpki-client