Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4df79fa5-6a03-3e50-892f-80cdd77c8f3e.roa
File:                     4df79fa5-6a03-3e50-892f-80cdd77c8f3e.roa (raw, json)
Hash identifier:          LmOKtOLtP9lxeAtZd7jns42Kd1me5zn+35qsGTdwvow=
Subject key identifier:   B7:1D:02:FF:02:4A:24:1F:AF:B9:77:1E:BE:00:11:07:1D:2B:F3:E9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DCDC5B35DF7930688EB2476C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4df79fa5-6a03-3e50-892f-80cdd77c8f3e.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        23.55.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:b3:5d:f7:93:06:88:eb:24:76:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=01d887a3-4002-4bb1-b2de-408dff6bca17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a6:1c:30:17:05:10:2f:e8:78:63:10:48:09:
                    0f:3e:57:fb:de:c5:78:89:b8:bc:ce:88:25:4d:2c:
                    ba:51:56:dc:17:eb:16:ee:17:4e:72:29:b0:d8:c7:
                    ac:8b:30:83:a2:bf:cb:0d:49:c4:3e:3f:72:3d:00:
                    ee:4e:73:28:ed:23:38:ba:0d:ba:7c:6f:f0:9a:bd:
                    bf:f5:9f:67:2e:bd:19:27:72:e8:cd:e7:f3:9d:f7:
                    ea:58:cb:2f:5b:31:0c:72:ce:45:79:0c:28:64:ff:
                    3b:7a:3f:79:09:de:28:35:76:e9:d1:6b:98:ee:e5:
                    6d:fb:c3:93:59:7c:fa:40:39:27:6a:13:e6:fa:86:
                    2d:ad:87:b4:82:53:b4:c1:9e:88:9b:4f:5a:df:7a:
                    56:a5:b5:bc:c2:a2:53:36:ff:f1:85:04:28:ab:b1:
                    d8:86:cc:c0:f0:a6:4f:26:c4:93:8d:69:04:92:ea:
                    cf:dd:39:a0:72:7f:54:3a:58:b0:ee:6b:69:0d:f5:
                    6a:bb:d6:2f:54:83:66:b6:2b:4f:65:42:ff:9e:bb:
                    7a:8e:b2:4d:23:c3:24:9c:e0:c9:e1:6e:94:a9:ce:
                    5d:5d:8e:55:6a:b6:f1:db:55:bc:65:e0:bf:46:bb:
                    77:26:e9:ae:50:84:7f:29:f9:39:c6:ae:b4:eb:97:
                    c5:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:1D:02:FF:02:4A:24:1F:AF:B9:77:1E:BE:00:11:07:1D:2B:F3:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4df79fa5-6a03-3e50-892f-80cdd77c8f3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:7a:18:c8:47:ae:b4:f3:09:7a:64:e2:8a:3c:7c:b5:5a:38:
         4a:e7:d8:7f:a5:eb:f9:92:ba:6c:88:4c:da:d4:12:24:50:72:
         3b:ad:7d:40:5f:4c:33:ac:f3:ff:0f:17:95:22:62:0c:30:d8:
         88:4e:42:51:03:6c:7e:aa:12:8d:58:0b:e7:7f:f3:7b:0b:b1:
         0a:e9:1a:d5:38:63:47:38:ea:d4:69:8c:b6:b0:b7:98:d9:e2:
         cf:3b:ef:8f:d2:e6:49:cc:d0:4c:d0:38:88:7f:22:39:13:8a:
         f7:26:be:1b:01:cf:9d:14:11:c7:9a:e3:9a:24:0f:d3:32:47:
         c8:84:74:59:03:28:85:22:4b:f2:2c:33:6c:93:2d:d6:b9:a6:
         13:03:e2:d8:fb:ef:a2:49:c9:b9:e9:19:c2:0c:6a:3e:4c:c4:
         c0:24:60:bd:bf:a4:b1:b0:4b:42:f9:e7:c3:60:08:4e:a2:d7:
         18:83:2d:4e:d0:72:40:a1:3d:dd:bd:2e:f6:04:06:bc:81:49:
         a4:28:47:a9:a8:38:e3:75:45:a6:02:3f:a1:53:da:b8:af:77:
         11:02:0c:01:4a:0c:75:59:9b:43:07:35:f7:b4:3e:2a:47:6a:
         13:86:b5:6a:90:52:1b:b4:ad:e6:40:21:57:06:e6:f0:36:92:
         67:c6:43:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:04:32 2026 by rpki-client