Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5901ab29-2699-3789-be62-b017dfad5375.roa
File:                     5901ab29-2699-3789-be62-b017dfad5375.roa (raw, json)
Hash identifier:          AkJg3WxjBkyBN3bv3JcLpJbz3e415gW6Z4oUckhngGI=
Subject key identifier:   92:16:8F:1A:2B:D2:0A:C9:FB:81:8E:B6:2A:C2:E8:E6:B7:D2:45:91
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DCDC5BA300D19382AE9D0C590
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5901ab29-2699-3789-be62-b017dfad5375.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        23.60.164.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:ba:30:0d:19:38:2a:e9:d0:c5:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=1c63d9b8-f672-4d46-87be-64959ac37b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:4d:ed:a2:1b:e0:d0:b9:39:29:d4:2e:3b:99:
                    da:98:7f:8f:a9:ba:c6:c3:4d:06:19:32:e8:1a:6f:
                    81:26:b4:d2:ee:27:a1:25:37:18:38:89:d6:40:a3:
                    86:5c:97:62:c1:c7:9f:3c:30:36:96:c2:40:74:6f:
                    3c:e6:28:7c:76:ee:55:8c:78:fb:7b:3d:d1:52:fa:
                    0a:51:c1:a9:58:9a:6d:40:b3:f4:0a:06:7a:49:9c:
                    5c:8a:5e:98:18:c8:34:e3:0a:f3:9f:91:6c:d2:26:
                    16:72:cd:07:c5:33:25:d3:42:d2:12:29:69:7f:47:
                    30:59:93:06:62:cf:30:05:db:d1:a9:29:4c:9a:7e:
                    2b:37:67:b4:bd:7c:3f:12:f4:9d:b6:29:5e:b8:be:
                    53:85:d2:16:47:a9:68:2a:24:64:46:da:f8:1e:ec:
                    28:3a:68:e6:54:f3:e5:7d:97:9b:e5:bc:98:69:d9:
                    f5:d9:d9:21:ae:03:d0:36:70:1e:d4:4f:25:4b:88:
                    82:b5:03:64:85:28:27:f8:6a:01:90:41:47:4e:7f:
                    e6:3a:38:79:d9:b0:9a:68:f0:41:9d:d0:e2:86:fb:
                    36:1a:3e:d5:5c:1c:41:07:9a:4e:bb:fb:9b:0a:29:
                    74:b1:78:0b:f5:37:4c:6c:0c:97:11:8f:dd:84:44:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:16:8F:1A:2B:D2:0A:C9:FB:81:8E:B6:2A:C2:E8:E6:B7:D2:45:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5901ab29-2699-3789-be62-b017dfad5375.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.60.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f3:7c:bc:bf:39:cd:9b:3e:98:b7:50:e6:d5:b2:e9:0f:39:
         02:81:48:52:ff:0d:6f:37:7b:bc:fb:01:90:35:1f:7a:dc:17:
         d7:38:37:e6:6c:9f:ea:21:52:1a:e2:37:3f:d1:e7:b4:b2:52:
         ee:e1:5c:d1:6e:20:75:44:98:99:a7:9f:2b:fa:4d:82:a1:bb:
         0c:49:89:d3:74:25:0b:f8:2e:a4:cc:90:fb:a5:0a:92:d4:b1:
         6c:d4:82:c6:46:ed:c7:58:5e:3b:0d:68:f2:aa:f7:4a:cb:3e:
         c2:5f:3f:1f:5e:78:bb:be:97:c0:a4:63:4b:8f:d2:fe:d4:67:
         e0:9b:db:38:00:52:66:0e:bc:78:30:99:6e:95:b8:e5:3f:83:
         d3:a4:b8:74:2f:4d:d3:ac:97:13:5a:84:ec:59:87:13:e6:56:
         2b:7b:65:dc:d7:13:02:2c:89:fd:05:65:fa:8b:86:ad:20:d1:
         cb:07:c4:cb:ac:c8:10:7f:da:67:ea:75:0b:a6:4f:35:15:9f:
         ce:70:4e:58:aa:e7:b6:59:c8:2e:31:88:8b:23:87:5f:dc:67:
         72:62:b7:9e:ed:47:46:74:78:a7:2e:6b:e3:8c:04:92:a6:cf:
         28:e1:05:f3:4a:6a:23:5f:c9:e6:64:ea:2d:45:af:e9:4e:87:
         d2:c2:fe:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:36 2026 by rpki-client