Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fc02b7f-a0d6-3250-8382-438f1367b4c3.roa
File:                     6fc02b7f-a0d6-3250-8382-438f1367b4c3.roa (raw, json)
Hash identifier:          tWN5P2BsC1e9uL/d0Ip4fLpu4t1Ud/r0uBa0GlGJxog=
Subject key identifier:   F1:5D:A4:D2:20:AF:A6:A5:5E:89:71:7F:0A:CF:64:FF:BB:42:91:16
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497D79EA970F02C7F65DECC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fc02b7f-a0d6-3250-8382-438f1367b4c3.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        23.196.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:79:ea:97:0f:02:c7:f6:5d:ec:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6309fdc1-bb80-4d81-954a-8530b0bbb70b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:91:42:7d:21:31:ef:93:a1:48:6e:9f:02:7a:
                    b2:ef:13:64:25:8f:e8:94:26:79:68:a3:7a:19:b7:
                    57:87:09:ea:03:3c:3d:97:72:fa:a3:86:22:b2:54:
                    d4:cb:0c:87:a3:07:63:bd:88:49:ed:b9:18:22:34:
                    e4:59:fd:df:92:1d:7b:4a:04:b9:7c:eb:81:b0:05:
                    0a:a1:b1:09:2e:06:7a:a5:3c:f2:ea:04:a9:76:8a:
                    2d:37:9b:4a:c6:7d:ba:f5:1f:e8:ca:24:1f:62:6a:
                    54:d8:19:fd:4d:0b:cf:13:a8:89:36:77:3a:c6:ba:
                    07:04:f9:ff:07:c4:38:94:3f:fa:8c:fd:6a:5f:39:
                    e9:82:8c:41:61:31:2e:a3:d3:1d:7f:be:8c:52:d9:
                    fc:7d:d8:a9:56:ad:66:df:2d:96:6d:96:05:3e:9a:
                    52:51:e5:60:f8:8f:a3:3b:e8:f1:21:04:41:cb:5d:
                    32:af:93:ab:a8:06:1b:93:24:a7:92:78:00:d5:3e:
                    2d:ab:00:97:4c:f4:c0:45:bd:92:9a:b0:2b:b0:6b:
                    ad:d9:09:b2:97:be:31:2e:45:e0:f3:70:84:15:99:
                    f7:b6:16:fe:89:31:ac:4e:7d:76:21:d4:d2:5c:4a:
                    55:d9:74:5c:98:88:15:0f:e7:60:36:63:ea:c1:9b:
                    2d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5D:A4:D2:20:AF:A6:A5:5E:89:71:7F:0A:CF:64:FF:BB:42:91:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6fc02b7f-a0d6-3250-8382-438f1367b4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.196.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:37:cb:d3:3d:1f:89:56:9c:85:dc:54:90:c9:94:b9:49:f5:
         bd:d0:c6:31:d1:1c:42:a0:24:66:d5:8d:2a:48:fc:f7:e1:31:
         2f:90:bd:dd:a6:3d:a1:8c:53:ea:59:41:60:99:16:52:ea:07:
         38:e3:67:0c:66:b2:bc:d6:7b:18:f9:29:62:65:8f:3b:81:e0:
         90:f6:28:44:f9:9c:40:5b:50:05:fb:0c:61:aa:b0:ca:9c:f9:
         af:61:65:88:ec:26:58:67:46:30:6d:36:4c:6c:c5:bc:dc:4f:
         73:8b:9a:fb:89:26:36:11:36:16:5e:39:4b:dd:7c:96:02:3e:
         e4:e0:a4:d2:44:36:d8:60:3e:44:f4:8f:eb:0c:84:69:2f:5f:
         b8:89:e3:4f:d7:82:b6:39:01:1d:32:57:4b:9b:1f:82:53:15:
         21:ad:6c:0c:4c:37:2e:d9:59:32:d2:ea:5d:3c:08:f8:4a:3e:
         9e:1d:18:a9:ae:b3:e3:b0:04:72:73:ff:d9:46:31:9d:61:02:
         d2:f7:75:3a:eb:14:ad:ac:cc:c1:d8:41:64:c7:91:25:74:bb:
         be:6f:6f:c2:f3:6e:ea:86:b4:c4:f5:11:aa:d8:79:c4:c5:b4:
         7d:ea:0a:41:e7:00:8a:d8:8a:53:83:b0:f0:a8:73:7c:c8:a8:
         f6:3e:75:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:09:25 2026 by rpki-client