Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71392605-9ce4-3b82-be4a-a162c5753b1d.roa
File:                     71392605-9ce4-3b82-be4a-a162c5753b1d.roa (raw, json)
Hash identifier:          fWDqQCOL0+/uAwuCT/h912/QRlKHnH5CopTMaefnIs8=
Subject key identifier:   0E:CE:6B:F6:90:45:56:3F:E9:3D:BF:6B:5B:70:D2:89:3A:9A:C7:E0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F49737BFE515D1EED2BCB9B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71392605-9ce4-3b82-be4a-a162c5753b1d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.15.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:7b:fe:51:5d:1e:ed:2b:cb:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=cd75fbe8-c601-495f-8056-a17f6f21dd15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8d:72:90:69:09:99:e8:a5:04:e6:4b:3d:61:
                    d9:74:e5:61:cb:97:c9:16:ce:a4:8b:b5:1c:c2:eb:
                    49:b8:74:36:97:92:cc:a5:5f:62:8f:96:8c:e2:4c:
                    ec:5f:16:28:b4:f1:e7:40:5c:01:14:a9:97:8c:ac:
                    e9:42:59:e6:63:2c:63:fc:db:2f:04:64:f1:50:d7:
                    3e:aa:7a:3d:2d:f8:17:41:b8:3c:ae:5d:10:c5:fb:
                    aa:ae:35:c0:19:d7:82:6f:c9:6f:ba:e2:37:02:c5:
                    ef:52:5e:b1:ac:82:09:fd:0c:89:1f:9c:91:df:8d:
                    c7:7d:ae:80:c2:d5:fd:47:4c:14:36:95:bf:89:73:
                    3d:90:d3:93:36:67:84:70:bb:ab:c1:7b:df:a9:43:
                    53:f1:cc:3c:03:18:e5:c5:99:64:82:95:fa:f7:2a:
                    cd:c8:96:a1:a1:da:ec:b6:c4:d6:d9:e4:aa:bf:f1:
                    47:91:10:c2:71:d1:f9:60:fa:ae:6f:8a:1e:6f:33:
                    88:cf:3b:e4:d3:3e:7a:d8:e6:ff:9e:b6:c3:f1:04:
                    8b:b7:ed:1d:d8:97:0e:e4:15:6a:00:77:52:88:3c:
                    72:d2:e7:0d:79:9f:a1:38:cc:9f:b2:a5:1d:7a:2c:
                    03:83:a6:39:9c:ea:01:e7:6f:85:af:4b:06:b3:bc:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CE:6B:F6:90:45:56:3F:E9:3D:BF:6B:5B:70:D2:89:3A:9A:C7:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/71392605-9ce4-3b82-be4a-a162c5753b1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.15.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:a6:ea:32:79:76:be:45:ad:c1:b7:3c:bb:01:7b:9d:53:fd:
         cf:c8:2f:5d:4f:ca:bb:f9:0b:37:c1:84:c7:5c:5c:0d:ab:9b:
         b4:82:ae:fe:f8:d8:ec:1b:c1:85:6f:b1:12:9c:e9:3d:5d:ec:
         fb:4e:b6:94:a2:66:fe:c7:78:67:df:21:32:03:e3:fe:20:10:
         63:43:77:83:ad:db:e9:26:51:e4:d5:02:d1:6f:23:95:7a:61:
         67:7a:e8:ae:6c:24:21:0b:54:e6:f8:22:3e:27:dc:a6:64:43:
         53:d9:83:7e:1e:38:25:08:2b:81:26:f7:e5:70:f3:f2:41:ef:
         8b:d7:6a:be:7c:4f:98:af:d1:d9:8d:e1:29:6d:68:e5:8a:b4:
         5b:3a:cd:8e:38:f6:df:f2:d7:61:03:04:3d:e0:69:95:79:f0:
         61:25:96:e2:ec:0a:79:80:4b:6a:70:0e:d7:7b:e7:02:1d:b4:
         f3:7d:93:b1:95:53:3f:0e:da:0a:20:e1:30:f7:9c:e8:0a:87:
         9b:4e:ec:0f:4c:43:79:97:cd:b3:d1:35:3d:67:fd:63:b0:3d:
         e3:ab:ed:e2:12:e9:9e:12:b5:e8:41:67:70:03:8c:06:11:cd:
         3e:8b:c5:78:14:5d:fd:ab:05:bc:08:12:e7:e0:8e:ae:43:d5:
         34:95:d5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:47:31 2026 by rpki-client