Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bdbab28-192d-39fb-9962-2c46e10ad115.roa
File:                     7bdbab28-192d-39fb-9962-2c46e10ad115.roa (raw, json)
Hash identifier:          jagVL4QwDDOAPsrhXajr7qQRbxuTrF3ltBDBWf0/WIg=
Subject key identifier:   16:05:D1:BC:B8:0F:B5:AE:86:F0:A3:25:55:81:04:B2:D9:9D:50:62
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D1B1A1D89416279B27139CA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bdbab28-192d-39fb-9962-2c46e10ad115.roa
Signing time:             Mon 09 Mar 2026 01:00:32 +0000
ROA not before:           Mon 09 Mar 2026 01:00:32 +0000
ROA not after:            Sun 07 Jun 2026 01:00:32 +0000
asID:                     20940
IP address blocks:        23.209.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1b:1a:1d:89:41:62:79:b2:71:39:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  9 01:00:32 2026 GMT
            Not After : Jun  7 01:00:32 2026 GMT
        Subject: CN=f6827c3f-e3e4-439e-ae6c-6b82951ec9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5a:75:3f:2a:17:91:18:6d:fc:a2:1d:ff:14:
                    bc:a1:87:75:5e:00:21:cb:6d:5a:e3:81:a4:8b:d9:
                    51:39:58:64:91:de:e6:98:0f:ab:01:62:e2:05:79:
                    ec:39:6d:40:c9:60:dc:f9:1b:a0:d9:2d:23:7f:8d:
                    e2:f8:a5:f7:f6:38:c3:ba:cc:37:97:68:d7:c6:0f:
                    cd:61:cd:2f:5a:60:24:b3:7f:3c:c1:62:08:52:ae:
                    1b:a9:91:d7:b0:8c:99:a7:ce:2e:01:cc:43:e1:e2:
                    43:7b:87:39:8d:af:97:ff:3e:5a:15:26:68:b5:cf:
                    8b:2a:62:6f:ff:3b:00:62:8b:1a:37:24:ed:ba:b8:
                    f2:0f:8e:46:5a:c9:7c:41:c9:48:67:16:50:81:02:
                    97:29:a0:db:69:65:91:f3:57:7d:06:c3:d3:78:10:
                    9c:37:33:ce:4e:37:5b:87:51:50:8b:d6:02:ae:31:
                    6b:2a:a8:b2:88:27:14:e4:82:8a:2a:6a:e8:33:12:
                    f2:68:c7:3f:d7:d4:24:ee:5e:56:2e:57:9f:d9:cf:
                    ad:0a:2b:ca:73:00:59:56:46:b9:b4:49:7f:59:38:
                    ce:72:ef:69:8d:73:91:94:aa:31:88:5d:a3:d5:ea:
                    e2:a4:b5:63:3e:5f:2b:0c:35:06:0c:c0:a0:83:8a:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:05:D1:BC:B8:0F:B5:AE:86:F0:A3:25:55:81:04:B2:D9:9D:50:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bdbab28-192d-39fb-9962-2c46e10ad115.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.209.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:ac:5d:07:c9:99:e7:03:ad:4d:3c:a9:9f:36:75:2d:5b:27:
         aa:8d:67:1d:1a:27:dd:0c:0c:24:bd:f6:37:c8:2c:31:cb:3f:
         ef:4a:f9:6b:50:67:18:56:95:1f:f9:37:52:09:29:26:cb:b2:
         0c:f3:0d:b2:9b:9a:9a:f3:a2:12:6c:42:0c:14:e7:83:d7:75:
         6b:29:47:23:6b:0b:20:27:3a:37:96:ee:e4:95:b1:3e:ce:06:
         52:3b:18:1e:51:5a:a9:8a:53:b3:e1:c8:0e:af:0e:fc:cd:40:
         27:76:0e:e0:ed:b7:a6:b6:c6:46:c6:98:9e:e5:f8:f8:12:be:
         f1:91:b8:c7:1d:d7:7d:1b:87:e8:6e:73:98:00:97:d6:3b:fb:
         19:a3:60:ad:fe:2b:0c:b4:fa:ef:ce:9f:ee:d5:b4:2c:51:3b:
         92:5c:16:c5:0b:2c:9d:9b:4a:b6:39:4f:af:c8:f7:68:5b:78:
         cc:f6:8a:a7:28:c4:c7:f3:a7:0a:71:23:da:66:a6:57:18:f1:
         5d:d7:56:72:24:e8:71:56:ac:6c:06:37:f7:ae:1e:c0:fe:8e:
         0f:7d:b8:47:5b:14:d9:95:a9:41:f6:bb:f3:3b:91:34:58:2f:
         a0:ec:b6:e6:89:e6:c3:96:78:c0:05:29:c5:b5:4e:51:34:3f:
         02:97:fe:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:11:30 2026 by rpki-client