Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d55d101-73ca-34ec-b555-8db7845cd919.roa
File:                     7d55d101-73ca-34ec-b555-8db7845cd919.roa (raw, json)
Hash identifier:          Kwy4XaLrPmHyGOPLYSjj9vpW+4+JRE8cLCJFXsi3sZo=
Subject key identifier:   6A:B0:36:6D:E1:01:9D:45:8A:AD:3E:89:8A:B7:22:21:E8:90:29:E3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DAF1021A75BF6F3D0D753A800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d55d101-73ca-34ec-b555-8db7845cd919.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        23.33.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:21:a7:5b:f6:f3:d0:d7:53:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=f92163c3-9a4a-4e0b-8409-18db1c45f1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3d:37:64:05:f5:79:b2:7f:29:24:26:30:d4:
                    81:1f:13:3c:2b:b6:c8:88:02:28:9c:4f:a0:71:78:
                    9b:57:c6:76:0c:7a:72:f3:f8:9c:40:b9:d2:1e:e4:
                    d6:b2:ce:ed:07:c0:98:4b:e5:c0:47:c4:eb:35:a0:
                    7c:93:ad:7d:1e:e3:0d:c7:9f:50:f6:52:08:50:bf:
                    8d:aa:56:d8:06:0b:ee:e8:bc:fd:04:25:0a:31:10:
                    5e:f2:c7:b6:8d:7c:e0:78:8b:f4:21:fe:61:34:96:
                    c8:6c:4b:13:b9:3d:25:cb:09:f7:47:39:50:e1:6c:
                    62:af:59:02:d0:3d:10:5c:86:48:e3:bb:17:73:64:
                    34:57:53:eb:64:bf:e5:1b:31:43:d6:0c:92:60:e5:
                    1b:fc:a6:44:02:0d:53:81:23:36:2f:b5:82:ab:c8:
                    1b:1f:f1:32:df:00:d2:f5:d0:a8:ae:5b:17:49:b1:
                    b3:af:23:3b:e1:27:1b:95:87:1c:a6:11:36:21:21:
                    b1:d5:04:8b:e8:6d:0c:df:82:c2:09:0b:89:7c:03:
                    26:1d:3a:0b:7b:8f:99:6c:ba:5a:d8:db:e9:bc:de:
                    e5:2d:9e:59:92:66:4d:7a:a7:5a:23:b7:55:48:17:
                    da:e1:40:2f:93:da:ec:09:1e:ee:98:d2:3b:fe:4b:
                    66:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B0:36:6D:E1:01:9D:45:8A:AD:3E:89:8A:B7:22:21:E8:90:29:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7d55d101-73ca-34ec-b555-8db7845cd919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.33.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:27:2a:ce:82:bc:ba:91:fc:3f:80:c5:11:b3:88:53:47:93:
         7c:05:3e:1d:68:9e:5f:92:c2:46:a1:ff:23:3f:d5:0c:38:7e:
         f4:67:55:91:98:11:b9:b4:7d:0b:28:58:99:43:a8:b3:30:f6:
         02:12:c1:c8:79:a5:b7:41:b1:fb:34:33:3e:50:cc:87:c5:68:
         a4:08:86:eb:72:8f:4d:1b:9f:be:64:a2:c3:09:3b:9f:fb:e8:
         d9:b2:69:a5:57:89:d7:45:a4:76:62:37:73:10:8e:45:d8:24:
         6d:e6:11:b9:6b:f8:e1:b0:d8:9c:93:ff:66:6d:08:75:0a:0e:
         68:6c:7f:ed:63:e8:1c:01:9e:b9:7d:36:88:9c:78:6a:84:35:
         9f:d8:a2:87:5e:d5:39:52:b6:b0:2a:02:a6:24:3e:01:6f:00:
         75:ce:5b:d1:4e:d5:4d:dd:3d:27:88:03:8f:cd:d9:16:1f:fc:
         3d:d8:d1:e2:48:dc:07:70:a0:ce:eb:be:ac:db:70:9d:c8:bf:
         c4:40:0a:94:c8:16:d7:26:d0:74:3d:71:bb:25:e4:a5:58:86:
         9d:12:7f:b9:5a:34:8c:99:2b:c1:f9:04:2f:02:42:df:6f:f0:
         6b:fe:9c:95:2d:c8:49:f6:f7:aa:f3:dc:16:13:aa:0d:c3:1d:
         56:dd:e6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:50:59 2026 by rpki-client