Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85905f9c-4520-3d42-98dd-c97d2bd3947f.roa
File:                     85905f9c-4520-3d42-98dd-c97d2bd3947f.roa (raw, json)
Hash identifier:          BW0mVvmbuLE2P4h/lAJ7CHsXbwwkM5nhh86/iCHypMY=
Subject key identifier:   E4:CD:82:48:2F:6F:10:31:F4:F2:2D:0A:E7:27:CA:2D:79:28:52:63
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E66DA23D9E7EB2FE85D650900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85905f9c-4520-3d42-98dd-c97d2bd3947f.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     16625
IP address blocks:        23.2.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:23:d9:e7:eb:2f:e8:5d:65:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=6709a840-b978-4af3-96e1-f521ab6b32b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:74:3d:9e:a8:1f:d8:3a:65:32:0f:0e:93:83:
                    b4:3c:12:2f:a8:f4:d5:de:00:2c:b3:e5:cb:4e:ff:
                    06:40:f9:91:17:6f:c9:7c:bf:21:da:f6:62:c3:2a:
                    13:72:67:cd:85:30:78:05:fd:22:7e:89:dc:1d:0e:
                    df:4c:cc:69:04:a4:5a:2f:b4:7b:d3:4b:34:cc:8d:
                    de:3e:82:5c:58:94:07:4b:68:2e:88:05:f8:72:e3:
                    0b:50:ba:11:9d:06:5b:18:82:fc:aa:c8:b2:4e:d1:
                    68:a3:b5:18:01:18:b0:99:2d:e7:65:32:42:e7:2d:
                    52:62:05:20:bb:b2:eb:34:15:2d:3d:33:d0:e3:15:
                    f9:53:63:80:2f:d6:1b:73:c3:3b:4f:7c:c6:93:5a:
                    f7:45:3e:11:ed:d6:60:f7:93:7e:7d:f2:01:98:2e:
                    d1:fe:f4:7e:2e:d7:9a:ec:8d:f7:39:b0:05:4a:7c:
                    3f:93:d5:e1:f5:58:d5:8a:d1:bc:69:4e:4a:39:1b:
                    5f:89:fe:f6:3f:5a:ce:8b:f3:fd:da:c0:f1:36:51:
                    62:68:7b:f8:7f:fe:28:ea:fa:f9:6a:b2:ea:8f:61:
                    9e:ae:6d:34:51:b0:e9:b1:94:05:41:8c:53:2a:1b:
                    99:15:cc:5d:f6:5d:4c:65:40:a7:69:b4:00:3d:1f:
                    8e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:CD:82:48:2F:6F:10:31:F4:F2:2D:0A:E7:27:CA:2D:79:28:52:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85905f9c-4520-3d42-98dd-c97d2bd3947f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.2.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:fd:3f:49:8f:f2:11:77:80:0f:b3:1d:f4:eb:89:23:84:11:
         9a:0e:a4:49:61:82:51:ac:ce:8f:e8:38:bd:01:f2:90:9d:96:
         1c:68:da:1d:5e:e0:3e:81:84:0d:d7:de:9b:e5:8e:2c:61:f3:
         69:1f:55:f9:79:96:a0:c5:ad:72:83:4d:bd:3d:a8:a7:70:e6:
         6e:38:c6:cd:8d:28:74:dc:4a:88:b1:f2:fc:22:11:68:0f:93:
         46:f3:86:fd:d3:b6:d1:4f:94:51:f1:18:96:ff:49:bb:68:99:
         b5:99:30:a2:b3:b9:30:96:58:46:c1:a0:1f:59:ef:e0:78:c6:
         8d:80:d6:dd:f5:26:18:f4:e0:be:91:17:f1:4b:4c:d2:b1:85:
         19:e7:fa:e5:25:99:d4:76:d4:95:69:54:bf:db:dc:13:9c:d7:
         2f:ba:a8:6b:d6:bc:fc:e7:98:67:66:74:1b:6f:82:7f:a5:39:
         a6:8a:1c:a6:5c:0b:1a:60:a6:ae:96:c1:56:48:df:99:85:1b:
         15:7b:27:b5:3e:cd:62:9b:df:00:bb:1a:b1:d2:e2:03:b1:b9:
         49:29:a5:41:bd:f0:9f:d4:4c:d7:ba:f2:ff:39:d3:aa:c4:20:
         31:e8:fc:b6:85:a4:83:f5:ae:9e:9f:aa:de:1f:1d:b2:23:8a:
         f8:70:b6:8b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5m2iPZ5+sv6F1lCQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcwNTIxMDAxMVoXDTI2MTAwMzIxMDAxMVowLzEtMCsGA1UEAxMk
NjcwOWE4NDAtYjk3OC00YWYzLTk2ZTEtZjUyMWFiNmIzMmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnQ9nqgf2DplMg8Ok4O0PBIvqPTV3gAss+XL
Tv8GQPmRF2/JfL8h2vZiwyoTcmfNhTB4Bf0ifoncHQ7fTMxpBKRaL7R700s0zI3e
PoJcWJQHS2guiAX4cuMLULoRnQZbGIL8qsiyTtFoo7UYARiwmS3nZTJC5y1SYgUg
u7LrNBUtPTPQ4xX5U2OAL9Ybc8M7T3zGk1r3RT4R7dZg95N+ffIBmC7R/vR+Ltea
7I33ObAFSnw/k9Xh9VjVitG8aU5KORtfif72P1rOi/P92sDxNlFiaHv4f/4o6vr5
arLqj2Germ00UbDpsZQFQYxTKhuZFcxd9l1MZUCnabQAPR+ODQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTNgkgvbxAx9PItCucnyi15KFJjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODU5MDVmOWMtNDUyMC0z
ZDQyLTk4ZGQtYzk3ZDJiZDM5NDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFwJIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAL9P0mP8hF3gA+zHfTriSOEEZoOpElhglGszo/oOL0B8pCdlhxo2h1e
4D6BhA3X3pvljixh82kfVfl5lqDFrXKDTb09qKdw5m44xs2NKHTcSoix8vwiEWgP
k0bzhv3TttFPlFHxGJb/SbtombWZMKKzuTCWWEbBoB9Z7+B4xo2A1t31Jhj04L6R
F/FLTNKxhRnn+uUlmdR21JVpVL/b3BOc1y+6qGvWvPznmGdmdBtvgn+lOaaKHKZc
Cxpgpq6WwVZI35mFGxV7J7U+zWKb3wC7GrHS4gOxuUkppUG98J/UTNe68v8506rE
IDHo/LaFpIP1rp6fqt4fHbIjivhwtos=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:06:42 2026 by rpki-client