Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b3c37a-65af-33a6-90d6-b28162089b17.roa
File:                     90b3c37a-65af-33a6-90d6-b28162089b17.roa (raw, json)
Hash identifier:          ToqwiHtrzR4Pw5/q22CgwTU+Il+VVEcdzNPltjsPnN4=
Subject key identifier:   46:57:BE:31:EB:77:B6:06:77:CE:40:D0:EE:0D:86:99:72:2C:94:29
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DCDC5B7E246474AD4CAC84780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b3c37a-65af-33a6-90d6-b28162089b17.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     24319
IP address blocks:        23.59.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:b7:e2:46:47:4a:d4:ca:c8:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=84d8eaa4-b9f9-4406-9888-524525889027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:64:eb:51:2a:12:f4:81:9a:03:47:3c:18:21:
                    61:ec:56:40:f9:e3:88:99:fd:8e:fa:fa:8f:2d:7c:
                    7d:a6:18:00:43:2d:d0:e2:48:05:cf:97:fe:ea:0c:
                    38:da:ea:32:e5:e0:d6:f2:13:55:99:93:b2:d4:4c:
                    f2:53:7f:0c:62:ac:b5:8e:3e:9d:d7:76:a0:82:95:
                    be:3a:0c:66:01:f2:59:df:63:65:4b:c7:bb:f9:5b:
                    bc:21:65:c5:34:00:0d:26:de:9a:c4:43:76:d9:07:
                    99:46:0a:7c:72:4b:d7:77:61:6d:f4:15:97:b6:b6:
                    b6:ea:57:ac:05:7c:95:4a:4a:f7:c3:d9:d1:3f:3b:
                    26:3d:32:fb:ba:2b:ab:d1:aa:5b:53:c3:a3:48:f8:
                    42:fb:f6:44:d1:56:9a:f6:ef:e3:10:0c:41:e3:45:
                    f5:3a:ce:51:d7:8b:c3:8e:76:e9:e4:4a:ec:c8:5a:
                    4b:de:87:3e:d5:99:23:e0:de:5c:01:f0:ef:ae:94:
                    22:d1:2e:ef:50:e5:61:cb:48:f6:f2:50:80:a8:4d:
                    a6:be:9b:50:1d:4b:da:aa:0e:d6:db:c0:4f:f7:bb:
                    03:a1:53:fb:c1:03:2e:f1:97:5b:bf:1e:17:43:4a:
                    22:29:36:5a:c5:e3:77:d8:10:3d:ff:a0:3a:7f:04:
                    1f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:57:BE:31:EB:77:B6:06:77:CE:40:D0:EE:0D:86:99:72:2C:94:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/90b3c37a-65af-33a6-90d6-b28162089b17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:35:c1:e3:dd:7a:a3:ac:f5:bc:33:18:33:05:bc:e4:79:c7:
         f9:b1:72:10:6d:84:5b:5f:f5:fe:99:e6:3f:1e:86:53:6a:bb:
         f5:2d:9b:da:b8:87:a3:e2:a8:59:d9:d6:0d:20:b0:4d:7c:0e:
         72:70:40:f9:7b:e4:a0:38:57:34:cd:6b:75:65:fe:c2:e7:8c:
         2c:63:40:79:0d:54:73:b3:52:22:53:18:d1:d5:b3:1f:87:68:
         5a:05:18:42:3b:ad:78:30:41:52:29:fd:b7:f5:c8:f5:38:ee:
         e4:db:32:66:cf:61:21:b9:30:53:ba:fb:f0:ce:e2:1b:96:24:
         94:27:f0:fa:30:cb:bf:25:a4:9f:d9:c9:34:8f:bb:f4:94:cb:
         d6:d2:69:b4:e3:a7:cd:b4:d9:09:34:eb:3d:bb:6a:0d:57:fa:
         21:61:73:ef:87:a7:44:44:ac:ce:16:28:c9:91:b9:38:1d:dd:
         07:12:b7:7d:21:af:c6:94:a3:e7:71:67:12:3f:1e:fc:f6:45:
         5b:73:80:02:bf:db:ff:70:aa:ab:87:59:04:f1:63:d1:de:8b:
         52:84:8f:39:d7:db:50:c4:49:b5:72:55:0e:58:83:d2:61:1b:
         30:80:07:fe:f8:75:6a:0b:1b:01:50:15:55:85:17:ea:5c:28:
         39:5f:78:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:45:36 2026 by rpki-client