Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93368171-919d-3307-8495-b98e8a7c408a.roa
File:                     93368171-919d-3307-8495-b98e8a7c408a.roa (raw, json)
Hash identifier:          er0bi8xR+Nr3Og+b5S4cTF+mScOxRQnZhHNaAEDd3D0=
Subject key identifier:   C9:29:DE:A2:CB:B9:8E:4E:59:DA:F3:6E:6A:C9:1E:9A:10:3A:F7:F1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DC565A8F4D6AE369A7ABFA780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93368171-919d-3307-8495-b98e8a7c408a.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     20940
IP address blocks:        23.52.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:a8:f4:d6:ae:36:9a:7a:bf:a7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=9bf8dd0d-25ec-41a0-bfbe-ba9f2b4716a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:3e:b0:ba:75:01:de:0b:1f:92:6b:9a:b3:ba:
                    96:d9:ee:ac:1d:eb:67:93:49:38:c5:bc:ba:f5:16:
                    99:7f:0c:5c:3e:2c:22:56:58:14:c3:be:a8:72:ca:
                    57:22:a2:05:2c:5d:1f:c5:5d:3d:d0:e0:f4:b1:21:
                    5d:88:f6:d8:94:67:6c:77:57:6c:7a:95:45:db:62:
                    1f:15:f4:10:6f:56:e0:d6:b2:dc:a2:8f:98:90:43:
                    82:ea:3d:ae:27:4f:4f:a9:d5:76:63:fe:73:e3:1a:
                    28:1f:93:c0:b6:b0:c7:4c:f1:32:fc:57:d5:bd:60:
                    e2:38:1b:31:ed:1e:b9:e3:ce:ee:d6:0d:85:2a:da:
                    5d:7b:49:d3:33:1d:51:a9:46:9f:5c:32:49:b7:87:
                    07:c4:2e:52:e7:17:0f:86:15:2a:f0:e6:28:b4:ab:
                    7c:7a:91:b2:e2:2d:0c:b1:b0:21:68:90:f0:e7:29:
                    5a:e1:60:d6:25:83:6e:3c:2f:d6:cf:0c:08:e5:3e:
                    72:73:ec:34:a4:f8:80:9b:0e:45:e7:53:92:83:2d:
                    3b:78:4e:90:7f:36:d8:3a:f6:27:b4:e9:8d:80:8b:
                    ac:cc:f4:2e:0a:0a:b4:9a:9e:0f:c5:6f:2f:da:f0:
                    ea:5b:6b:30:0a:f1:70:dc:85:82:b6:c0:27:d2:5f:
                    c6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:29:DE:A2:CB:B9:8E:4E:59:DA:F3:6E:6A:C9:1E:9A:10:3A:F7:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/93368171-919d-3307-8495-b98e8a7c408a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:6d:24:fa:93:7a:04:62:0d:4f:e1:d8:d9:26:d3:fd:d6:fa:
         6d:2f:cb:9c:9f:af:45:d4:10:3f:f1:1f:7f:03:13:6b:73:6a:
         3d:7c:d9:1b:da:a5:68:1c:d4:24:d4:e3:1b:f2:03:7c:aa:f7:
         42:f4:f4:05:1d:67:cd:16:44:9e:ac:3f:4f:52:47:cf:f6:b8:
         e7:bf:26:a4:0a:28:77:a3:a8:a9:4b:4a:b9:75:1b:e2:bf:df:
         0b:82:b9:9f:ec:d2:84:22:b4:bc:93:30:52:6e:08:5e:23:c4:
         8a:a8:a9:3f:13:7f:87:79:90:bb:53:1b:d2:bc:21:04:a8:0c:
         61:19:d5:cf:39:5e:64:e2:e1:04:3f:85:45:7a:04:8c:93:b9:
         cd:c2:90:3b:c1:50:1f:52:9a:8b:d3:b9:cb:b9:1b:6f:c4:1c:
         c3:a3:7c:73:90:92:56:4b:57:ed:4b:bc:38:42:0a:c2:ff:68:
         d2:76:ab:3b:ac:7b:f2:98:46:a1:fd:82:bc:01:05:a1:cf:c3:
         30:75:5b:07:5a:84:63:96:cf:74:4c:42:7a:c4:04:be:37:4a:
         ff:a6:22:ec:44:c9:93:7a:74:8f:dc:9f:e3:1f:5d:f6:8e:20:
         41:80:33:33:43:71:4e:5d:82:1d:4c:22:56:42:1e:be:c7:24:
         5b:24:cc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:10:48 2026 by rpki-client