Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fa595df-af0b-3c4a-8e30-b083d8befd01.roa
File:                     9fa595df-af0b-3c4a-8e30-b083d8befd01.roa (raw, json)
Hash identifier:          4Hrg6TpzqTD+3tLZLYdLX0MqDSiLn/JIxiSfKpU3fX4=
Subject key identifier:   18:D3:88:F8:4B:A6:64:E9:4C:3E:72:9E:9E:52:18:36:6F:E9:35:3E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DD0906C45F1A014B787DB6800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fa595df-af0b-3c4a-8e30-b083d8befd01.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     12222
IP address blocks:        23.200.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:6c:45:f1:a0:14:b7:87:db:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=5d6cf38f-1d49-477a-90c9-5c98e883253f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:29:4f:c7:1b:ec:77:41:67:a5:27:e7:5f:4d:
                    de:ac:d0:75:f9:ea:eb:eb:e3:0f:94:90:2f:c0:a3:
                    5c:27:eb:2c:fa:69:92:c7:d7:48:c8:7a:63:7a:d6:
                    33:f2:af:09:25:3d:21:f5:12:0e:b4:b9:8c:61:b7:
                    a5:30:a4:8d:0e:1e:9d:97:08:7b:c9:a4:ce:dd:d5:
                    f4:34:bc:5e:3b:0a:87:eb:16:88:7b:bf:35:64:24:
                    3a:31:2d:7b:7c:e3:7a:0c:09:d1:f8:76:3b:92:ce:
                    67:82:49:4d:02:5b:d2:c5:8f:5d:6f:d1:ed:6c:f5:
                    96:b2:1b:27:49:e8:03:f7:51:eb:27:39:cc:f9:a8:
                    9d:4c:9e:b8:2d:73:e8:43:91:10:71:33:a3:3c:20:
                    ae:9b:0f:a3:fc:42:ad:f3:b1:46:61:e2:db:e8:fa:
                    96:e0:e1:bf:c5:99:8c:a9:45:4b:f2:fb:aa:47:12:
                    26:35:07:fd:45:a5:a8:63:53:81:03:06:b8:8f:24:
                    d9:0a:29:9e:57:db:d6:ee:86:a1:62:f7:c5:7b:82:
                    61:2c:80:1a:0f:0a:2f:26:95:df:85:83:8a:e1:90:
                    d9:fb:87:58:01:71:28:87:25:27:dc:f7:99:12:aa:
                    e2:68:d6:22:da:97:a3:cc:04:9a:b7:3d:9b:ac:66:
                    b8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D3:88:F8:4B:A6:64:E9:4C:3E:72:9E:9E:52:18:36:6F:E9:35:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9fa595df-af0b-3c4a-8e30-b083d8befd01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:62:97:0f:9f:c6:89:bf:89:7a:e6:51:53:1d:3d:d5:52:5f:
         bc:70:be:f2:73:f4:21:cc:e0:80:50:d5:8e:8e:71:b4:da:9d:
         18:f2:14:be:be:ee:17:e8:dc:00:c7:ed:61:ec:b7:44:ac:c4:
         ea:1f:d7:22:c1:72:b8:0b:62:98:f4:9e:07:c2:42:27:e1:20:
         89:ea:35:01:aa:f2:55:d5:3b:d0:5f:ce:23:45:41:fb:cc:cb:
         3f:fe:13:87:d7:c8:00:2f:68:df:db:2f:5f:14:9a:88:7e:9b:
         f2:3f:61:e9:97:78:4e:4f:4c:01:d2:5c:5e:e2:20:5e:2d:97:
         cf:65:a8:28:03:94:68:43:71:01:ec:8f:2b:cb:e3:a2:fa:9d:
         e5:8d:b1:c1:fa:ba:17:2a:cf:82:0e:96:53:a8:72:a2:e8:99:
         d4:66:5f:88:3a:05:2e:9a:f5:09:7c:da:1b:cd:9e:94:9f:0b:
         dd:5a:f8:e5:e9:30:b8:65:19:34:09:67:82:7e:54:2e:28:1d:
         eb:4d:04:3c:31:e0:f7:4e:79:a6:a5:f0:c9:7c:32:a4:93:b2:
         25:59:61:db:25:08:3b:60:5f:2b:b5:c3:97:2c:05:ce:af:69:
         d3:28:25:a1:f9:ae:85:30:62:f8:27:dd:62:02:ee:42:4f:06:
         59:3c:b4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:29:10 2026 by rpki-client