Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c452f4c2-1493-3ab5-89b3-66bdaaa6d6cc.roa
File:                     c452f4c2-1493-3ab5-89b3-66bdaaa6d6cc.roa (raw, json)
Hash identifier:          LeqcSKxhPBXwSIOvGwYmaRXAJ+19F30s3I7NmOjjlzQ=
Subject key identifier:   04:9B:DA:06:F6:64:4C:E3:62:46:A1:9F:B1:B5:5C:78:51:2A:D2:48
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DCDC5C4002E12992C82D49D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c452f4c2-1493-3ab5-89b3-66bdaaa6d6cc.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        23.59.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:c4:00:2e:12:99:2c:82:d4:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=a4823068-9cdc-4ecc-9437-92955548f17c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:65:90:6f:8c:d7:ec:1e:6a:2b:6c:45:62:
                    b5:b9:39:a8:0c:5c:e6:d2:ef:ca:b0:75:3f:5e:42:
                    91:f8:d3:03:c4:71:0f:be:7e:dc:ae:9d:d0:9d:ee:
                    61:3d:f7:cd:15:8d:2b:d8:42:c2:c4:47:7a:a4:56:
                    52:6c:bc:f2:25:07:ef:ef:10:23:7b:b7:f2:26:2b:
                    ff:c6:eb:c2:1d:67:0a:81:7a:48:1e:45:1f:d2:a3:
                    ad:1d:ff:75:3d:e7:cc:98:d0:75:93:de:3e:e1:56:
                    d0:63:c1:b2:73:61:97:58:c1:bf:7e:90:be:54:d1:
                    7c:6d:3d:8f:fa:6e:3c:c0:1f:ce:76:36:c6:28:44:
                    b8:64:80:9a:f6:87:ae:a1:ef:ff:32:52:f3:e9:4d:
                    da:7b:5f:7b:cf:44:30:41:1c:f5:b9:54:84:59:2c:
                    5c:dd:2e:20:42:3f:53:2b:0d:45:43:fe:d2:76:f8:
                    ed:7c:53:71:2a:0f:8d:b6:fc:78:ad:b1:1a:3b:52:
                    a5:b3:92:c7:14:92:13:ec:19:b1:dd:e8:7f:43:22:
                    9f:aa:47:a3:fb:bf:54:4e:79:6f:98:cd:92:a8:57:
                    7f:78:1e:1d:01:16:e7:a7:f9:59:ed:ba:5d:42:11:
                    fc:5b:4c:70:a0:b1:47:74:88:80:ea:2e:4d:9e:11:
                    f7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9B:DA:06:F6:64:4C:E3:62:46:A1:9F:B1:B5:5C:78:51:2A:D2:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c452f4c2-1493-3ab5-89b3-66bdaaa6d6cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.59.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:8c:a0:53:73:4d:31:84:69:bb:27:5c:95:7e:14:ca:e1:9a:
         38:38:17:fd:be:fb:93:a3:4a:fe:86:0f:7b:04:50:0c:7d:ff:
         59:fe:c8:f0:ba:c7:c2:72:c2:85:be:82:1a:5a:8e:a8:ea:1f:
         e3:7b:2e:c9:7b:61:16:ca:74:66:dc:a0:12:53:8d:bb:e0:86:
         7e:b3:ce:91:fa:2c:3e:fa:14:24:04:99:40:81:81:90:ff:b5:
         cb:50:b3:2b:f7:9b:fc:b6:d6:ff:74:67:2f:eb:ef:5b:ff:b0:
         6f:66:13:4d:5a:10:3c:37:87:28:50:b8:6a:d3:39:a3:87:b0:
         26:f0:39:be:ac:54:a2:ea:11:17:1a:3b:f5:03:a5:68:dd:12:
         5b:69:60:b2:de:46:10:ca:e0:6a:12:72:1a:0e:cc:cc:f3:06:
         1a:fe:14:e2:2a:4d:cb:6c:43:b0:de:95:f8:0d:2a:ea:0b:23:
         ac:45:74:c4:5c:53:aa:bb:77:7e:ac:d1:85:ca:ac:d6:12:ca:
         9f:62:57:b7:88:8b:f9:6a:d3:e2:01:02:dc:37:0e:5c:d1:6d:
         16:c3:35:fa:99:d3:03:3a:1c:12:87:46:44:be:f8:f4:ff:48:
         56:25:40:24:d6:29:22:b9:53:00:1a:32:41:36:a3:d1:99:c6:
         c9:d9:9e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:34:28 2026 by rpki-client