Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccf97975-0cfa-3323-b088-de336c248425.roa
File:                     ccf97975-0cfa-3323-b088-de336c248425.roa (raw, json)
Hash identifier:          Olp/vMORpJ7IOatE9dY35XpfeBd9ZNetnuoNcbaAa5M=
Subject key identifier:   AC:CD:01:20:44:55:E9:E3:A9:9A:28:7E:D7:84:B6:E5:D7:DD:D2:AF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DC135C8303D8A3FEE2A895A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccf97975-0cfa-3323-b088-de336c248425.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     16625
IP address blocks:        23.49.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:c8:30:3d:8a:3f:ee:2a:89:5a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=abb7e66c-fc32-4e63-a046-7d4199874dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:77:ac:e4:63:66:68:7b:12:00:01:c1:72:c1:
                    ec:7b:a1:c4:bf:da:0d:3e:f1:5a:e3:4b:93:78:e3:
                    87:02:70:87:33:fc:84:62:0e:77:14:99:11:9f:71:
                    25:2e:16:0d:d7:04:33:43:fd:10:f4:a3:51:b0:3d:
                    d8:08:c0:88:2b:65:6d:7b:4c:64:f5:c6:87:e5:21:
                    da:88:0f:f5:2e:2e:ba:b2:ee:df:fb:70:99:f5:61:
                    b8:40:93:46:ce:06:03:cf:0b:26:56:02:0e:04:9e:
                    63:53:c1:77:79:f7:e6:66:91:00:c0:d8:8f:20:46:
                    c8:0b:c0:17:af:ae:f2:ac:04:c3:40:a6:1b:79:fc:
                    c5:05:b0:61:64:e9:05:89:00:54:3d:86:af:bd:78:
                    37:27:11:98:01:e7:e6:ad:f4:66:ec:b9:14:77:10:
                    81:a2:52:8d:44:a0:5c:ea:4f:62:63:4c:32:9b:60:
                    18:9e:47:6f:bf:7a:98:a2:94:99:12:69:52:5f:a2:
                    49:38:3a:0d:49:50:20:1b:04:db:5d:d1:44:3a:96:
                    d7:34:5a:89:da:17:69:52:19:cc:99:80:7c:34:2f:
                    ff:45:de:5a:fa:75:12:36:99:e7:5b:40:af:d8:73:
                    a1:34:69:e6:6c:68:ea:66:65:43:b5:39:3d:a6:2d:
                    c6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CD:01:20:44:55:E9:E3:A9:9A:28:7E:D7:84:B6:E5:D7:DD:D2:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ccf97975-0cfa-3323-b088-de336c248425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.49.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:0c:6d:e2:23:a6:b4:68:ae:31:6a:9c:db:b9:c3:60:f9:95:
         71:94:b3:1d:bc:a6:99:dc:92:ba:54:0f:0c:50:31:60:11:3c:
         07:45:38:9d:d8:94:7c:fe:08:44:2c:80:89:c4:2b:5b:d4:28:
         61:81:06:7d:d4:4a:a9:b2:9e:a4:cf:11:b1:e0:0a:a7:52:7a:
         75:45:9f:3c:42:e9:fe:01:e3:87:12:c2:8c:0a:6f:00:40:5c:
         22:58:c8:9a:90:ab:ff:bb:46:2c:23:db:55:3e:ab:e4:76:19:
         8c:25:fc:53:e9:11:f1:77:8b:9b:c3:2c:c1:60:95:73:48:b0:
         6d:2a:b5:17:32:39:04:d8:b7:01:19:9b:67:bd:14:d1:f6:d7:
         ee:02:3b:68:58:2c:98:f0:5d:78:4a:5b:6d:15:61:aa:39:71:
         fc:ce:8b:80:16:c7:07:ac:09:8d:88:91:0d:2b:dc:33:53:8d:
         a9:82:1e:dd:ec:2d:cb:c2:78:34:36:7c:68:d0:50:b0:c4:d5:
         bc:41:cd:b2:bc:40:1f:40:1e:2c:71:98:02:e5:fb:60:eb:06:
         5f:e3:80:6c:3b:95:80:9b:cc:b2:f4:82:c9:b3:01:cb:48:17:
         86:1c:fa:61:ea:51:d5:73:39:47:30:99:e4:46:74:65:96:81:
         fc:43:cb:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:41:36 2026 by rpki-client