Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ba6c4f-c14f-33e1-b840-78fc58ce8ca0.roa
File:                     d9ba6c4f-c14f-33e1-b840-78fc58ce8ca0.roa (raw, json)
Hash identifier:          M4yj00SfwjLiKvLsROWGDchcs0nxOe53DyAkk1eSCiE=
Subject key identifier:   8B:62:1E:F6:07:90:E3:E6:12:2B:F0:2F:35:EB:84:A8:63:CE:F4:E2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DCDC5C5622822CBB5C2B26D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ba6c4f-c14f-33e1-b840-78fc58ce8ca0.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     5432
IP address blocks:        23.61.4.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:c5:62:28:22:cb:b5:c2:b2:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=6e101250-c6f9-4f9c-b653-4d53ca309631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c2:a4:0b:08:3f:45:0b:ea:af:10:6a:7f:16:
                    56:96:00:d0:37:3f:79:e8:c6:00:53:25:65:e1:5a:
                    c6:a1:89:5d:89:91:42:68:4e:7a:fe:b8:8e:75:0f:
                    44:ca:58:63:ad:bc:76:cc:9c:c1:52:d9:7a:76:5f:
                    23:e1:d0:c2:d1:a2:08:22:a6:90:0e:45:b6:16:28:
                    3d:11:4f:62:81:c2:c4:08:6c:b2:df:b2:20:b2:b3:
                    f5:0e:96:2d:e6:27:3d:e1:9e:73:7b:50:a6:bf:1b:
                    c6:f3:d6:27:34:25:29:3a:cc:c2:73:1c:42:8d:9d:
                    e1:85:b6:8b:dc:63:8f:34:70:27:7c:f4:22:89:11:
                    46:59:b3:1d:2c:54:cf:ea:ea:bf:99:06:19:ec:2e:
                    8d:10:3a:73:3e:c6:fe:e8:3b:d6:f5:b7:e2:32:50:
                    18:5f:85:ce:62:04:65:68:ce:b9:86:54:3a:9c:2f:
                    2a:f4:85:36:75:6d:2b:0e:4d:ef:38:c0:71:10:a3:
                    4c:70:64:eb:9b:fc:ad:83:44:a8:a1:ed:e5:d0:c8:
                    53:6c:ea:1d:a5:60:49:74:62:73:39:5b:61:18:32:
                    07:4e:0c:89:d9:6c:40:e3:be:da:47:94:b1:ec:fd:
                    94:63:f3:6c:fa:91:2c:19:10:07:de:5b:03:ae:1f:
                    f9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:62:1E:F6:07:90:E3:E6:12:2B:F0:2F:35:EB:84:A8:63:CE:F4:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d9ba6c4f-c14f-33e1-b840-78fc58ce8ca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.61.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:48:82:33:3e:c3:bc:f3:ac:65:4f:22:86:96:b6:8b:a4:c8:
         1a:0c:a5:3e:22:cc:73:32:ef:ad:a6:89:66:a0:89:db:3e:d7:
         50:3c:95:8f:b3:36:20:5b:f3:a8:4c:fd:9a:02:37:3f:45:17:
         32:27:03:c4:39:d2:c3:98:fa:ca:19:53:67:ac:49:9f:20:f6:
         fa:3d:82:f0:25:34:a7:c0:52:f2:5d:c3:4c:05:02:e4:56:05:
         fa:23:b6:ef:bf:04:d0:c9:7c:4c:9c:b2:0d:4f:57:11:c1:83:
         4c:77:9e:2f:82:4c:99:4d:96:50:3b:28:45:cb:93:d4:c3:f6:
         b7:d9:61:bc:c8:1d:de:17:e6:7a:72:64:32:72:34:07:74:60:
         cb:2f:6d:80:a4:8b:67:11:e7:d6:cc:4a:50:f3:71:58:9f:ec:
         0e:da:01:1a:45:1d:89:4d:a1:30:d9:69:06:69:38:2e:c6:c9:
         65:76:1d:73:8b:fc:50:5d:0e:47:0c:81:95:60:dc:ff:ed:b9:
         09:04:ad:43:ea:4c:e7:50:80:08:0e:9e:aa:c6:7a:b4:b7:45:
         78:cc:79:18:8c:79:e8:65:72:fb:91:37:4d:17:ab:2a:e7:5b:
         9d:bf:55:cc:de:f2:90:40:97:20:29:a6:89:c5:69:af:f3:72:
         ba:ff:1d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:20:47 2026 by rpki-client