Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc9530d8-6aca-35b8-9d72-b9e60cc797ae.roa
File:                     dc9530d8-6aca-35b8-9d72-b9e60cc797ae.roa (raw, json)
Hash identifier:          WGQ9XpyZPiw1eEPOZJvs8gbfHNlrhIQSjY7V7Q5jHjs=
Subject key identifier:   8C:77:FA:BF:4D:51:E0:00:BB:41:CA:23:A7:D5:7C:3E:C7:8A:A7:0A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D2A74CDC0A7BC161F7C1BD540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc9530d8-6aca-35b8-9d72-b9e60cc797ae.roa
Signing time:             Sat 14 Mar 2026 13:00:40 +0000
ROA not before:           Sat 14 Mar 2026 13:00:40 +0000
ROA not after:            Fri 12 Jun 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        23.219.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:2a:74:cd:c0:a7:bc:16:1f:7c:1b:d5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 14 13:00:40 2026 GMT
            Not After : Jun 12 13:00:40 2026 GMT
        Subject: CN=cd1938c9-f7cc-4cbc-b4b3-3ec73e389b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f4:81:25:23:67:99:2c:eb:0b:ca:4a:01:8c:
                    f2:20:73:7a:a3:60:d3:9a:ad:bc:1a:2d:33:5c:22:
                    73:a6:b0:0a:a7:11:b1:3d:6e:af:ad:1f:60:28:8c:
                    3a:e1:a2:cf:b0:84:b6:37:14:58:de:82:2d:68:65:
                    90:06:76:98:55:37:30:76:f8:2e:0a:55:5c:27:8a:
                    26:c6:f6:92:8d:c6:2b:8d:5c:ba:b3:ef:96:f5:df:
                    7a:1b:a7:ca:62:47:50:d4:ce:c6:c2:4f:4c:0e:66:
                    dd:09:47:e4:b4:2a:49:90:9b:47:79:e4:cb:75:55:
                    cd:27:32:58:a2:65:47:a6:99:5e:05:02:ba:b9:ce:
                    9f:2e:d1:9c:f8:b0:23:46:7e:85:ee:5f:ef:e3:30:
                    b2:40:af:ec:bc:5b:c2:5f:ab:44:af:09:4b:60:66:
                    be:77:db:3d:7f:64:48:d5:00:76:09:e8:80:13:ab:
                    e3:3e:39:ce:38:76:bf:85:b8:e5:6f:ac:8e:ab:eb:
                    86:0d:6f:dc:a0:67:d6:e7:ca:ca:f5:27:94:e9:f1:
                    ed:e7:60:b8:ac:9e:fc:c6:4e:17:80:d7:65:6e:92:
                    43:c0:38:b9:cd:f4:66:7b:f1:91:11:41:2c:aa:ca:
                    b9:65:8a:46:65:98:ad:09:dd:07:9d:ef:49:90:a1:
                    b8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:77:FA:BF:4D:51:E0:00:BB:41:CA:23:A7:D5:7C:3E:C7:8A:A7:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dc9530d8-6aca-35b8-9d72-b9e60cc797ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.219.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:47:56:75:51:2f:5c:c6:d1:04:dc:67:53:f1:7f:c0:33:9b:
         19:dd:f2:65:b8:eb:91:9d:61:12:ac:6a:c6:ad:9f:d0:55:0c:
         61:14:9d:8e:de:f6:d3:e8:e2:cb:98:db:64:7c:8e:96:70:a7:
         0e:42:18:0a:cc:b5:b3:33:31:46:c2:c5:67:de:02:1c:cb:43:
         9b:17:82:53:3e:db:dc:d0:52:7a:03:d3:95:92:68:3e:e6:ca:
         56:5f:80:20:91:71:71:a5:d5:43:79:2b:7b:8b:fc:ca:70:b3:
         5d:c8:c4:89:10:e7:3c:cd:c1:c9:2c:2b:16:68:98:38:4c:29:
         f6:7d:dd:34:02:a1:34:6f:6b:37:74:78:e8:d1:eb:f3:47:70:
         48:a0:91:be:b6:e5:2a:95:d0:43:ea:e9:63:44:e6:88:98:ec:
         91:b6:70:de:72:f9:be:50:de:9a:a3:09:3a:f7:4e:ac:a7:a2:
         24:6b:8f:9f:93:9a:dc:59:d5:28:2a:b2:5e:f8:c8:42:6a:3a:
         92:46:9b:92:dd:e2:72:78:84:84:a5:78:ff:f3:21:ac:3d:a6:
         7d:2e:ca:3a:0d:45:66:e9:16:51:68:55:94:01:12:7a:fd:f5:
         1c:a6:35:49:ef:0e:3d:82:cf:dc:b8:63:57:f3:d6:bd:e1:da:
         b6:c5:6a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:39 2026 by rpki-client