Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de013b70-483c-39c0-a908-9c7dee482fdf.roa
File:                     de013b70-483c-39c0-a908-9c7dee482fdf.roa (raw, json)
Hash identifier:          WcRNgwQiTAU/tF31aKJZ09PBXiFch6OeRHc37XNnzVA=
Subject key identifier:   78:B8:C1:63:20:F6:B0:FA:BC:40:24:4D:18:DF:DA:F0:16:09:A0:15
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DBBA0648128F28AA0A16EF200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de013b70-483c-39c0-a908-9c7dee482fdf.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     20940
IP address blocks:        23.37.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:64:81:28:f2:8a:a0:a1:6e:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=bbf365a1-6391-44fa-b409-421d0ff92e83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:99:88:72:e5:50:04:82:d5:42:31:91:24:5c:
                    c7:60:51:3a:16:54:b1:2b:37:aa:51:55:5a:25:62:
                    31:25:af:fe:a9:a6:5b:7d:4a:8e:1d:91:15:37:83:
                    c8:c7:ea:1c:ba:10:70:31:84:94:61:d3:de:1e:8f:
                    0f:ad:95:62:c9:59:40:62:cd:5b:15:76:c4:19:0b:
                    a0:85:ff:89:f6:bb:f9:54:6d:33:5b:13:73:66:99:
                    43:8a:bb:f1:1f:c0:d2:d9:11:c5:12:4a:a4:e5:14:
                    70:53:e9:ec:6a:5e:b1:c7:a6:29:7f:29:3a:12:53:
                    98:19:12:82:5b:d8:92:75:54:37:ce:f6:71:23:da:
                    2c:d6:ef:36:81:b1:b2:98:36:5d:40:36:45:ec:71:
                    ad:33:75:4c:8b:04:59:4b:f9:75:d9:c4:66:ea:b6:
                    3c:a7:a2:43:28:b3:8c:d8:74:c2:5e:22:68:57:8f:
                    db:d0:95:87:ab:e5:35:bc:f9:85:d2:50:b7:7f:b1:
                    fa:ac:87:ac:c7:1d:0c:55:de:f0:57:46:b5:47:2f:
                    24:a6:83:56:70:64:e4:91:cc:0c:f7:21:28:df:53:
                    aa:ac:05:01:cf:5f:e3:5c:f6:ad:4a:6d:f7:51:73:
                    8b:1b:0a:38:42:95:75:b8:c3:86:83:03:56:70:b4:
                    bd:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:B8:C1:63:20:F6:B0:FA:BC:40:24:4D:18:DF:DA:F0:16:09:A0:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/de013b70-483c-39c0-a908-9c7dee482fdf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.37.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:2d:0a:7d:29:2f:6c:95:15:c0:60:57:81:7c:a2:ea:e3:7a:
         11:41:6a:9f:57:cb:82:3d:7c:b6:eb:e7:12:c8:54:7b:32:d9:
         6b:5b:cf:e6:a5:c5:eb:bf:23:b2:94:41:85:e0:8e:fd:a7:91:
         23:e0:d2:65:06:6a:5e:4f:98:57:0b:49:19:88:c8:47:2e:f7:
         43:98:c1:b4:b6:f5:a0:c2:1b:03:7e:85:46:66:6f:78:87:10:
         91:8e:1d:43:b6:d2:15:5d:93:7a:e2:db:78:20:c8:f9:aa:4b:
         11:ac:fa:be:cf:3b:2d:34:f8:2d:54:ae:0b:dc:d6:8c:fa:7e:
         41:1a:62:98:70:19:3b:aa:3b:29:1d:17:48:ab:d5:15:3b:b9:
         90:e4:4a:7f:6e:8f:df:b9:c8:a4:2c:a5:c5:2f:d4:d9:db:50:
         6d:bd:8b:21:fa:41:df:c2:4c:93:d3:7c:f2:f7:15:f4:00:21:
         40:af:27:22:f4:61:78:71:ad:a8:51:c8:2b:6c:ea:68:3c:c9:
         16:a1:91:a9:dc:29:31:97:3b:1f:5c:01:c9:d9:64:2e:38:a0:
         dc:b9:66:32:4d:73:e0:3f:30:0f:8c:3f:7e:8b:09:bc:1d:5a:
         cf:2e:fc:99:89:02:cb:63:46:28:c2:30:8d:e5:d9:cf:1c:20:
         c4:82:bb:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:48 2026 by rpki-client