Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/23f9a47e-4a54-3594-b2ad-43440c42e86e.roa
File:                     23f9a47e-4a54-3594-b2ad-43440c42e86e.roa (raw, json)
Hash identifier:          YFiUW0EBx0/WTFdlCoz0SpXmVSuur50plpAFTzXArK8=
Subject key identifier:   97:9B:2D:33:C1:07:C5:73:BF:89:6C:A4:D0:1D:1D:6C:8A:1C:5E:0B
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584EE38C951E23A7CA17A4FE2580
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/23f9a47e-4a54-3594-b2ad-43440c42e86e.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     396982
IP address blocks:        206.201.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:95:1e:23:a7:ca:17:a4:fe:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=33f3de1d-6eb4-45a5-9291-059e67424aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cf:f8:08:3d:b0:74:93:68:ab:fa:f2:ff:2c:
                    b9:ce:51:63:df:dc:54:8a:69:a6:ac:06:91:d6:23:
                    cd:24:15:64:d3:95:4e:9b:18:ed:c1:a2:9d:33:16:
                    6b:43:94:1e:51:6f:de:73:50:34:e4:40:4f:3b:8f:
                    6c:48:40:98:e4:98:ea:8f:c7:80:53:62:55:3e:d9:
                    ce:20:06:2f:57:12:3a:6d:a7:b7:c1:6a:4f:a2:d8:
                    0f:34:b4:59:a7:3b:d8:3b:cb:94:80:b4:51:f6:af:
                    56:3f:7f:0d:d8:01:60:e2:5c:63:3c:29:96:e7:17:
                    5b:46:b4:9b:fd:9a:50:f8:6a:1e:df:a7:f3:88:11:
                    b8:32:ef:df:9a:c2:fd:0d:e0:a7:18:78:28:09:33:
                    25:2f:5c:5f:bd:8b:2d:ca:ff:e8:0b:e5:63:7f:d4:
                    61:9b:0d:e4:3d:10:9e:6d:ee:0d:a5:0e:15:68:90:
                    e2:46:62:42:69:a0:47:c6:3c:61:57:08:2f:02:ff:
                    94:c0:31:4e:01:0d:de:84:2c:a2:d8:5d:6c:ac:b3:
                    b4:73:c9:6f:6a:ba:fd:15:7f:8b:25:93:ba:91:dc:
                    21:82:6b:0f:53:c6:87:9f:89:3b:69:df:77:00:14:
                    31:70:5c:dd:2d:b3:04:fc:23:86:b1:cf:84:7e:7d:
                    79:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9B:2D:33:C1:07:C5:73:BF:89:6C:A4:D0:1D:1D:6C:8A:1C:5E:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/23f9a47e-4a54-3594-b2ad-43440c42e86e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:dd:72:d1:27:15:d7:bd:73:4d:fb:a1:e9:05:12:ce:8a:f8:
         dc:f0:28:13:d2:d0:c6:d6:ac:2a:52:8a:d5:87:f7:d5:85:08:
         a0:3a:78:57:03:90:8a:06:03:6a:c2:95:b9:82:cb:cc:db:74:
         83:34:0d:86:88:61:6b:35:b9:4a:2f:04:10:18:9a:e7:06:e8:
         0b:73:18:c9:fc:77:25:6d:75:8a:60:e3:62:ee:cd:0d:c4:ed:
         74:ff:33:06:94:36:4f:9f:13:73:e0:94:0d:8d:ee:df:53:e5:
         c9:e3:2e:20:48:bb:31:20:30:d9:1d:e1:69:64:cc:60:b8:64:
         15:8b:23:ec:b0:0f:8c:ac:27:ec:0c:99:cb:f8:c3:1a:e4:81:
         9e:1b:50:7a:f5:9d:d8:81:dc:60:9b:c1:fd:06:29:37:58:33:
         7b:01:e4:a6:c2:ea:2b:58:04:89:95:e9:df:13:c4:f5:bc:71:
         50:f2:81:70:6b:60:4e:6c:8f:98:3b:86:96:ff:7b:e6:c1:e5:
         62:68:29:ec:0e:65:f5:81:67:b7:df:e9:e7:fe:b3:9b:51:89:
         22:ac:b8:1d:f2:93:c1:2b:aa:0f:88:b2:15:d2:20:58:44:b3:
         d2:de:e0:dc:f8:06:89:31:9e:f8:27:3e:e5:24:69:59:cc:e5:
         ed:ea:a5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:00:49 2026 by rpki-client