Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cdb514-b873-3fa7-998d-9792cac5922c.roa
File:                     17cdb514-b873-3fa7-998d-9792cac5922c.roa (raw, json)
Hash identifier:          k8blHb8IpfSxevQbmygcg8zLyxn/KD5VNKPtMcAGudA=
Subject key identifier:   B7:03:D3:FE:84:54:FE:49:B2:17:0D:C8:17:19:0F:B7:A9:34:8F:51
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F03A799A2E99DBB24B06A7E00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cdb514-b873-3fa7-998d-9792cac5922c.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        184.25.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:99:a2:e9:9d:bb:24:b0:6a:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=de4161e3-dbb5-4d36-8c26-a5ab1f204f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1b:63:22:02:d1:7f:d7:da:2f:89:d0:32:27:
                    38:08:92:79:7f:78:04:4b:3f:a4:d6:90:1b:50:9c:
                    42:ec:18:f8:74:b2:1d:fe:fe:b2:34:2e:92:23:30:
                    c8:1f:09:06:3e:e1:0b:2b:cf:b6:9c:43:4f:81:71:
                    d8:2a:b4:f9:04:7d:97:5d:5e:27:cf:a7:5d:ad:c9:
                    56:d1:b9:fe:44:1d:f2:07:44:88:87:3e:2a:72:e5:
                    c8:77:7d:86:c1:12:ce:49:34:c0:49:4e:dc:db:97:
                    4b:ff:93:8e:3c:5d:e2:53:bb:6c:03:f4:48:d2:01:
                    d5:6c:29:2b:49:62:32:48:05:17:05:41:fc:49:c3:
                    2a:36:bd:7d:0b:ce:29:5a:3f:5b:80:7a:a3:83:83:
                    7a:97:43:ea:69:0f:11:93:a1:79:74:a7:2f:5c:1a:
                    a8:7a:e5:6c:38:0f:95:94:d7:76:c3:d0:7b:1f:6d:
                    ec:83:8c:a8:67:0b:84:1c:e7:b1:ed:06:18:89:a9:
                    30:19:f4:3b:7d:03:03:f7:38:90:67:6a:f7:00:9d:
                    53:2a:00:b5:7b:13:25:ff:b0:1d:5a:e7:7a:29:3c:
                    21:1a:03:26:d9:75:3b:da:f9:39:53:60:ea:77:91:
                    4e:57:f4:73:2d:14:6d:f3:fb:ff:5b:63:e5:0e:e6:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:03:D3:FE:84:54:FE:49:B2:17:0D:C8:17:19:0F:B7:A9:34:8F:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/17cdb514-b873-3fa7-998d-9792cac5922c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:05:3f:f2:d1:57:b9:60:d1:9e:e1:0f:b6:a8:7e:58:57:d3:
         01:82:0c:9f:12:8c:74:05:2f:46:27:94:c4:f6:64:90:3b:6e:
         09:b5:9f:c8:9d:85:e3:9f:29:53:4b:86:57:f5:77:52:1c:a5:
         c8:23:9e:3d:55:26:73:ae:2f:fa:00:c4:e2:95:c3:60:ec:53:
         af:fd:f3:c3:ba:00:03:1c:df:bb:c4:28:a3:64:6a:b5:80:34:
         34:77:61:cd:90:e7:98:3e:bc:eb:f2:93:3e:a4:8f:63:7b:e4:
         8c:15:70:42:d3:9c:e5:f2:33:d7:7d:a8:7b:f4:0d:47:d0:8f:
         50:d5:e7:ea:e5:9a:0a:66:ae:48:1e:6c:c0:80:1a:09:32:5c:
         db:eb:1c:17:a7:9c:e0:36:79:7c:99:96:e0:04:aa:0b:13:f6:
         7c:ea:a9:c9:20:44:5b:a4:fe:fe:4a:6d:d5:ed:85:94:68:02:
         99:88:cd:cb:98:55:3c:95:3a:90:31:a5:20:8f:f8:61:b5:6b:
         94:23:d9:cb:29:69:c0:08:b7:2e:c8:9a:da:10:d1:06:70:1e:
         17:32:ed:f4:21:1b:bf:05:50:d1:56:38:8f:83:ba:bd:16:9e:
         99:0d:18:e8:94:b4:4f:b1:22:a3:4a:5b:e3:b6:cc:b5:96:2a:
         08:f6:11:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:34:45 2026 by rpki-client