Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f896d19-87b7-3b82-bb31-2dc75ac6b81a.roa
File:                     2f896d19-87b7-3b82-bb31-2dc75ac6b81a.roa (raw, json)
Hash identifier:          D1lZKwXClkweJdI41vvR9XALdh2EH0pJTIOJIPpAtJQ=
Subject key identifier:   58:08:77:15:50:1D:2D:3E:DE:3B:F3:86:B0:93:E1:19:FA:83:53:93
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA794E7B209DC09FF91499AC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f896d19-87b7-3b82-bb31-2dc75ac6b81a.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16625
IP address blocks:        23.6.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:94:e7:b2:09:dc:09:ff:91:49:9a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=0943b51f-c9cf-4262-bd2d-518244862469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9b:7e:48:ee:66:19:44:d9:87:28:2a:f8:8c:
                    63:aa:d2:d3:9e:6a:b2:28:c6:43:cd:7c:0a:86:3e:
                    09:3a:a6:0d:09:e9:0f:eb:ae:cf:cf:00:94:8b:ba:
                    86:c5:11:89:9b:e3:f8:25:85:b6:b8:c6:ba:eb:63:
                    f0:4c:88:65:0f:56:a2:4d:7d:01:32:c9:4d:dd:21:
                    59:3d:0f:bf:51:b3:a3:de:73:19:02:90:99:dd:d2:
                    70:c2:ed:44:0d:62:37:35:90:84:84:29:9b:4b:f6:
                    e5:30:e1:c1:cc:21:71:0f:0c:08:0d:10:5d:fc:91:
                    e9:b2:7b:42:21:da:96:14:dd:af:d8:35:54:6c:8b:
                    72:7c:78:ef:6f:a8:53:72:a5:0f:80:85:7c:55:5b:
                    8e:dc:7c:64:c4:24:1c:3b:e8:85:03:c9:fd:49:b4:
                    bd:ad:66:40:fe:ad:d6:c5:d9:e2:2f:c7:53:53:1d:
                    aa:e4:b4:6e:70:a2:8d:d3:bf:2f:ef:6c:a8:6a:53:
                    69:62:64:f7:50:e3:27:bc:e5:4c:2c:45:d6:d2:9e:
                    e6:0a:71:78:5d:44:4b:83:9b:25:19:a0:88:24:07:
                    1c:a0:2e:58:a3:e5:ce:c6:e8:d2:54:90:59:1a:5e:
                    51:3f:b6:f8:32:2e:2d:26:2e:a4:a3:dd:fc:fe:01:
                    00:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:08:77:15:50:1D:2D:3E:DE:3B:F3:86:B0:93:E1:19:FA:83:53:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2f896d19-87b7-3b82-bb31-2dc75ac6b81a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.6.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d1:b3:f5:32:c8:2b:3e:9e:1b:5d:dc:a0:c4:ef:24:9e:0f:
         57:7f:2e:ef:92:53:66:9d:1d:cb:5b:a1:e9:04:63:43:70:84:
         b5:94:fe:fb:04:98:34:72:0e:52:41:53:ae:09:5a:7a:3c:78:
         88:ac:cf:9a:f3:dd:29:3a:97:65:53:b1:12:d9:7e:6a:10:6b:
         7c:2b:8b:16:27:cd:12:06:5a:65:8f:82:8e:f2:14:3c:c6:91:
         b6:28:da:b1:b6:ac:1b:77:ee:6a:3d:91:90:34:c5:07:48:a5:
         70:d3:fd:12:97:d7:22:db:ab:78:10:5c:e6:07:7c:ad:fe:6f:
         ff:41:6e:06:a2:65:cc:03:c0:6d:52:c3:8e:f0:22:08:ba:c2:
         3d:9b:c9:6f:5d:95:eb:f0:f4:45:3f:4e:5a:d3:b7:2a:55:4f:
         f0:6e:d7:25:6f:3c:99:4e:fe:7e:79:c5:49:99:c3:b0:46:93:
         c5:6d:49:f1:e4:e9:92:04:3c:6c:df:c2:a5:e8:60:d5:c0:a8:
         04:5a:da:09:e1:ce:cf:1a:e5:c3:1f:42:f8:44:74:fe:04:2f:
         2f:1b:73:ea:25:91:89:38:58:77:0f:db:e2:14:07:12:6b:2d:
         bb:19:40:98:1d:11:43:1e:fd:f3:1b:87:57:a6:10:c7:95:14:
         7d:c6:b0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:27:26 2026 by rpki-client