Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dd9219-8c1a-350d-903b-2245dcf201d8.roa
File:                     85dd9219-8c1a-350d-903b-2245dcf201d8.roa (raw, json)
Hash identifier:          ikJLmRqzEyPm4Vv/yda2BDN2RyYbNphuNtN7zdiyYmM=
Subject key identifier:   43:DA:48:89:BA:DE:5F:6D:87:09:E1:C5:98:2D:4C:17:D9:6B:F4:72
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EAE81AC4C366D8EA9B02521C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dd9219-8c1a-350d-903b-2245dcf201d8.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     20940
IP address blocks:        23.223.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:ac:4c:36:6d:8e:a9:b0:25:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=ba250a31-a983-400a-be67-d80283c3da21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c9:d9:66:3f:89:d3:87:75:df:7c:34:b7:8e:
                    5a:48:66:41:53:28:04:66:c3:94:ee:22:eb:4c:86:
                    d5:f7:e7:cd:30:a2:04:67:0f:1d:c4:02:f5:c2:d0:
                    57:d0:ea:7a:19:70:f3:3c:13:b5:03:7c:fd:68:32:
                    ad:87:d7:c8:26:9b:06:6e:cc:00:1f:2d:4e:51:95:
                    22:b8:1b:42:27:4a:55:65:92:7e:fa:a9:36:0d:ee:
                    18:28:9f:42:db:85:16:47:ea:b3:b8:9d:54:32:84:
                    6e:1e:90:a0:b7:01:67:f9:a2:14:28:10:65:aa:ef:
                    c4:af:ba:0f:0a:2d:56:f3:e9:a7:8d:d2:7f:00:9b:
                    92:1b:09:c2:4c:51:e2:f1:29:1c:ac:8e:47:11:7d:
                    55:6b:d8:be:0d:74:cf:85:98:39:a8:31:69:16:66:
                    1b:be:2c:c3:5e:e0:01:9d:c9:c9:fa:a5:0e:f6:a7:
                    b4:1e:f3:71:53:02:65:1d:62:a1:8e:53:48:1d:e6:
                    3e:6c:eb:ed:bd:e5:19:34:19:6a:cb:e9:7b:fa:a6:
                    c5:c9:cf:e0:7c:2d:d8:19:ab:82:19:f0:bd:f4:40:
                    c9:f6:d0:e5:fd:71:87:c9:2e:db:18:ff:ca:53:7f:
                    d8:4d:39:a9:c5:7a:bf:06:f6:8d:1d:85:72:7b:8c:
                    f1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:DA:48:89:BA:DE:5F:6D:87:09:E1:C5:98:2D:4C:17:D9:6B:F4:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/85dd9219-8c1a-350d-903b-2245dcf201d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.223.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:5a:4c:56:7c:b5:a6:f2:fb:a1:e0:e7:56:f3:8e:9a:e1:35:
         2b:e1:ad:c6:e1:3b:1c:70:33:29:4d:5b:94:50:82:62:f0:b8:
         f0:fa:c2:20:c0:01:07:e0:b9:ee:c8:04:57:32:7f:ff:6f:dd:
         7d:cd:a3:ac:36:94:43:6f:95:89:27:06:cb:f9:88:00:57:f6:
         ee:f2:db:9c:ff:8d:18:03:c8:99:c7:95:a8:e2:fe:ad:f6:ff:
         60:48:f9:2d:46:a8:db:d0:1d:7d:25:a3:5b:f9:a6:12:70:51:
         bb:56:e0:3a:22:e6:ed:20:af:db:8f:5a:32:7b:8e:0b:f2:c8:
         2e:73:c9:dd:5c:e6:3f:28:a7:c4:9c:0d:fe:ff:b1:5c:7a:27:
         aa:3b:d5:ec:d4:93:d8:5b:95:f9:7a:9e:31:f7:03:c9:af:f5:
         63:fe:4b:b7:71:8a:ef:77:eb:0f:22:3a:3e:bc:10:ee:90:b2:
         f8:6d:ac:bb:de:21:ca:af:5e:9e:f8:02:b3:d9:a6:8c:3e:3a:
         71:be:fc:2c:fb:9b:05:73:4a:f7:6f:7f:82:9d:8d:ea:23:0f:
         ff:de:b0:bb:03:cd:01:61:cf:fc:d7:84:bc:bf:88:5d:59:52:
         44:2e:74:7c:d2:f3:31:74:f4:b3:63:94:55:43:db:25:ea:ec:
         19:e9:1d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:28:34 2026 by rpki-client