Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d2b5e05-c9a5-3975-b578-afb2e002dad2.roa
File:                     8d2b5e05-c9a5-3975-b578-afb2e002dad2.roa (raw, json)
Hash identifier:          VnQC2ak9oJyyHWhEdqsDF8AcaQE3Ma3FQdlZ02DAYcA=
Subject key identifier:   98:E6:10:89:E8:4A:61:E1:92:D0:AB:8E:4F:5F:C3:68:7A:FF:E9:10
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA787A419F31C16E63A780F80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d2b5e05-c9a5-3975-b578-afb2e002dad2.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.62.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:a4:19:f3:1c:16:e6:3a:78:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=fb069884-1da6-4cfe-a6c6-b791a8d2789b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:b1:56:76:8d:e2:12:5f:e4:1b:db:c6:3c:
                    07:b9:3f:eb:d8:9d:18:bc:a2:39:5f:42:97:94:11:
                    2a:07:c7:71:91:b7:8d:f1:c1:80:fe:f4:9e:68:af:
                    54:e5:57:22:e7:56:ac:8c:90:42:d9:0d:b7:2d:34:
                    88:6e:ca:24:da:ac:25:e0:f4:98:38:92:ae:02:3d:
                    e3:d0:28:66:0d:e7:94:08:5c:22:c7:71:19:8e:a2:
                    5d:b5:52:61:54:60:77:12:65:19:24:a8:97:6c:a2:
                    52:18:32:31:0d:2e:11:c6:5e:ec:60:f2:1b:2c:fd:
                    f0:83:07:b2:91:a3:1b:23:b7:a8:4a:99:6c:2d:ad:
                    45:44:28:92:0b:87:8b:84:2f:40:fd:d6:00:80:79:
                    8c:5d:49:72:6d:1d:05:20:e8:d1:4a:a4:a5:d3:85:
                    0d:e2:90:4e:88:24:a1:fb:1f:80:5d:50:da:aa:d5:
                    24:53:e5:54:34:71:3b:3d:dd:c1:88:75:ef:74:8b:
                    33:72:f2:80:a8:9f:f5:41:df:ac:c2:c8:ec:4e:6c:
                    5e:40:ab:ea:47:5c:cd:bb:06:96:19:56:e5:98:73:
                    6a:59:da:0f:6a:0f:e3:ef:51:2a:c2:8f:b3:69:48:
                    51:f1:95:bd:37:c6:20:2a:2b:fd:46:9b:14:74:c7:
                    cb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E6:10:89:E8:4A:61:E1:92:D0:AB:8E:4F:5F:C3:68:7A:FF:E9:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8d2b5e05-c9a5-3975-b578-afb2e002dad2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:30:70:ad:48:a1:7e:41:e7:d6:de:d5:87:59:00:a4:d4:6b:
         db:36:c9:71:21:61:ca:62:96:9b:af:6d:56:8e:32:51:51:02:
         e6:11:c8:48:53:55:25:c1:73:bf:77:34:de:29:24:b0:5b:ff:
         e7:bb:a5:56:2e:ca:f1:6d:87:57:b4:70:20:1a:1d:f5:37:2d:
         58:1c:b0:86:de:00:9f:fb:99:a2:e1:8e:b3:fd:4f:3d:e0:a2:
         1f:43:61:8a:f0:79:f4:6b:6d:e6:f3:95:56:d9:94:43:f6:2e:
         32:58:68:4a:ef:c1:7f:52:44:79:a3:46:8c:62:5e:d7:e4:3b:
         3c:03:53:00:23:3e:90:95:b0:88:cf:85:c1:79:76:3e:63:8f:
         90:f6:a1:62:95:9b:6d:f5:77:0b:92:c3:f3:0b:f5:f3:5d:0c:
         ad:aa:00:7e:17:90:5e:32:6f:8a:56:c7:11:35:71:e8:63:24:
         b6:7c:bb:ac:64:29:e4:16:b9:a0:62:e9:de:ee:87:67:27:fd:
         e4:85:15:12:21:46:c9:f8:18:d3:10:5a:ed:8d:d6:30:12:ff:
         b1:de:8f:34:c7:34:e2:89:83:8d:29:19:e0:38:76:d9:ec:fe:
         84:c8:62:40:b5:d4:66:78:23:08:5f:9a:6a:d6:f0:81:94:f9:
         6a:9e:d0:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:49:11 2026 by rpki-client