Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ffde1f8-61fe-328f-8ef9-e2e063f99cd5.roa
File:                     9ffde1f8-61fe-328f-8ef9-e2e063f99cd5.roa (raw, json)
Hash identifier:          7WR07ZsIi3wU3hN9YUgbkwYUyV3UAGRgIrLuoUGeHUA=
Subject key identifier:   8C:08:FC:BF:FD:A0:6C:2C:EF:60:B8:B4:80:5D:EE:77:E2:50:E2:50
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EAE81AE2D9ABAFB8495FDE100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ffde1f8-61fe-328f-8ef9-e2e063f99cd5.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     55836
IP address blocks:        23.220.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:ae:2d:9a:ba:fb:84:95:fd:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=f8921734-5e1a-448e-b74a-1445f170b5e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c2:a2:11:a0:46:36:9f:ab:e3:ae:da:32:d7:
                    f1:1b:f0:e6:fe:6c:5a:73:90:53:5d:9f:9c:dd:fb:
                    dd:a5:aa:0d:b7:5f:24:c2:b1:fe:3a:97:3c:53:11:
                    a5:03:3f:9f:b3:bc:db:fd:e5:ba:60:4f:c1:49:db:
                    2e:00:b2:f4:b5:5a:78:72:f9:e4:77:90:b5:41:2d:
                    06:33:2f:27:ff:62:07:ff:7e:de:69:3a:3d:e1:66:
                    d3:b7:d6:71:19:6e:d9:a5:92:13:40:69:34:f9:b7:
                    42:0a:94:9c:3f:a7:52:84:fc:14:bb:e3:b1:7c:09:
                    58:cb:c6:ec:80:f5:7a:fe:f1:0e:2e:91:a6:0b:e2:
                    04:5c:13:64:ec:1d:f6:de:62:e1:a9:25:0b:cb:7c:
                    29:8d:80:0a:94:0f:38:3a:00:f2:ef:82:5f:0f:b7:
                    09:a5:65:04:ac:a4:5b:70:98:85:0a:96:c5:6a:56:
                    75:8b:02:67:43:4f:e6:7e:0c:03:db:43:10:5f:e7:
                    17:b7:fc:2b:83:5a:f1:fd:93:49:ee:e0:17:81:c1:
                    7d:ba:83:6e:90:25:8a:56:10:6d:65:fa:ff:ad:5a:
                    ea:be:2b:9e:95:5b:33:84:2e:43:8d:f5:1e:da:11:
                    4a:10:86:3d:d5:6a:1d:a1:b5:e5:9a:39:d5:0c:31:
                    fe:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:08:FC:BF:FD:A0:6C:2C:EF:60:B8:B4:80:5D:EE:77:E2:50:E2:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ffde1f8-61fe-328f-8ef9-e2e063f99cd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.220.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:dd:43:65:e9:38:e4:dc:41:47:94:d0:5e:da:82:f4:d4:69:
         b1:41:5a:95:14:36:27:4d:a8:ab:0a:5e:96:c6:b4:ff:a1:89:
         21:15:e0:6d:f2:76:22:cd:91:0e:02:3b:b3:bb:4a:eb:2a:35:
         2a:21:da:de:b7:13:00:02:7a:12:0c:96:39:62:d0:10:b5:cb:
         a7:1f:4a:39:da:8c:89:cd:fd:69:c1:5a:59:48:b6:c7:1b:9c:
         e8:a2:26:43:60:d5:12:41:b9:38:e8:2a:f4:58:e5:fe:ff:47:
         83:9d:a7:59:3e:32:45:2e:05:3c:da:dd:22:d1:17:41:28:cc:
         cd:ed:7b:1d:3d:8a:97:9a:b4:14:dc:b2:e0:14:9e:c2:4e:55:
         58:0e:7d:0d:e2:25:47:32:a2:51:e2:94:2b:04:6d:c6:21:b2:
         f0:11:fc:9a:6e:2d:13:3b:1f:8c:c6:00:9b:40:1f:65:e4:d3:
         65:0e:d1:c3:eb:f3:d5:34:a3:fc:81:53:50:d2:8d:7b:7a:5c:
         ec:12:bf:34:6f:07:bc:8f:98:88:23:ae:a1:8c:a9:2f:8e:9d:
         a5:11:7b:b6:5e:57:fc:aa:dd:a8:ac:0c:ff:32:a7:bc:eb:7d:
         c9:2d:b2:3a:09:77:3b:62:a2:6e:9f:26:b3:0e:48:64:ad:8a:
         ce:04:b5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:28:28 2026 by rpki-client