Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cca43ed1-dc16-3a21-8849-a08cdfec2d42.roa
File:                     cca43ed1-dc16-3a21-8849-a08cdfec2d42.roa (raw, json)
Hash identifier:          1oJgS6q8PKco8U1SNzbFhsZV9WNc3HOrsM31qQcHsYU=
Subject key identifier:   31:8A:11:C0:C0:D1:BB:83:1B:EE:5E:AA:66:47:34:1E:75:35:B2:AB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EF87CD754EF38A2C4FB0F7080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cca43ed1-dc16-3a21-8849-a08cdfec2d42.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     35994
IP address blocks:        23.66.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:d7:54:ef:38:a2:c4:fb:0f:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=24fa01b6-b6b5-4e03-bf50-f8d6b0397e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2a:17:99:c7:28:36:4d:9e:0a:ed:91:15:ea:
                    cc:e1:1f:9d:c5:28:33:15:33:8a:82:66:31:b7:cf:
                    8a:7c:23:6d:1e:ac:7f:45:bd:fd:86:e6:3f:cf:80:
                    a3:76:a3:45:f7:86:b3:9e:03:3e:8b:03:d2:97:92:
                    f9:b4:c4:11:4a:1c:72:96:7d:f0:30:c0:a9:a7:50:
                    a3:38:d9:5b:de:be:ce:0b:ea:82:2c:29:68:db:73:
                    63:17:41:17:40:95:84:bf:a6:ae:c4:aa:9d:de:96:
                    cf:af:c1:d9:54:16:cb:dc:44:75:d3:23:6a:e5:dd:
                    6a:36:ad:52:86:c2:da:e9:2b:8f:20:7d:fd:49:f9:
                    22:92:5e:ad:ef:99:af:82:dd:ef:2e:1f:b4:14:25:
                    7f:5f:2c:af:04:7b:3e:58:67:6f:cd:5d:93:b3:fa:
                    ed:62:1f:db:a9:84:50:e3:19:02:f9:b0:4f:04:7e:
                    72:2e:9d:aa:34:15:b7:fa:ca:42:05:53:b0:5d:2a:
                    d2:09:3f:a5:1c:9d:e4:c5:f1:34:9f:ae:93:e8:be:
                    3e:34:e8:8e:a5:ed:40:44:26:ab:99:ef:76:ca:e8:
                    5b:1e:02:a5:25:8e:61:ca:a4:69:78:f1:ae:bd:27:
                    fe:ef:6e:3b:a2:6f:cc:7f:52:47:da:52:59:ee:5c:
                    f1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:8A:11:C0:C0:D1:BB:83:1B:EE:5E:AA:66:47:34:1E:75:35:B2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cca43ed1-dc16-3a21-8849-a08cdfec2d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.66.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:7d:1e:ed:25:66:67:cd:7c:84:5e:92:07:62:ea:9a:b0:84:
         4f:55:ef:5c:b9:1c:65:25:51:f1:4a:9f:8e:b0:c6:7e:d4:83:
         12:2d:14:62:42:ef:79:e7:e9:49:d2:d0:b4:30:35:2d:b2:89:
         f5:0a:3b:a6:c9:f0:65:19:e3:21:21:7e:18:6a:d9:16:9c:28:
         a5:6d:f5:3e:32:14:13:63:24:9c:9a:4f:a3:a6:d0:00:d2:78:
         4d:d8:d1:9e:1e:98:61:d1:d8:e2:07:39:3f:d7:ef:9a:19:8f:
         67:bd:2a:6b:95:dc:23:17:82:02:0a:04:20:66:66:91:2f:a5:
         46:d9:55:64:2c:5d:74:86:8c:24:ea:2e:33:d1:b2:c5:58:7c:
         e0:b2:a3:2f:1d:9a:49:f7:fd:8b:4d:10:d1:ea:44:7c:d9:2e:
         97:f9:3f:f8:05:c3:7a:52:76:f7:cf:88:21:0d:4f:f7:35:ed:
         40:31:63:49:c8:d6:62:23:7e:0a:be:03:76:3c:0e:dd:04:a7:
         2a:b5:6e:6f:6d:45:a9:5c:4c:9d:c6:eb:27:97:cc:a1:41:96:
         46:27:9c:c5:7c:61:b2:dc:e8:4d:c9:d3:8d:72:7c:18:c7:d3:
         80:a1:34:f1:6f:30:cc:83:38:18:7d:8b:2e:1f:79:0d:1c:cc:
         f0:75:89:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:53:05 2026 by rpki-client