Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed5e0b70-0739-31d7-a043-53e703370259.roa
File:                     ed5e0b70-0739-31d7-a043-53e703370259.roa (raw, json)
Hash identifier:          uNGNvQQpLntSd5LgoKZYPIA+Avp+m6F+fCMD7T5VUQI=
Subject key identifier:   F9:14:54:D5:EC:0B:1E:4E:10:3D:CC:91:1A:6B:92:18:AE:3B:84:49
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA791C6A43C0BA9C5587EF7E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed5e0b70-0739-31d7-a043-53e703370259.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.200.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:c6:a4:3c:0b:a9:c5:58:7e:f7:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=6c2b496e-3e27-48ae-8503-bc164b86cd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:f7:85:73:05:13:73:f1:94:9d:17:9d:b2:
                    5c:f6:00:56:60:54:f1:14:9d:23:1b:03:9a:37:24:
                    e1:0c:e3:9d:cc:8a:3e:2c:a6:7c:52:fa:d4:f5:7b:
                    fa:11:50:53:83:b6:58:85:2c:d5:92:ff:77:07:24:
                    df:7b:c4:3c:45:2d:61:09:c8:f7:53:c4:4f:a8:5f:
                    fd:34:d1:23:45:49:50:54:07:67:ed:4c:99:29:bf:
                    05:35:09:d7:c7:f1:0b:78:18:2f:32:b1:b1:23:a1:
                    2b:c4:70:92:5c:72:ed:ae:fd:2f:ed:46:98:9d:0a:
                    76:5c:6c:15:45:c9:5c:a4:32:d6:0d:30:95:30:57:
                    a1:a2:bd:69:bd:77:1b:fa:ed:be:88:0d:e4:9e:00:
                    ee:39:19:e3:05:b8:04:53:f8:66:87:ff:e5:09:03:
                    90:a9:1c:2a:89:24:73:3a:46:09:c8:de:a2:7d:07:
                    73:ff:ef:1f:25:9b:4a:c6:e0:36:ea:56:65:12:1b:
                    62:76:49:37:78:19:f1:c5:48:12:36:39:63:e7:93:
                    08:ff:8c:dd:43:24:6c:8b:a3:7e:d1:c6:6d:ff:7e:
                    ea:f3:b9:cd:24:92:a0:a4:12:43:94:3b:c6:86:9f:
                    e6:70:15:4e:72:ba:96:fa:13:bf:49:3c:0a:cf:83:
                    b0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:14:54:D5:EC:0B:1E:4E:10:3D:CC:91:1A:6B:92:18:AE:3B:84:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed5e0b70-0739-31d7-a043-53e703370259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:ec:d9:05:40:45:12:28:02:86:5d:0e:a4:51:bc:f1:f6:01:
         6b:00:2c:a3:cf:14:44:e0:8c:4c:0d:e9:f5:cd:b7:eb:6a:46:
         66:b9:96:60:c5:9b:04:41:a9:76:fc:e6:3c:66:9f:53:52:a5:
         53:ce:9b:ca:6b:d2:09:19:f8:cb:83:24:12:c8:c4:b1:9e:6a:
         6a:c8:27:2e:b2:dd:22:04:d0:73:ae:c8:b8:d1:c4:29:da:6e:
         ca:67:8c:c8:27:1d:1f:eb:14:06:a3:7b:21:b5:fa:ce:2c:95:
         c3:b0:5f:70:af:66:e1:1d:f1:05:5a:99:6b:45:28:66:82:c3:
         23:b5:a6:56:2a:82:fa:72:86:12:d3:21:57:30:bc:7f:06:78:
         49:66:ed:c2:52:99:22:70:c2:22:d7:21:50:14:e1:c5:e3:e6:
         37:ff:e8:b1:32:43:37:64:82:e5:56:5b:b7:27:ea:02:cf:bc:
         97:fe:a8:a2:22:c0:92:d5:ad:58:b9:0e:22:f3:20:5b:1e:b2:
         8b:a8:d5:10:69:db:d2:30:57:0c:72:d5:9b:b1:d7:ce:7c:71:
         ce:a4:08:7f:86:4d:d7:96:f0:33:73:0e:54:f5:dd:71:7b:c5:
         46:4e:b4:38:47:ea:29:52:35:0f:de:48:ee:17:44:ef:cd:ac:
         30:96:c3:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkcakPAupxVh+9+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NmMyYjQ5NmUtM2UyNy00OGFlLTg1MDMtYmMxNjRiODZjZDZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFb3hXMFE3PxlJ0XnbJc9gBWYFTxFJ0jGwOa
NyThDOOdzIo+LKZ8UvrU9Xv6EVBTg7ZYhSzVkv93ByTfe8Q8RS1hCcj3U8RPqF/9
NNEjRUlQVAdn7UyZKb8FNQnXx/ELeBgvMrGxI6ErxHCSXHLtrv0v7UaYnQp2XGwV
RclcpDLWDTCVMFehor1pvXcb+u2+iA3kngDuORnjBbgEU/hmh//lCQOQqRwqiSRz
OkYJyN6ifQdz/+8fJZtKxuA26lZlEhtidkk3eBnxxUgSNjlj55MI/4zdQyRsi6N+
0cZt/37q87nNJJKgpBJDlDvGhp/mcBVOcrqW+hO/STwKz4OwdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPkUVNXsCx5OED3MkRprkhiuO4RJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZWQ1ZTBiNzAtMDczOS0z
MWQ3LWEwNDMtNTNlNzAzMzcwMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF8gbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTs2QVARRIoAoZdDqRRvPH2AWsALKPPFETgjEwN6fXNt+tqRma5lmDF
mwRBqXb85jxmn1NSpVPOm8pr0gkZ+MuDJBLIxLGeamrIJy6y3SIE0HOuyLjRxCna
bspnjMgnHR/rFAajeyG1+s4slcOwX3CvZuEd8QVamWtFKGaCwyO1plYqgvpyhhLT
IVcwvH8GeElm7cJSmSJwwiLXIVAU4cXj5jf/6LEyQzdkguVWW7cn6gLPvJf+qKIi
wJLVrVi5DiLzIFsesouo1RBp29IwVwxy1Zux1858cc6kCH+GTdeW8DNzDlT13XF7
xUZOtDhH6ilSNQ/eSO4XRO/NrDCWwyQ=
-----END CERTIFICATE-----
Generated at Fri Sep 4 23:03:02 2026 by rpki-client