Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed91d3f9-5f71-3790-b2e6-3e9987a42113.roa
File:                     ed91d3f9-5f71-3790-b2e6-3e9987a42113.roa (raw, json)
Hash identifier:          ic3mFCrtH0ScDQsruZUe9PC2yZCQ7IqBV3OMWzUfxh8=
Subject key identifier:   9F:E5:52:7F:61:AC:A3:CC:A0:57:0B:84:3D:F6:2F:75:E4:B5:EF:84
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F03A7EB397D78BCCD33249E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed91d3f9-5f71-3790-b2e6-3e9987a42113.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.72.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:eb:39:7d:78:bc:cd:33:24:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=161b05a8-d1d7-4840-bd49-27618aa909b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:22:e8:38:11:18:6d:82:aa:35:f3:01:3d:
                    8b:37:95:52:ce:16:9e:03:39:0d:80:08:10:fa:ea:
                    4b:83:f1:98:2d:4c:f9:d2:d4:ac:48:7e:b0:7b:b2:
                    ad:d7:61:40:f6:56:8f:73:f2:30:37:4c:b2:45:c3:
                    ca:d1:2e:c7:91:71:2a:d2:6e:3c:51:71:6f:75:8f:
                    35:38:50:1c:44:5f:e9:dd:b6:96:9d:b6:5b:32:9e:
                    da:ea:c6:1d:72:4f:70:37:0e:5e:3b:de:b4:ba:17:
                    7a:c8:0b:60:c1:fe:93:ce:4a:f3:d6:1e:a4:72:70:
                    0a:63:fa:ed:1e:5a:b8:92:f6:c3:7a:57:d8:db:bc:
                    7c:1d:98:c7:3c:44:bf:0e:d4:e6:38:92:40:d3:df:
                    72:28:c2:75:51:9f:2f:1e:74:c1:c8:c1:1f:54:76:
                    6b:2f:f4:44:25:34:db:e9:f6:31:89:c5:79:37:c6:
                    20:d7:83:48:f6:da:db:94:c6:f4:0a:e3:38:60:00:
                    5f:49:99:d3:60:40:c8:82:24:9b:64:11:1a:f7:48:
                    f0:2c:27:4e:4b:dc:f2:68:01:f9:8d:cc:2c:85:18:
                    dc:fb:71:f1:b1:55:bb:b6:1a:d5:13:85:fa:6b:ec:
                    4c:05:ef:84:a7:80:cb:8e:8c:6f:d9:1d:19:1a:3d:
                    2b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E5:52:7F:61:AC:A3:CC:A0:57:0B:84:3D:F6:2F:75:E4:B5:EF:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ed91d3f9-5f71-3790-b2e6-3e9987a42113.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.72.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:8e:3c:1f:dd:1d:fc:73:3e:c4:ab:7f:20:85:b1:38:b5:78:
         ec:f3:f9:98:dc:33:3c:01:20:fd:2a:00:01:1a:08:74:b2:47:
         17:f0:4b:e1:36:e6:99:0c:53:41:08:ed:94:7c:58:ac:12:25:
         d8:8f:d5:71:e3:95:d3:ec:9f:b6:95:d1:83:af:36:cb:93:9a:
         f4:90:ea:51:cc:2c:c1:e2:0d:1f:00:97:db:58:72:04:a5:54:
         da:89:c8:5b:fa:e6:b5:9d:44:d1:78:4e:ca:18:d0:f8:3e:d8:
         97:ff:65:48:fd:16:96:42:66:7d:86:38:5b:7e:03:cc:a2:d9:
         57:a8:f4:2b:9c:34:9e:68:d0:c9:f4:cf:d7:ba:09:c0:b1:94:
         dc:5c:41:1d:3e:4f:58:86:8d:58:76:3b:0a:5d:bf:9a:af:8a:
         ee:b2:0c:cf:7d:e1:c1:9c:81:78:d2:58:7e:85:07:14:ba:ad:
         ee:92:09:68:ac:b9:51:51:8e:13:5a:10:b8:57:5d:86:18:da:
         ad:74:6d:28:ee:d3:e0:93:73:11:35:48:0b:54:4d:53:74:f8:
         ff:17:f5:73:f5:53:44:61:b5:8b:84:f3:49:ff:72:61:c6:8c:
         c0:96:02:9b:3d:fd:6e:19:88:2a:82:6b:21:03:27:58:2b:0e:
         28:9a:f4:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:21:22 2026 by rpki-client