Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/ca52a1f7-d7c4-3750-bda5-9dd11d8b2fcb.roa
File:                     ca52a1f7-d7c4-3750-bda5-9dd11d8b2fcb.roa (raw, json)
Hash identifier:          gK0k/sa8Iwax1EhSU7A+F4JO4z6m7Upc6pN7f/mEK7o=
Subject key identifier:   B6:6B:3A:3E:85:D2:57:BB:69:4B:DB:A5:A2:AC:37:29:F4:55:20:1D
Certificate issuer:       /CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
Certificate serial:       010D0C9F4328584E0005E646FC56EF4FF05B5C80
Authority key identifier: FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/ca52a1f7-d7c4-3750-bda5-9dd11d8b2fcb.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     63213
IP address blocks:        23.83.220.0/23 maxlen: 23
                          23.83.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:05:e6:46:fc:56:ef:4f:f0:5b:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=5a3b7169-6958-4da3-9bb7-61bca930ad42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a8:f9:9d:06:1e:cc:ec:7e:70:8a:81:3f:84:
                    2d:54:5f:6f:8a:fd:76:2e:14:2a:6a:09:bd:3a:f9:
                    8e:ee:bf:a1:43:32:bc:cd:20:e2:de:4d:de:bf:83:
                    1f:6d:37:cf:06:0f:21:a2:6d:aa:83:c7:f0:f0:b9:
                    3c:b0:4a:2d:08:1c:ac:c6:3c:44:30:e8:9b:e9:c8:
                    ec:ea:43:c3:1f:5b:4b:ad:5b:f4:b9:26:bf:49:b6:
                    e2:0d:59:1f:e6:51:89:e7:38:68:89:57:1b:75:a3:
                    34:11:d8:e7:d0:1e:2b:70:c0:22:5c:99:f5:c0:59:
                    6e:cd:4e:e5:f5:69:80:ea:c7:23:eb:54:9e:66:cd:
                    9d:ec:63:77:76:b0:57:f7:7f:c0:8e:34:a8:2e:48:
                    96:0b:2a:56:a6:17:ae:cc:7f:5b:ba:96:88:ec:22:
                    e5:d6:7a:16:f8:a7:ab:da:0f:41:2b:b6:16:f6:f6:
                    b8:0d:bb:0d:84:26:4b:ee:67:4f:af:1b:86:60:f5:
                    eb:cb:97:48:96:bf:fc:ec:82:f2:62:99:7c:e7:20:
                    49:d3:a2:ea:5c:83:e2:f4:74:6e:04:e7:e7:7b:06:
                    f8:60:77:0b:b5:2a:f5:2c:24:8c:b6:d2:58:a3:31:
                    63:ee:38:6d:08:1b:be:f7:82:74:02:c9:aa:6a:ad:
                    10:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:6B:3A:3E:85:D2:57:BB:69:4B:DB:A5:A2:AC:37:29:F4:55:20:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/ca52a1f7-d7c4-3750-bda5-9dd11d8b2fcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl

            X509v3 Authority Key Identifier:
                keyid:FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.83.220.0-23.83.222.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:67:fc:2c:f2:a4:e3:ca:8a:3c:28:0a:2b:7c:b1:5f:5d:d8:
         19:9d:8a:d7:88:38:48:68:72:1c:ca:c8:60:ec:f9:b4:e4:07:
         97:1e:2f:ce:5c:e1:66:ee:22:29:c1:41:43:d6:dd:d3:c0:b1:
         f7:c6:fa:d6:d2:6a:18:26:8c:7c:32:49:0f:f9:53:7c:a0:0a:
         f7:20:ce:75:e5:08:81:3c:ac:f4:b1:81:40:2c:00:ad:d9:fd:
         30:9e:aa:fe:4a:5d:c8:4b:61:31:02:b1:b0:cf:9d:10:f4:05:
         5c:df:74:a7:2d:ce:80:5c:63:67:07:b4:ea:97:b5:6c:04:c5:
         ef:c7:df:9b:b1:9c:48:09:9b:0d:28:0d:b7:96:02:76:ec:f6:
         e7:a9:a9:23:54:c2:8a:26:ac:81:c4:95:ba:a5:4f:a7:7d:76:
         bd:d6:aa:86:88:a4:9a:94:e9:f5:b1:61:ac:1f:98:2a:72:d6:
         3a:25:ad:71:de:ad:46:1e:79:e4:10:53:6e:2b:28:4f:63:fb:
         ca:52:c2:fa:04:42:80:c7:15:2f:33:3c:14:88:c9:e8:6d:79:
         b5:dd:34:5b:3b:93:38:a7:14:db:c9:56:63:36:5c:85:0d:d4:
         34:c5:e0:b9:26:db:bb:f6:ca:f0:ce:ef:ba:0c:c2:c1:95:57:
         79:9a:61:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:29:49 2026 by rpki-client