Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dc499aa-c043-3278-a65b-3d3431bf08c7.roa
File:                     5dc499aa-c043-3278-a65b-3d3431bf08c7.roa (raw, json)
Hash identifier:          7nSk4Sv+evUX5jBkFpLiORZNAfu9boPjn3BzYhX8pSY=
Subject key identifier:   24:D7:3C:BE:C4:8A:56:E8:2D:6A:5B:C9:A9:4D:5A:00:31:09:98:A3
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584E37647C07F48A011635AD2540
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dc499aa-c043-3278-a65b-3d3431bf08c7.roa
Signing time:             Thu 18 Jun 2026 21:00:12 +0000
ROA not before:           Thu 18 Jun 2026 21:00:12 +0000
ROA not after:            Wed 16 Sep 2026 21:00:12 +0000
asID:                     27411
IP address blocks:        23.19.53.0/24 maxlen: 24
                          2607:f5b5:3::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:37:64:7c:07:f4:8a:01:16:35:ad:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Jun 18 21:00:12 2026 GMT
            Not After : Sep 16 21:00:12 2026 GMT
        Subject: CN=acd2a153-1cff-428f-9242-f67ac965d724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:37:b8:4a:4d:ff:53:4c:70:4e:f0:24:9e:e1:
                    f3:54:ee:81:0a:40:ec:e4:4a:e0:55:09:55:e8:f2:
                    09:e1:5b:c7:2e:64:09:b0:9f:f7:df:13:04:93:66:
                    f8:17:91:76:01:23:5d:84:a3:2a:8d:6c:dc:13:cb:
                    ae:b2:dd:fa:88:d4:f9:d8:5b:c0:6c:04:bd:8d:3b:
                    78:98:8c:16:21:d0:23:96:29:d4:02:20:35:06:e2:
                    d3:c9:e8:d3:46:fd:58:2c:78:83:f1:43:4c:31:62:
                    64:81:c7:41:21:b9:a6:83:04:e2:ec:37:46:c6:9f:
                    98:cb:d6:1d:92:26:19:66:f5:24:a1:b8:02:3a:6a:
                    c7:da:e6:4a:71:58:96:65:cc:78:98:f0:02:47:5c:
                    78:41:67:9f:e6:16:0f:53:67:6c:19:56:2d:b7:c6:
                    71:70:6c:89:09:d5:1f:c1:de:cb:15:2a:02:0c:2a:
                    11:49:73:95:1a:45:42:81:04:de:6b:d6:ea:44:53:
                    71:ab:da:5b:bf:2b:49:08:9e:56:c7:6f:4e:0a:ae:
                    3e:1a:3c:ef:38:58:e0:f1:9a:6b:3d:ba:5d:74:74:
                    5a:e0:c5:f6:7b:e9:6e:d1:d6:f6:f0:ea:de:4b:ae:
                    bb:0b:09:15:c9:1f:11:99:e3:0c:41:dd:1b:57:89:
                    a6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:D7:3C:BE:C4:8A:56:E8:2D:6A:5B:C9:A9:4D:5A:00:31:09:98:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5dc499aa-c043-3278-a65b-3d3431bf08c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.19.53.0/24
                IPv6:
                  2607:f5b5:3::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:58:cc:a1:d2:cd:a7:35:2a:a7:49:a0:e9:7c:d5:0e:c1:94:
         49:e5:2f:55:a9:70:c2:59:de:02:73:c8:9b:34:2f:10:4a:a4:
         ec:1a:60:72:f5:9a:53:b8:3f:86:ae:7d:c6:81:04:c3:66:bf:
         b4:25:64:8c:81:3d:f0:c3:d8:93:32:c7:6a:75:96:4f:92:83:
         b9:f2:0a:75:0e:3e:95:fd:c1:b1:31:19:0a:36:30:99:3d:42:
         5b:92:6c:b2:7f:0f:dc:b1:c6:0e:ce:e4:50:2a:c4:68:4b:46:
         3d:4f:77:2e:73:0a:f4:d5:2e:9f:9a:f3:22:e0:b1:13:8b:73:
         a6:23:11:80:b5:df:21:89:55:fd:f0:fa:d4:ca:2e:12:2e:91:
         eb:f4:2f:f3:6e:89:76:5f:bd:93:05:42:c4:ff:58:87:63:19:
         6c:d7:1e:dc:39:c2:80:92:02:c2:c9:9a:3e:be:37:b3:65:b9:
         1b:d5:f0:86:55:da:26:88:50:10:71:ab:06:5c:d9:cb:13:bc:
         3a:a5:af:8c:d8:eb:45:42:23:d8:96:4c:89:f2:e1:79:93:f1:
         46:18:e8:81:9f:6f:8f:10:d1:9e:e7:e2:97:07:3d:2f:42:11:
         9a:c8:f3:a2:cb:d4:10:48:cc:4e:f9:4b:20:bc:fc:d4:19:42:
         f0:0f:33:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 12:50:50 2026 by rpki-client