Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5f1064ed-2f73-319e-825b-8b24f5cd77a0.roa
File:                     5f1064ed-2f73-319e-825b-8b24f5cd77a0.roa (raw, json)
Hash identifier:          Es/qt1FMD6lkNa5aNJDz5WiV7aa5bxUk5tja7v2rpKw=
Subject key identifier:   54:0A:E1:C8:D4:58:83:D6:3F:A3:C4:C1:DA:8B:51:D6:15:3D:D7:5E
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584EB9C83139C343514649949300
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5f1064ed-2f73-319e-825b-8b24f5cd77a0.roa
Signing time:             Tue 04 Aug 2026 13:56:25 +0000
ROA not before:           Tue 04 Aug 2026 13:56:25 +0000
ROA not after:            Mon 02 Nov 2026 14:56:25 +0000
asID:                     7203
IP address blocks:        23.82.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b9:c8:31:39:c3:43:51:46:49:94:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Aug  4 13:56:25 2026 GMT
            Not After : Nov  2 14:56:25 2026 GMT
        Subject: CN=6449454b-d317-42c9-bfc2-5090b1d41a25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c0:dc:1c:c2:ea:52:94:dd:3a:1f:a7:f5:e4:
                    91:de:6b:f1:aa:e9:a1:a0:01:64:3e:c0:39:7d:2a:
                    d8:f2:c2:26:e9:e4:a1:36:99:0c:2d:5a:11:c8:c4:
                    54:2a:c4:b1:b4:04:60:9a:f4:19:b1:09:b7:d1:28:
                    e3:c9:d9:fa:61:cd:64:17:26:7b:51:10:f8:e5:25:
                    56:34:7d:a5:19:19:52:e3:2b:ac:c3:53:91:6d:eb:
                    35:34:91:68:57:c6:e5:a1:8b:1e:33:3a:53:61:73:
                    cc:4b:e6:ef:96:7f:70:d8:af:2b:90:ba:5e:09:61:
                    af:75:2e:8f:62:80:71:b0:08:3d:f9:ac:bd:8c:b9:
                    da:f9:1c:c1:18:2e:4c:69:54:b1:dd:fd:e0:a6:69:
                    a5:c1:3f:72:69:5f:88:a3:98:aa:e2:a6:a8:23:c6:
                    6f:e7:cd:67:9f:85:03:4e:00:bf:e0:8a:0f:51:4b:
                    96:20:2b:1d:bb:c5:06:44:0c:70:6f:3a:88:03:1f:
                    c5:15:8b:bd:2d:09:8f:e1:c1:ac:58:37:1e:64:09:
                    01:75:86:30:da:56:0b:70:8a:20:45:7f:99:62:97:
                    01:ba:89:50:7b:c5:9a:fb:45:ed:3f:91:07:89:9e:
                    b8:d4:fa:38:1f:90:f6:03:ef:9d:24:7e:ff:2d:95:
                    c7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0A:E1:C8:D4:58:83:D6:3F:A3:C4:C1:DA:8B:51:D6:15:3D:D7:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/5f1064ed-2f73-319e-825b-8b24f5cd77a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.82.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b8:12:0e:af:01:b1:3c:ff:67:83:20:fa:d4:64:77:30:09:
         a0:1e:c0:5c:5c:d6:aa:6b:fa:f5:72:e8:11:d7:05:f7:c5:14:
         95:53:98:8f:2b:b3:6d:08:d9:fd:07:b0:51:db:b3:43:b1:d0:
         e5:37:a2:f1:4e:17:ac:2f:be:45:f7:da:60:d5:d7:0b:cc:90:
         36:9c:1a:5e:49:21:1e:4f:e9:80:cf:8d:8a:27:85:2f:20:85:
         df:b1:5d:e0:cd:cb:ff:7d:96:6a:39:77:5b:e1:a1:53:a7:02:
         4f:00:e6:24:aa:ef:a9:47:b3:eb:b5:82:5e:8b:0b:c2:f5:2c:
         3d:81:4c:21:e8:a2:91:4d:e0:8e:02:f1:7e:6c:ba:f3:68:12:
         a5:44:b6:06:bd:1e:6c:3a:ee:e5:07:65:e4:83:4b:a8:0d:bf:
         e6:8d:0d:94:60:6b:01:16:66:bd:55:fe:75:18:b4:34:cd:b4:
         f1:3e:c8:d1:0b:41:eb:a2:41:95:8e:c5:f3:30:12:b2:b0:64:
         06:10:9f:97:a3:e5:95:fe:b9:dc:72:32:45:22:dc:f2:52:02:
         dc:48:cb:1a:02:fb:8a:65:f3:b3:5d:ef:aa:b4:6c:1a:8a:4c:
         54:2b:fa:54:ca:b0:80:86:a7:04:81:4e:7a:6b:7e:dd:21:c4:
         ff:8d:11:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 17:38:37 2026 by rpki-client