Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/072c410a-d706-39ef-b01c-9f81f164a15e.roa
File:                     072c410a-d706-39ef-b01c-9f81f164a15e.roa (raw, json)
Hash identifier:          dOdGF5ACevo80DXc2wQWSW//g2XhtteX2U0U4zfbivQ=
Subject key identifier:   14:F7:52:EE:A7:60:FD:55:27:60:0B:24:B2:6A:54:3C:26:46:92:2C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DD625BC781009F0D8878EFA00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/072c410a-d706-39ef-b01c-9f81f164a15e.roa
Signing time:             Fri 15 May 2026 01:00:24 +0000
ROA not before:           Fri 15 May 2026 01:00:24 +0000
ROA not after:            Thu 13 Aug 2026 01:00:24 +0000
asID:                     3786
IP address blocks:        23.219.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d6:25:bc:78:10:09:f0:d8:87:8e:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 15 01:00:24 2026 GMT
            Not After : Aug 13 01:00:24 2026 GMT
        Subject: CN=5a0b1bee-15a1-4ba5-9e2e-472a24a83d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:2b:39:cb:3f:eb:d0:22:bc:b6:a0:ef:ea:bd:
                    16:95:03:52:57:21:3c:84:ff:90:e0:c4:6b:d0:bd:
                    80:df:67:b1:3a:ce:46:c5:26:32:a2:de:75:b5:ab:
                    c3:0d:d0:8e:de:02:2a:cf:59:4a:74:5e:ce:c7:79:
                    e4:16:5b:58:6c:2f:0d:11:bf:81:c4:e0:92:ae:50:
                    73:ae:09:7f:ca:25:b9:76:5b:60:ed:b8:fe:78:b8:
                    6a:78:32:18:66:0d:39:bb:3e:c6:e3:88:cc:24:fd:
                    4b:a2:2b:79:13:83:d6:0d:9e:5c:bb:b0:7e:74:96:
                    25:36:af:64:ca:06:bd:a1:30:be:35:8b:5a:db:73:
                    70:7b:ee:63:f0:aa:41:fe:e3:ad:76:c9:5d:a3:86:
                    d9:6e:e6:52:d4:cc:86:72:a2:a6:4d:34:f0:da:5a:
                    f5:65:8e:42:da:17:8e:54:ce:68:81:c0:ba:48:6d:
                    8e:67:51:1e:99:56:8c:9e:b2:58:81:86:3a:4f:51:
                    d2:13:0a:31:1f:2f:ef:ca:7a:5f:83:14:6f:b6:68:
                    eb:4b:f8:0f:52:44:49:c0:75:83:b4:6d:70:fa:e3:
                    22:b3:9a:4c:4d:4e:f0:34:01:b4:c4:76:34:79:17:
                    7e:a6:c7:11:9d:43:f0:c5:8b:ca:75:28:94:9f:2e:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F7:52:EE:A7:60:FD:55:27:60:0B:24:B2:6A:54:3C:26:46:92:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/072c410a-d706-39ef-b01c-9f81f164a15e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.219.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:d5:87:46:8c:ce:26:10:99:91:26:9d:17:15:aa:c4:45:3d:
         4d:58:e3:fa:a7:66:df:ac:b9:a3:97:6b:5b:38:1b:6c:1b:6b:
         3d:b6:6e:77:b9:e9:8a:70:66:ab:9c:5a:eb:74:e4:08:71:a2:
         83:7f:32:2f:5f:c3:9d:8f:4c:37:e4:17:73:25:a8:23:87:3a:
         cb:97:15:83:ee:76:ea:50:2f:1d:95:7f:79:34:c7:1d:34:42:
         08:29:a2:4f:94:58:24:86:8f:af:84:ae:3f:4f:7a:70:d4:eb:
         0f:22:d0:da:2e:e2:8a:5c:a5:d8:9b:dd:b5:27:44:70:4d:df:
         b8:3e:b8:21:12:b2:98:37:4d:37:1a:2f:03:a0:34:bd:86:da:
         d7:7a:ec:ab:2e:f1:b0:a4:24:bc:96:e8:41:8e:f3:8e:25:fa:
         b2:df:91:61:ed:39:e2:85:4f:21:be:8a:26:a6:5d:2b:d2:7f:
         cc:01:3c:f7:3f:cf:84:d1:7b:61:5f:d6:90:c9:f2:1e:06:ed:
         44:91:36:89:82:54:b4:e7:a8:62:2a:49:56:0b:e7:13:6c:88:
         88:09:64:5c:a1:0d:9f:a8:43:7c:c2:c4:a3:20:12:a6:cc:d7:
         22:27:23:18:1c:d0:d4:d4:1c:0d:7d:64:60:c0:65:9e:9a:46:
         4a:08:77:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:28:25 2026 by rpki-client