Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c565353-fea2-3856-88ce-f2955b2932be.roa
File:                     0c565353-fea2-3856-88ce-f2955b2932be.roa (raw, json)
Hash identifier:          Cird3JiDQlUDr5/9LMgfCCdkWapMs2IHxygfe+9i2Rk=
Subject key identifier:   7F:BE:AE:BD:5F:52:5E:B7:6A:93:AA:44:29:B0:E5:4D:F1:8B:32:B8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F8DD87B4150E7D7A7F0AD65C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c565353-fea2-3856-88ce-f2955b2932be.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     20940
IP address blocks:        23.217.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:7b:41:50:e7:d7:a7:f0:ad:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=bcaccb1c-1d9c-4f9f-9964-8eae06c5779d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:ae:84:4f:73:64:f1:02:b8:c7:3d:b1:81:
                    b9:ad:44:77:a0:91:21:d3:d1:89:22:84:90:2d:47:
                    a2:09:58:c5:99:7f:e0:00:64:02:e8:06:a3:c5:4a:
                    1e:ef:26:7a:7f:98:06:3d:5b:5e:96:fe:39:62:58:
                    ea:c5:87:2e:81:38:9f:5a:18:df:73:bf:30:d3:bc:
                    49:e5:11:07:4b:e9:8e:c9:ba:68:3c:38:ff:6d:cb:
                    85:fa:33:06:b1:93:a1:6d:8b:63:bf:76:82:dc:96:
                    1c:df:76:66:88:9a:20:5b:65:93:cc:62:77:eb:a8:
                    b2:54:e4:11:d4:92:29:a4:25:c6:1b:83:75:69:09:
                    e9:32:92:2b:40:ed:da:a1:a1:0c:79:ea:95:fb:4b:
                    f9:a0:aa:56:0f:c3:95:2e:64:73:16:38:30:ff:48:
                    69:8b:c3:b3:24:da:de:8a:96:b4:0b:38:a3:33:f5:
                    82:0f:67:19:57:07:d3:f0:12:83:5a:ab:7e:42:c3:
                    d7:af:32:b1:cf:cf:00:4e:f5:70:97:23:9a:d6:49:
                    83:5a:80:35:0d:b2:0b:94:c0:40:c5:44:97:0a:33:
                    46:2b:51:e9:86:a6:08:39:27:eb:18:ed:2b:df:f3:
                    30:0b:85:dd:78:00:54:22:a2:41:07:c9:f6:e0:88:
                    32:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BE:AE:BD:5F:52:5E:B7:6A:93:AA:44:29:B0:E5:4D:F1:8B:32:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c565353-fea2-3856-88ce-f2955b2932be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.217.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:3a:95:83:8a:5b:8a:4d:e4:13:ca:dd:9b:15:7a:8e:c8:e1:
         e5:96:df:76:1f:9c:e8:87:7a:94:2e:9f:9c:d2:b0:67:fb:bf:
         f8:df:fd:29:8e:7e:91:9e:43:a8:c1:65:81:79:34:8a:01:a4:
         4d:b2:2a:25:2c:f7:d5:b7:5b:4f:e4:16:28:98:d4:72:d7:a4:
         6e:46:fe:20:b5:ad:29:c3:c5:7d:ad:10:ff:f5:0f:c4:ee:9a:
         79:0d:40:b0:ea:ee:74:5f:77:05:f6:01:21:5b:8b:1f:38:75:
         b1:48:a4:44:73:58:6e:be:af:5a:f3:c5:52:ec:e3:ba:87:3f:
         bf:09:af:1e:33:13:c9:1a:3d:c6:af:27:2d:34:06:c4:a8:2e:
         c0:6f:4b:22:dc:3e:e1:16:85:ec:1e:ea:0f:3e:f9:44:8b:4e:
         7b:4c:58:37:92:7d:42:c3:cd:39:64:2b:f4:80:e5:a9:62:73:
         99:25:e3:d4:85:38:59:70:6a:f4:f5:9e:9a:23:76:86:4c:e3:
         91:f9:a5:c0:24:4f:9c:92:be:bb:d9:2c:2f:ed:46:a2:28:eb:
         c1:55:70:7e:f0:f5:43:76:5a:0b:f8:e6:81:97:85:ba:9a:ab:
         1a:13:ea:57:c5:50:8e:fd:6e:d7:dd:ef:cc:5e:63:fb:67:82:
         d0:94:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:42:38 2026 by rpki-client