Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19749ae3-1fe1-3352-a031-1f1e10e36fe6.roa
File:                     19749ae3-1fe1-3352-a031-1f1e10e36fe6.roa (raw, json)
Hash identifier:          +ndw9Fi1u39NeKq6hTWhHeXdGi7yTjR7vlvKmFQWNDo=
Subject key identifier:   DD:02:9D:BC:0A:93:63:36:EB:FD:E2:25:CE:A4:FC:9F:2D:70:5A:CA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7E94FAB867C3DE666A97F020
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19749ae3-1fe1-3352-a031-1f1e10e36fe6.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     16625
IP address blocks:        23.36.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:94:fa:b8:67:c3:de:66:6a:97:f0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=e2dbd043-0389-4339-ae0d-4fdd23e969c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7d:d6:f3:9e:ec:b5:63:7c:bf:a3:bd:de:c4:
                    77:f5:ff:66:f9:ee:92:37:dd:c2:14:40:ec:3d:3d:
                    75:42:72:69:ff:d5:d6:8b:45:78:29:cd:99:d5:0d:
                    f1:3c:06:0c:ad:1e:ad:f9:61:73:86:a9:7b:cc:28:
                    f6:0e:16:ef:0d:ce:56:e3:c3:96:18:8f:4b:2c:1f:
                    07:8e:fe:ce:2e:2b:87:89:c1:4d:b0:73:ff:c6:f2:
                    50:70:57:b8:5d:4f:13:e6:67:6c:d7:94:ea:ff:4f:
                    1a:3d:80:4d:e1:a6:73:0e:e5:1e:78:b8:2b:5d:08:
                    a6:37:8f:2e:93:9e:07:d9:ce:35:ac:58:39:89:fd:
                    cc:24:38:ff:18:3b:58:83:28:fb:de:38:c9:c0:cc:
                    0e:e8:6d:ad:93:27:01:6f:d7:cf:b5:bb:3b:08:5d:
                    a7:1a:e0:7a:62:b3:d2:bd:0d:0f:bd:9c:b3:36:83:
                    3f:55:b0:b2:2f:8c:09:43:80:c3:6b:7c:3f:30:99:
                    61:6c:dd:53:63:d7:e6:7b:20:0d:38:15:ef:7c:7e:
                    7c:a1:d3:8c:39:fe:10:1a:06:57:46:bf:14:a7:5a:
                    56:3c:4e:28:b1:98:e4:72:cf:36:1d:60:31:2f:d3:
                    a0:6a:f5:7d:56:43:c2:4f:b1:80:76:62:b9:eb:51:
                    29:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:02:9D:BC:0A:93:63:36:EB:FD:E2:25:CE:A4:FC:9F:2D:70:5A:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/19749ae3-1fe1-3352-a031-1f1e10e36fe6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.36.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:8b:c1:59:8b:bd:5e:d9:61:1d:a0:9a:b0:f5:bb:cd:3d:11:
         72:2c:e9:7f:d8:ab:e9:f1:1a:e3:f9:12:73:3b:be:4c:80:47:
         0c:cf:11:d2:2a:00:e6:7d:cd:c8:ca:fb:4a:e6:1b:23:9b:44:
         95:bc:a9:11:a6:51:6f:36:b7:7c:17:7d:53:e1:4e:6d:e7:19:
         48:e0:40:02:63:bc:70:bc:b5:2c:34:e7:a2:40:cf:5c:5e:aa:
         ce:ad:b5:b0:8a:82:10:6b:0d:32:84:af:39:96:ef:03:fd:b7:
         f1:b8:61:9d:60:4b:53:12:00:4e:7e:88:da:13:70:31:c9:ac:
         2e:df:85:1a:77:d1:a6:51:6b:f2:16:6a:23:1c:f7:33:48:a8:
         29:7b:94:3e:bb:0a:dc:d6:39:e3:53:6f:98:8c:1a:65:d2:98:
         8f:16:2d:43:fb:ec:0c:e6:99:68:e9:0b:97:a8:6c:6e:c5:57:
         f8:e3:ab:69:a4:57:5c:1c:7f:c2:25:ba:1d:8f:b4:c4:da:00:
         8a:a4:58:9e:6e:72:98:33:94:6d:dc:52:7e:c7:9c:fe:4e:1f:
         55:93:08:ba:14:6c:c7:3b:5f:18:16:26:24:c2:b1:ce:83:64:
         ca:53:81:e4:d8:f9:a2:2e:8d:66:b4:81:bd:c9:e6:0d:5c:f9:
         8c:c2:bc:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:00:26 2026 by rpki-client