Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149f387-6400-383b-bc89-e70cdbcca4c8.roa
File:                     2149f387-6400-383b-bc89-e70cdbcca4c8.roa (raw, json)
Hash identifier:          b1Sm3nwxFlvHJDyLXGcj1/a4KI2qgHeeAoBJPlyloDc=
Subject key identifier:   F6:18:D3:B0:28:30:49:AD:AE:C5:89:39:38:D7:2D:B5:C4:CE:CA:38
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497D8BB5D83BCD9D3E145FD8
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149f387-6400-383b-bc89-e70cdbcca4c8.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.200.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:8b:b5:d8:3b:cd:9d:3e:14:5f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=6e116673-3a93-4bd9-8cd3-670db16342ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:bb:c4:10:26:eb:88:d5:2b:0d:3a:dc:c1:
                    98:5b:99:de:36:1f:67:0b:4d:63:51:fb:ee:70:56:
                    67:16:57:c8:86:72:46:a4:14:be:25:f9:1e:44:40:
                    1b:1a:f6:02:24:dd:54:71:41:2f:d3:e9:9b:53:35:
                    66:eb:4e:58:6c:07:74:20:89:ba:e6:3f:a9:d4:b1:
                    a3:6f:36:4d:82:a0:ec:09:2d:11:7d:49:5f:07:5d:
                    6c:6e:d5:87:db:23:57:83:19:5c:35:83:66:21:f1:
                    bf:9e:73:eb:95:6e:fb:c4:23:d2:2c:35:82:30:e1:
                    41:0b:c2:c1:b5:ff:e7:01:b5:0a:e3:bf:20:99:2e:
                    36:10:b7:34:cb:40:e6:b3:fc:da:fb:3f:97:4d:2d:
                    aa:86:4b:f3:ee:33:be:59:1e:20:ea:d9:de:6f:b5:
                    39:9e:a5:d9:3f:b7:20:fb:5c:ff:6b:cd:bf:af:11:
                    58:8e:0c:93:69:cc:3a:09:4f:ba:99:eb:6f:d9:f0:
                    21:90:a6:e4:0b:cb:f3:1d:c1:3d:11:79:9d:55:fd:
                    b4:e5:c3:c4:f6:cd:8f:7d:1b:07:54:a3:e1:3f:28:
                    fb:ff:7f:57:1a:d2:68:ca:33:b4:40:31:97:d2:24:
                    9e:98:d8:ac:b6:fb:c3:1a:6d:86:e2:7c:5c:78:68:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:18:D3:B0:28:30:49:AD:AE:C5:89:39:38:D7:2D:B5:C4:CE:CA:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2149f387-6400-383b-bc89-e70cdbcca4c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.200.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a8:2a:1a:b0:67:8a:fc:50:5e:2f:4b:4e:fb:29:13:43:91:
         49:36:ef:89:b6:6d:72:26:9c:48:5e:b9:a9:ec:6c:77:0f:96:
         39:68:43:83:5c:a1:80:2f:bb:b8:ba:6c:b6:eb:73:98:f8:c0:
         6f:8d:29:6e:4a:ef:4b:c2:ed:9e:d2:90:13:6d:7e:7e:ad:8d:
         b0:da:04:31:9c:50:8f:0f:dc:e5:0e:ea:8b:91:8f:5f:07:1a:
         02:23:a1:1e:55:65:b0:c7:ee:5f:8f:de:3a:5c:7e:ee:2f:86:
         44:6f:d5:fb:14:e5:dd:03:b4:b1:04:99:64:98:e4:4c:38:00:
         98:34:05:44:60:4f:5b:8e:24:c7:74:5a:10:97:11:06:e2:bf:
         d5:45:ff:b8:ff:d1:f0:69:43:94:05:b7:09:6a:a2:ff:58:11:
         40:c9:08:af:f0:f2:58:c1:c0:6a:96:80:b6:2f:9f:10:21:67:
         18:0e:33:04:92:77:94:17:97:e0:f0:35:52:6d:aa:3b:09:c2:
         7b:6b:27:8b:df:e3:69:91:28:c4:e2:62:ea:b3:9a:29:d8:9d:
         9e:80:04:05:e2:cc:64:62:6a:bf:ed:09:1e:5a:9e:b3:ac:4c:
         45:3a:f6:c6:21:07:8c:75:58:97:a1:6c:f7:55:3b:1b:38:bd:
         0c:3d:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:17:12 2026 by rpki-client