Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a81b03e-5694-3070-8703-542cf3bc2ba8.roa
File:                     2a81b03e-5694-3070-8703-542cf3bc2ba8.roa (raw, json)
Hash identifier:          xxraVnZZrDMCm2qGkZFeAHUYEY57PfNSKRq7cZyuEug=
Subject key identifier:   82:B6:28:EE:AB:85:5D:9B:97:16:83:9E:F4:D6:1E:58:64:48:03:D7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F506D5F6D25CDF93FAFAFCB00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a81b03e-5694-3070-8703-542cf3bc2ba8.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        23.220.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:5f:6d:25:cd:f9:3f:af:af:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=53f916f2-573a-416f-ae39-6d8a2f0b87eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4d:74:ca:8c:e7:7a:72:93:8a:f3:28:e9:98:
                    12:d0:2c:5c:37:b2:46:1b:4f:06:7c:3c:d4:9a:27:
                    6a:c3:aa:25:75:d8:32:2c:77:6d:a4:09:f2:b1:32:
                    74:76:fa:ab:23:92:9c:52:15:ea:b0:cf:b6:a7:be:
                    eb:15:39:09:e6:c1:d2:4e:7b:f1:37:6c:34:a4:ad:
                    87:32:a5:3a:c3:29:2f:98:34:fb:5b:7c:1c:ff:99:
                    78:66:c6:54:58:b4:e8:f1:95:6b:cb:d0:fe:33:c7:
                    33:d1:c0:35:52:04:92:50:a3:09:74:90:13:07:ff:
                    55:14:51:a5:2e:59:b5:0a:02:4d:45:43:32:b8:49:
                    f2:5e:f7:67:08:1b:61:b4:9a:33:02:74:d1:7d:3f:
                    3a:c3:b2:59:5a:d2:93:a1:7f:b1:8c:76:4d:6c:19:
                    a3:57:c6:51:83:02:f5:a2:35:59:39:0c:45:9a:8e:
                    2b:19:9a:7d:09:f5:87:34:b1:b7:92:34:1a:2b:94:
                    ba:70:26:97:7b:dd:d8:9b:7e:f3:de:db:08:21:7a:
                    f0:1b:2c:83:b6:69:11:46:0e:89:d7:46:e3:53:29:
                    ea:fc:81:11:a1:1a:49:fc:72:c4:b4:65:e4:9b:fb:
                    1a:ff:07:fa:d0:c1:d0:01:fe:3d:9c:b2:ec:d1:1d:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B6:28:EE:AB:85:5D:9B:97:16:83:9E:F4:D6:1E:58:64:48:03:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2a81b03e-5694-3070-8703-542cf3bc2ba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.220.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:8c:3d:ef:8a:f0:4c:d6:80:48:fb:a5:b5:78:d9:00:ab:82:
         15:ab:d1:8c:21:f1:4f:53:0f:78:7b:86:be:4b:d9:1a:95:5d:
         7d:f1:9c:74:fa:05:d5:30:83:f2:c1:47:ee:5f:41:7b:fe:b7:
         ef:df:b0:82:c3:91:33:80:31:26:58:01:72:d9:20:51:a6:52:
         dc:e9:07:c5:b9:5d:10:96:fa:be:a3:ea:88:92:2c:0b:b9:63:
         8b:9b:e1:de:c8:72:db:f6:cb:31:5f:ef:cb:13:8a:a3:5b:c9:
         e6:f7:32:68:0a:67:b0:93:eb:e6:91:85:1e:8f:0a:46:da:b8:
         77:cd:4c:2c:a5:23:6a:e2:60:5e:5c:2f:26:1a:49:09:76:e8:
         d1:7f:86:0b:51:f5:0b:3b:a3:91:2f:0c:37:01:d2:f0:59:c1:
         26:40:c3:37:cf:07:91:8a:6b:de:57:4b:60:95:9e:bb:37:a9:
         ca:54:1e:70:81:d2:6c:30:bf:35:79:ef:97:eb:9b:7e:95:3e:
         0d:8c:1a:1a:33:e3:a9:dd:cc:75:25:3f:91:be:af:90:57:78:
         26:b0:1b:f8:4c:d7:39:7a:1b:25:3e:1c:ab:59:fe:57:db:7b:
         ba:35:e6:5a:e3:de:ff:09:60:9d:91:04:75:87:df:d0:e7:29:
         67:39:38:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:11:47 2026 by rpki-client