Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/365418ab-e03d-36ab-9415-0fedb94480b0.roa
File:                     365418ab-e03d-36ab-9415-0fedb94480b0.roa (raw, json)
Hash identifier:          NFXRTTqVwqAZuf7sZh/alLbHa51Js4qoxOuMuuYAYC0=
Subject key identifier:   2E:94:60:C5:84:3B:5D:30:4B:FD:C2:84:D9:3A:55:FA:40:C8:95:4A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584FA42DE5AC93BAAE3683D34E20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/365418ab-e03d-36ab-9415-0fedb94480b0.roa
Signing time:             Tue 27 Oct 2026 13:00:13 +0000
ROA not before:           Tue 27 Oct 2026 13:00:13 +0000
ROA not after:            Mon 25 Jan 2027 14:00:13 +0000
asID:                     16625
IP address blocks:        23.216.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a4:2d:e5:ac:93:ba:ae:36:83:d3:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 27 13:00:13 2026 GMT
            Not After : Jan 25 14:00:13 2027 GMT
        Subject: CN=02e99c0a-2ef2-4a7f-90f1-5e316b974a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6a:c1:fd:4a:a5:8a:71:dc:ef:7c:1c:4c:ec:
                    ac:c2:f2:4a:3c:13:66:a2:a6:76:c2:6a:4b:de:d2:
                    f7:fa:92:c7:25:86:ff:31:9e:0f:96:df:67:c2:d9:
                    db:23:53:59:18:af:b0:f2:bd:fa:2c:5c:44:b5:8c:
                    c8:b7:0e:59:b7:c7:01:88:ed:93:70:51:76:37:6e:
                    6d:1c:51:85:81:f8:17:f8:c6:86:3a:2b:e2:ce:06:
                    31:b5:55:c6:a9:24:08:9c:23:41:05:00:a8:93:10:
                    31:46:56:20:f8:64:cb:62:12:50:83:f8:07:ad:8c:
                    da:87:32:d6:bc:56:69:24:ec:6d:5a:7a:cd:11:7e:
                    18:8b:c9:51:39:4e:dd:39:48:75:f6:70:1f:da:27:
                    eb:34:21:c9:07:09:cc:ee:ca:39:94:4c:5a:33:c0:
                    f0:77:fe:63:13:02:cc:6d:9f:12:da:eb:bd:c2:d1:
                    f4:f9:78:b8:f4:1d:d1:18:dd:e7:47:ac:67:00:c0:
                    01:7b:77:63:90:94:2c:1b:33:2b:d4:a8:be:8e:c9:
                    c7:6e:5f:b8:2a:30:83:fc:8b:74:b7:77:f0:77:9c:
                    7d:08:b0:3e:36:58:27:49:60:c0:84:d1:50:f5:bc:
                    9b:8a:dd:50:83:2d:9c:aa:97:70:1d:82:75:34:fb:
                    ca:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:94:60:C5:84:3B:5D:30:4B:FD:C2:84:D9:3A:55:FA:40:C8:95:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/365418ab-e03d-36ab-9415-0fedb94480b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.216.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:07:09:73:8e:71:21:77:8a:78:62:df:3e:89:0a:d5:18:f0:
         13:25:80:3e:ad:57:d3:ad:92:94:ae:01:fc:e4:62:d0:7d:9a:
         77:a6:fe:b9:a8:a8:18:db:10:7e:40:72:21:3b:3e:0c:39:e0:
         af:46:04:14:d7:a9:c3:05:6d:9b:19:a0:6a:d0:90:04:38:e9:
         a4:5a:aa:30:41:73:86:43:6d:0c:14:2c:26:1f:f8:fd:bf:fd:
         f0:2b:24:18:6a:2e:54:00:66:fa:3e:f3:0b:98:9a:69:54:5a:
         c4:69:ce:a6:20:aa:53:e7:51:f0:99:00:c5:4b:06:0b:3d:d4:
         87:0d:5d:85:2f:bb:a3:93:e7:f9:9f:1d:7a:29:f6:24:ef:50:
         f0:f9:40:7e:75:70:6a:22:2f:57:69:26:7f:78:8c:de:b6:49:
         a8:43:b3:87:1e:33:8e:d2:ed:18:78:56:c3:0e:7a:71:6c:18:
         2f:f6:b9:b4:04:33:cb:12:85:3a:2c:85:99:d2:6b:df:f8:69:
         21:16:3f:8c:c1:7f:7b:3d:fe:e4:4f:ba:70:c5:32:e4:4f:1f:
         d9:95:51:27:1f:c9:e3:1d:30:29:23:46:d8:75:77:ea:04:62:
         a9:ca:b2:6c:2e:da:1a:42:94:88:4b:ee:66:f8:c2:56:3a:95:
         ad:1b:2c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:49:18 2026 by rpki-client