Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c4b9dc-45dc-3dab-b696-c53a884bf15e.roa
File:                     36c4b9dc-45dc-3dab-b696-c53a884bf15e.roa (raw, json)
Hash identifier:          qq+BOJjMRrjAcSpxmaxD6iVoofh9HbU8Ez4e6AL86X0=
Subject key identifier:   30:63:6F:F5:C8:57:D9:DD:9A:F7:C4:3D:91:BC:D1:0A:7D:E3:7E:4C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F8DD88E879027729C524EA300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c4b9dc-45dc-3dab-b696-c53a884bf15e.roa
Signing time:             Mon 19 Oct 2026 13:00:12 +0000
ROA not before:           Mon 19 Oct 2026 13:00:12 +0000
ROA not after:            Sun 17 Jan 2027 14:00:12 +0000
asID:                     20940
IP address blocks:        23.211.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8d:d8:8e:87:90:27:72:9c:52:4e:a3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 19 13:00:12 2026 GMT
            Not After : Jan 17 14:00:12 2027 GMT
        Subject: CN=bde77365-86c1-4a84-87b8-8637f3ba19de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fe:ca:47:49:15:bc:05:c1:da:80:b6:fb:b0:
                    fd:d9:36:6e:e8:51:51:ad:fe:99:3e:d9:23:4d:be:
                    30:61:82:cb:0f:4c:0f:b7:d8:97:b3:b8:41:97:5e:
                    2d:18:98:19:61:34:c4:27:ab:d3:21:ce:06:ae:dd:
                    bc:f6:42:09:ea:e1:83:c8:bb:48:3a:2c:e8:14:b8:
                    ba:ed:4e:fe:53:11:32:f2:6e:ea:aa:4e:2f:8a:ed:
                    72:b3:4a:27:13:bd:f2:4c:92:f1:d2:89:91:70:98:
                    eb:f7:7f:78:12:22:f7:76:26:6a:a5:83:a5:e7:ab:
                    38:8e:5d:70:11:f0:45:46:f1:81:40:c3:a5:f9:37:
                    70:cf:d8:f8:4e:f7:6c:a1:17:57:43:7b:6e:be:fe:
                    fe:36:d4:bb:96:f2:e6:b9:40:ac:89:36:4b:ba:d8:
                    c2:e4:f9:59:99:3a:4e:8c:d0:3f:53:82:3a:96:e7:
                    38:e4:25:4f:67:20:88:3f:62:83:b9:8a:a9:82:35:
                    52:17:ed:b5:35:3f:4b:8d:97:b9:b5:a6:02:74:c8:
                    f4:f8:cb:59:a9:9a:2c:f2:1e:c9:d0:82:59:4d:67:
                    1c:41:ca:e8:41:f8:7c:2f:3c:4e:69:cb:1a:9c:61:
                    72:5f:2f:07:6e:35:24:13:e4:07:83:0a:a3:cc:78:
                    11:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:63:6F:F5:C8:57:D9:DD:9A:F7:C4:3D:91:BC:D1:0A:7D:E3:7E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/36c4b9dc-45dc-3dab-b696-c53a884bf15e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:7d:4a:71:8e:a8:fd:8f:9c:c2:53:e1:dc:20:03:19:0d:48:
         2d:83:51:c1:bd:96:5b:9d:a1:f5:84:12:65:0b:37:f6:8a:14:
         20:f4:4f:f4:53:4a:d9:33:15:f3:a6:fb:1e:e1:b7:4a:5f:36:
         d5:67:51:f3:28:b3:a2:e0:7b:14:29:a2:1d:bf:ae:d6:2e:7a:
         b4:4e:68:34:96:3f:d9:c7:0f:85:87:01:fc:f6:08:fa:1d:0a:
         63:a5:3e:05:44:ba:91:ef:59:72:fa:bb:f5:f0:b0:b7:72:ef:
         84:19:e3:31:a7:5a:d2:8f:db:32:93:75:56:49:26:5c:be:b2:
         53:eb:4e:28:c1:67:73:21:64:de:4a:8a:06:9e:4a:f5:54:38:
         5a:bc:83:1b:31:18:f9:95:fb:39:d0:2d:a8:07:f1:17:9f:27:
         c0:dd:a0:ca:73:fe:c9:53:2c:6e:ab:51:59:b0:65:9c:62:ee:
         f3:99:66:4e:d6:e4:7d:e1:6b:06:41:bd:ce:de:a2:32:ae:65:
         47:88:62:40:ba:87:06:c2:a5:84:fe:a7:e3:55:ad:ea:09:b9:
         c2:d2:db:10:07:e5:29:a4:8e:80:9a:a1:8a:50:85:b4:eb:f2:
         9c:4f:1e:43:68:7b:d8:80:32:28:8c:8f:53:53:c7:4c:8d:c8:
         6a:da:60:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 05:07:06 2026 by rpki-client