Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/498b5a46-da2b-3a16-9afa-9470e250eb44.roa
File:                     498b5a46-da2b-3a16-9afa-9470e250eb44.roa (raw, json)
Hash identifier:          ihalQneZE4dj9o7GJFSGlmC4k4SkgHLXx3+ZJ0c4jgk=
Subject key identifier:   2F:1F:65:84:92:ED:14:4D:62:22:09:F4:2C:A6:14:1F:63:1D:A6:D7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E0D843880B87838E9A2AE0100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/498b5a46-da2b-3a16-9afa-9470e250eb44.roa
Signing time:             Wed 03 Jun 2026 21:00:12 +0000
ROA not before:           Wed 03 Jun 2026 21:00:12 +0000
ROA not after:            Tue 01 Sep 2026 21:00:12 +0000
asID:                     18403
IP address blocks:        23.208.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0d:84:38:80:b8:78:38:e9:a2:ae:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  3 21:00:12 2026 GMT
            Not After : Sep  1 21:00:12 2026 GMT
        Subject: CN=c015832c-1ac3-4739-8056-03aa8e65efbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:7e:90:56:de:c2:9d:8f:b4:c2:c4:89:31:
                    72:34:eb:6e:5a:08:b7:44:84:e4:41:7a:44:fa:d9:
                    ce:9f:01:0e:e5:eb:f0:db:ba:5f:5a:55:1f:c7:e3:
                    86:f8:de:63:23:17:15:96:7e:90:47:a4:fe:d9:ef:
                    7a:4a:a0:3e:2c:07:e7:f2:37:ed:64:66:3c:ac:7b:
                    42:9c:83:4d:60:18:5c:71:0f:f3:2e:15:43:0a:05:
                    e3:74:6a:c8:cc:79:df:72:ac:fb:41:4d:9a:09:29:
                    dd:dc:be:74:5b:22:f8:36:a5:e8:49:cf:4f:d1:e1:
                    90:56:ba:20:23:43:95:1e:5b:69:59:c6:4d:22:01:
                    0e:3a:ab:d5:0b:e4:65:cd:a6:fb:cc:b9:15:70:93:
                    2c:e2:42:56:db:cd:5d:54:62:c4:b3:0e:58:f8:e6:
                    ef:55:00:fd:77:be:5b:ab:d8:b5:b2:26:6e:e6:f8:
                    63:a3:a6:f7:95:7b:d9:8b:f9:db:8a:9a:00:be:f3:
                    7b:aa:25:79:16:36:a3:d5:0d:84:2e:e6:a2:d6:0f:
                    ff:8e:47:4a:bb:ae:b1:2d:2c:80:bf:2e:26:98:95:
                    69:d1:a7:d9:c4:a1:ac:75:38:d3:73:fc:c2:31:7c:
                    a1:4a:27:fd:90:4c:b0:2f:28:b5:1b:d8:a4:02:db:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:1F:65:84:92:ED:14:4D:62:22:09:F4:2C:A6:14:1F:63:1D:A6:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/498b5a46-da2b-3a16-9afa-9470e250eb44.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.208.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:d3:e2:da:8c:b4:03:22:e7:1d:9d:21:29:1e:43:d1:60:35:
         59:57:53:9d:ea:8f:6a:30:ff:64:bc:d8:ea:f8:6a:38:77:27:
         b1:1a:d7:75:67:cf:3f:a8:c3:56:55:78:f2:e3:bf:5c:52:d3:
         67:68:85:d7:7c:ba:4c:80:c9:8c:22:47:62:9a:d3:37:18:fd:
         9c:a6:1c:ab:02:f6:48:b8:27:8b:4a:ba:c4:a8:85:44:8c:86:
         e7:8a:c7:67:d8:3e:20:78:b8:fc:c8:d4:08:26:b7:3e:1f:ab:
         d4:d6:5f:71:f3:40:fb:c6:ae:cf:4e:04:4d:a9:11:38:00:00:
         3f:53:f2:c3:6e:aa:f3:ab:b7:da:8a:a5:c9:36:c1:0f:68:77:
         c5:c0:f5:c4:72:06:0c:5d:c4:8b:0c:93:d7:f7:6b:a0:c6:37:
         de:39:09:3a:66:6a:a7:f6:01:2b:52:e2:e2:81:3e:01:be:1a:
         d3:c9:0a:2d:ea:14:c9:31:c8:3a:59:de:7d:4d:a8:98:b5:9a:
         02:03:43:84:4f:a0:87:cf:b8:39:3b:0f:ad:2d:d4:88:98:75:
         e4:cb:d7:bb:c1:9a:24:c0:72:e7:83:b3:e5:6d:54:82:23:c5:
         75:4e:d9:6c:4b:8d:78:be:6c:87:55:65:bd:2d:56:48:c1:74:
         ae:9d:89:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:41:03 2026 by rpki-client