Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b60d642-3248-3cf4-bcbb-c2f9b4913d06.roa
File:                     5b60d642-3248-3cf4-bcbb-c2f9b4913d06.roa (raw, json)
Hash identifier:          fDgSzXEpXFxdLFJwh1TmwI+RE5R7fsqIStSQ64LfKV0=
Subject key identifier:   8F:AD:27:40:F0:D6:2E:D0:BA:7A:6D:F4:27:ED:C5:27:7F:45:91:BE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA791FF1086E4B136CEAA1840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b60d642-3248-3cf4-bcbb-c2f9b4913d06.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     9498
IP address blocks:        23.201.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:ff:10:86:e4:b1:36:ce:aa:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ea212de6-8fce-4c02-b27a-2f784aa28f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:97:00:dc:84:64:e4:8b:b8:ff:f2:e5:e0:
                    19:66:52:dd:a8:e2:bb:c5:9d:e2:ab:94:3d:36:b7:
                    49:db:98:95:61:0d:71:fb:5d:c1:43:0a:b2:f8:27:
                    05:31:33:72:2c:df:28:a9:a6:8b:48:51:c0:c7:19:
                    a4:82:97:9d:b6:d0:74:7c:de:15:d8:03:ff:70:db:
                    d8:47:1f:83:91:b9:36:fd:81:ed:f6:c9:e7:20:af:
                    39:04:b2:cc:00:18:1e:f4:10:1a:76:92:76:2e:9f:
                    8a:98:fc:46:16:22:78:d1:f5:b9:87:98:80:d1:56:
                    87:9a:35:c4:be:b0:3b:55:79:c9:62:45:f2:15:2a:
                    e5:02:7d:d8:b7:b1:69:73:2c:4b:9a:b5:9f:40:89:
                    25:8e:cf:d5:3f:34:50:ae:cc:4d:53:97:39:1a:a7:
                    19:9d:ff:9b:6f:a6:53:bd:41:e9:78:4a:c8:57:d6:
                    36:59:89:5c:cc:63:cc:eb:a2:ae:b0:f7:2d:41:5d:
                    df:d7:e7:9b:a0:e8:f0:49:ea:46:34:a1:47:73:5c:
                    f2:93:47:52:78:bd:52:02:9f:03:83:4c:6d:c5:91:
                    1c:74:1b:19:de:fa:f7:b1:f4:82:6f:c8:e5:1b:d5:
                    a0:fc:a2:7f:15:f5:7b:6f:fb:5c:13:5d:29:a1:9e:
                    a1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AD:27:40:F0:D6:2E:D0:BA:7A:6D:F4:27:ED:C5:27:7F:45:91:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b60d642-3248-3cf4-bcbb-c2f9b4913d06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:3e:92:a5:6c:47:6e:2a:3c:b6:53:d4:91:67:04:77:7d:89:
         a7:2a:23:3c:e6:b6:dd:48:f6:b7:b0:35:69:f2:33:ca:f1:73:
         12:21:00:71:6d:3d:df:03:9d:0f:96:3a:fe:9b:0e:1a:30:c6:
         28:b9:36:5f:bc:7e:3e:85:e6:87:67:44:6f:80:cf:3f:df:a5:
         f6:b5:18:b1:a9:68:5f:9b:89:91:b8:ee:54:b9:a9:9e:97:09:
         2c:89:db:f8:40:df:f6:7d:a5:23:85:5b:d9:87:3c:84:d6:82:
         3e:8a:9d:b3:14:65:47:6b:8c:00:c9:7b:c4:5a:08:8e:28:ef:
         77:f4:94:bd:9b:8d:b8:c9:58:fe:c3:cd:78:d1:9c:ca:04:0a:
         16:66:dc:4b:0f:7e:7a:a1:d9:26:12:22:b2:f3:f4:26:ed:ec:
         12:ab:6e:7f:e3:d9:53:5f:3e:43:33:04:fe:51:04:11:bd:0d:
         bb:f8:c7:f1:be:4b:d8:89:d9:11:f0:bb:af:95:62:0e:5f:ca:
         4f:7d:a2:42:db:99:5b:b0:9c:34:0f:f8:17:61:3b:cd:6b:e4:
         74:c1:b7:3e:b4:d8:2e:61:c6:21:9f:15:38:d7:ec:b0:ed:25:
         03:f5:a7:d0:b0:0c:af:32:fd:e5:bd:15:15:2d:00:d6:aa:88:
         eb:f4:16:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 14:23:40 2026 by rpki-client