Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c24006b-62f6-3a84-b0af-6df94fcf6ed3.roa
File:                     5c24006b-62f6-3a84-b0af-6df94fcf6ed3.roa (raw, json)
Hash identifier:          Ui0BreT+T1EUi2fwmSuhmx9I7NJYWbfHqWUnAyqlZg4=
Subject key identifier:   DB:63:FB:2D:7A:7C:83:06:50:77:C6:7C:FE:B4:38:93:9C:56:BE:DA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7FFA4938CEB1339A17D13400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c24006b-62f6-3a84-b0af-6df94fcf6ed3.roa
Signing time:             Tue 14 Jul 2026 21:00:12 +0000
ROA not before:           Tue 14 Jul 2026 21:00:12 +0000
ROA not after:            Mon 12 Oct 2026 21:00:12 +0000
asID:                     16625
IP address blocks:        23.55.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7f:fa:49:38:ce:b1:33:9a:17:d1:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 14 21:00:12 2026 GMT
            Not After : Oct 12 21:00:12 2026 GMT
        Subject: CN=218e0ea6-4e02-47f1-9196-bcded9dcbdee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c5:7f:24:c4:29:fb:5b:0d:b9:b7:1d:93:da:
                    c9:2c:b6:43:45:f5:d1:7f:1e:87:96:dd:bc:1d:ad:
                    32:45:39:f8:7f:d6:6a:d4:31:b5:b1:4a:5c:c8:14:
                    7c:4d:62:e0:30:fb:d2:ca:c2:3e:10:c3:dd:a3:02:
                    d5:14:03:65:64:e8:c8:f5:04:97:22:94:0e:a7:fc:
                    56:57:61:44:28:04:42:e5:62:ee:9f:33:c8:2f:a7:
                    9f:19:d9:25:6c:88:52:9c:99:85:54:9d:68:a7:13:
                    65:3c:80:e4:ba:39:b5:fe:0b:57:72:8d:d8:15:af:
                    47:83:da:6e:4a:ef:1e:f0:86:7a:bd:d2:6d:dd:dd:
                    cc:9e:46:7d:34:22:d7:c5:a9:66:89:ad:26:79:4d:
                    bf:af:8a:ed:bc:5a:64:27:81:28:f4:25:45:b1:c8:
                    16:b8:8c:83:49:f9:e2:43:e0:31:d8:d7:1b:aa:6a:
                    ed:b3:ba:47:48:1a:e0:3c:1e:b3:aa:5e:50:99:9a:
                    e9:df:d2:48:ac:5e:57:14:9f:dd:4a:d7:0f:44:ad:
                    68:7a:29:33:d7:a4:a6:19:4a:71:a7:60:10:10:ac:
                    0e:c5:19:43:4d:54:28:ef:97:3c:dd:af:2a:38:1a:
                    11:ec:2b:17:25:92:1a:44:43:2a:04:01:40:d5:61:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:63:FB:2D:7A:7C:83:06:50:77:C6:7C:FE:B4:38:93:9C:56:BE:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c24006b-62f6-3a84-b0af-6df94fcf6ed3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:9e:28:88:c9:15:2a:6d:6c:15:a5:32:72:8c:cf:e4:27:c4:
         24:a0:ed:d5:88:dc:59:4e:21:4e:ba:a7:3d:26:22:92:b2:91:
         fd:7d:3d:b4:9f:65:8b:6b:7e:1c:c7:44:a2:76:cc:a4:28:40:
         8e:16:5c:64:53:64:25:c6:bf:55:86:c8:2d:bb:9c:41:b2:6b:
         ef:3b:76:c4:7d:06:6b:a2:cd:32:ac:78:d5:a9:f9:13:81:1e:
         0a:21:63:08:70:6d:a8:75:12:ec:51:83:90:67:b5:25:ec:4b:
         e6:01:43:e8:0a:67:61:35:9a:ca:88:75:3f:3a:6d:fa:ba:9b:
         b5:1e:96:8e:2a:4a:c2:d6:33:e3:9e:d9:ee:ee:61:2f:9f:b6:
         b7:8b:08:ab:17:e5:81:db:13:48:3d:8c:fa:81:8e:05:af:a9:
         95:1d:7a:16:08:ba:79:6e:db:4a:64:a7:52:36:76:a7:69:af:
         b8:de:f6:20:21:c1:4a:c2:7f:be:35:6f:e3:a9:ea:37:04:45:
         5e:31:80:cc:37:6b:6d:a1:08:9e:89:c5:c1:bb:a8:6b:74:d2:
         44:0a:0e:7e:c5:a0:c5:b1:a1:ce:4d:a7:68:af:4f:77:a0:ca:
         40:e2:3c:8b:1a:b7:6f:ce:26:52:3a:06:92:d7:85:d6:fd:98:
         32:8f:54:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:58:45 2026 by rpki-client