Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c6a725f-243b-3312-9cfe-c0544cc3aa8a.roa
File:                     5c6a725f-243b-3312-9cfe-c0544cc3aa8a.roa (raw, json)
Hash identifier:          toOqjvWfA7bRD9x2MGER6MatxeLyGaUa2/CI3kU2RZg=
Subject key identifier:   F2:2C:60:74:9E:E9:AC:ED:1A:46:2E:06:43:1D:FB:6F:8C:2E:FE:90
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DFA7079B9930DBF5D7581DEC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c6a725f-243b-3312-9cfe-c0544cc3aa8a.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     20940
IP address blocks:        23.52.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:79:b9:93:0d:bf:5d:75:81:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=39eaf94b-6b13-4f43-a9c3-11a289391adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8f:92:a0:9b:91:e1:dc:63:a3:c0:cc:af:53:
                    30:b0:99:40:26:fa:66:48:51:43:41:9b:d8:3b:ec:
                    d4:c4:fa:f4:a5:15:8b:d9:5f:15:80:1e:c5:5e:f5:
                    59:9f:a4:48:a2:33:f3:1e:62:45:c9:2d:bf:b8:13:
                    a2:e1:f1:c4:fa:3e:0e:45:81:8c:ef:c0:fe:2d:79:
                    ad:a5:75:ea:87:bf:65:70:0b:ca:77:ea:12:a9:10:
                    4a:fb:0d:ae:54:77:30:61:ab:58:7e:1d:83:30:73:
                    0c:cd:cd:b6:d9:b8:0c:eb:9a:9b:36:86:a6:2e:58:
                    42:3d:e1:94:c1:70:f0:d5:5c:41:58:06:54:42:94:
                    88:b7:3c:a6:82:ce:c7:55:ff:c6:f2:27:b4:ca:3a:
                    f5:0f:2b:8a:93:dd:56:0c:0a:c5:0b:cd:0e:b6:42:
                    ca:98:47:b6:04:aa:bb:14:95:9b:8c:c3:4a:c6:78:
                    8f:e1:a8:d5:c5:58:2f:90:53:cd:75:3a:58:b2:6c:
                    34:65:24:ae:38:b7:25:68:2a:a5:0d:07:2b:41:b9:
                    0d:99:a9:88:0d:9f:8d:10:e3:b5:13:cf:6f:ce:69:
                    6f:8d:80:a7:5e:a6:9a:0d:1a:be:e4:3c:cd:0c:25:
                    c1:82:17:81:fc:b8:16:b6:40:21:7d:89:c3:a2:34:
                    23:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2C:60:74:9E:E9:AC:ED:1A:46:2E:06:43:1D:FB:6F:8C:2E:FE:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5c6a725f-243b-3312-9cfe-c0544cc3aa8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:89:cc:22:79:be:3d:92:49:b6:4e:4d:ce:4b:9b:3f:ea:ef:
         33:c3:1b:63:5b:2d:30:cc:aa:b6:70:d1:d4:c7:b4:31:d5:3d:
         40:05:2c:05:a9:ca:bd:86:d9:ba:56:b0:61:f5:5b:f7:4a:cc:
         9f:01:e6:17:6e:26:00:a5:2a:20:91:20:46:07:d5:17:3d:d7:
         f9:63:70:ce:46:86:ce:6a:f2:4d:f9:73:8f:fe:9f:eb:df:45:
         6e:55:f0:f4:37:30:ec:83:c5:3d:71:04:a2:7b:63:5a:dc:8d:
         6d:55:bf:f1:e2:4f:22:b5:f3:7d:c2:33:ab:15:64:d8:cb:4c:
         db:31:3e:5e:d8:a1:77:f0:fb:db:3f:b8:70:e9:0b:1c:4d:3c:
         42:b4:2d:14:c4:06:ae:34:e5:53:25:3c:ee:e0:3f:b2:76:e1:
         19:2d:15:c7:8a:3c:69:9a:99:26:35:ce:f0:43:f6:9f:07:b2:
         12:5c:8d:48:f4:63:75:df:ce:0c:a7:9e:4a:ac:9f:de:d0:6e:
         05:6c:fc:ef:7c:e6:55:6d:a4:ad:68:97:ab:59:c5:73:c7:bd:
         cc:72:d7:59:12:5d:c5:fa:a4:d4:cd:90:08:f2:8e:09:57:5a:
         41:c4:cd:19:11:36:8d:ab:72:26:ba:97:c2:c3:2c:66:ce:a0:
         83:4c:44:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:55:27 2026 by rpki-client