Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cf39e02-0af8-3860-b326-e5fc6c9b1b49.roa
File:                     6cf39e02-0af8-3860-b326-e5fc6c9b1b49.roa (raw, json)
Hash identifier:          D2jNRissvGeDIQrM9pNZrobRG/gO8//vEgYsSg6N4fQ=
Subject key identifier:   CC:7A:D2:8B:51:89:9E:21:F2:26:F6:F9:E3:60:9C:18:1F:02:1B:FC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F480D5FBDC4A06272B8D97280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cf39e02-0af8-3860-b326-e5fc6c9b1b49.roa
Signing time:             Thu 24 Sep 2026 13:00:12 +0000
ROA not before:           Thu 24 Sep 2026 13:00:12 +0000
ROA not after:            Wed 23 Dec 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        23.53.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:48:0d:5f:bd:c4:a0:62:72:b8:d9:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 24 13:00:12 2026 GMT
            Not After : Dec 23 14:00:12 2026 GMT
        Subject: CN=d8cb5854-ca0f-47ed-839c-9958e975c001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fb:d9:c2:5c:31:0b:c3:cd:22:3e:1d:d1:c4:
                    7c:4e:66:fd:25:24:25:95:e5:bf:35:37:0f:4a:1e:
                    a8:0e:dc:ed:3b:b0:a2:ad:22:41:1f:1b:d5:ac:74:
                    9a:56:4e:92:84:30:d5:b9:f1:5a:8a:f5:d8:0e:51:
                    14:89:6f:a4:7c:00:a2:cc:98:90:74:d9:e0:62:20:
                    de:92:fb:ab:7c:b8:96:1f:17:93:0c:af:3c:32:ae:
                    0a:f0:fe:ba:8f:32:51:c0:03:51:9e:9b:1e:fe:5b:
                    43:74:d2:e5:ea:e9:34:dd:d6:f4:79:07:e0:60:4e:
                    73:ae:61:12:df:51:ce:02:c7:99:ea:48:21:30:18:
                    68:aa:1d:2e:28:5b:9d:8b:fc:37:81:e3:f2:30:bc:
                    4f:d0:fc:57:94:79:aa:bd:19:6a:2b:51:44:9e:92:
                    80:be:c4:cd:69:a6:49:74:d5:98:cf:d4:1c:5e:d6:
                    0b:6b:87:48:ff:f4:11:95:e3:20:15:70:65:c7:2e:
                    93:bd:8a:32:a4:0f:71:96:2f:1b:05:2f:70:1b:59:
                    69:4f:23:89:9b:26:8c:8d:c8:18:3a:80:bc:87:68:
                    04:af:4d:1e:f7:99:3c:58:60:53:02:4a:2b:ab:3b:
                    f7:1a:f6:a9:d0:09:0c:a5:0d:cf:02:aa:0a:67:2a:
                    47:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:7A:D2:8B:51:89:9E:21:F2:26:F6:F9:E3:60:9C:18:1F:02:1B:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cf39e02-0af8-3860-b326-e5fc6c9b1b49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.53.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b3:2a:90:a7:e3:8d:e2:b6:86:41:b6:19:a3:ed:ca:a8:bf:
         5f:5f:4a:35:4c:5f:0d:df:40:55:5b:b5:e4:f0:a5:ed:44:f6:
         f8:b9:18:80:18:cb:a5:b7:f6:02:c6:58:34:23:52:92:13:f9:
         49:79:c2:40:7b:0d:43:42:88:dc:9f:12:bd:aa:a7:11:74:3f:
         d8:b9:df:c3:3f:f2:62:8c:e3:a2:08:f3:6b:17:22:01:40:a2:
         92:03:bd:7e:b9:64:61:f4:ff:8b:b3:52:12:a4:c7:2c:5f:95:
         b5:5a:09:6c:5a:f8:eb:2a:82:60:33:46:e5:4f:c4:d6:44:01:
         72:bf:d8:18:e2:25:b3:6f:96:b3:be:93:c9:3b:8c:10:23:64:
         71:be:d0:71:10:02:6b:34:f3:f7:8b:c5:a1:fd:da:14:1e:e9:
         53:ec:53:f1:a5:23:96:aa:4a:6d:75:a5:f2:67:5b:1f:ed:31:
         62:40:ce:f5:4e:b4:c5:00:d7:fa:ee:b1:ba:0f:4a:07:86:2a:
         f8:e3:e7:f8:1d:eb:71:09:23:b3:29:6b:fb:a7:80:bc:11:32:
         3f:79:52:e3:ba:1b:b8:7f:5e:8d:49:dc:43:5c:7c:2e:35:33:
         67:8b:8c:a4:58:4e:fa:ff:7a:42:8b:e2:f4:00:59:12:66:28:
         48:d0:d0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 21:42:00 2026 by rpki-client