Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7bb03b1-7428-34b7-be13-700d9df820d7.roa
File:                     a7bb03b1-7428-34b7-be13-700d9df820d7.roa (raw, json)
Hash identifier:          +dKRU5p1pf52t6xl2QyjF2/szq5OvyOiwfdoinDJKuE=
Subject key identifier:   A7:EB:19:62:00:73:83:D2:51:FD:D7:8E:65:AF:5A:BF:5D:3C:F6:79
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E0006208825ECD206F87B4440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7bb03b1-7428-34b7-be13-700d9df820d7.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     20940
IP address blocks:        23.215.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:20:88:25:ec:d2:06:f8:7b:44:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=3745c816-a9c4-47a4-9c6a-e59db922bfcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:49:35:8a:60:e4:25:c9:c2:3e:42:4e:9b:40:
                    ed:da:0f:86:03:68:67:3d:5a:eb:e2:a6:28:1b:54:
                    0f:63:13:c1:f8:75:07:ff:b4:bb:59:95:fb:27:ce:
                    f0:8e:6a:82:d4:84:56:14:6c:a2:fe:c5:58:17:c6:
                    3a:22:42:94:a0:34:d8:fa:20:fa:9b:41:e4:95:3c:
                    95:12:f6:39:aa:3e:73:a3:44:89:51:e1:5c:b7:4f:
                    c0:17:38:23:c9:3e:5a:53:c2:14:79:a2:75:f4:fc:
                    41:0b:4a:51:32:38:75:03:e4:50:11:d8:6a:b8:f2:
                    33:9a:cb:59:c5:dd:eb:c2:70:5a:92:75:7d:9e:5f:
                    d6:75:cf:9e:9c:ce:5e:ba:0b:e5:dc:a9:c1:37:58:
                    e4:4f:22:e4:77:f4:58:15:7d:91:db:ed:fc:a6:1a:
                    65:08:74:18:05:dd:fa:28:5d:1c:06:98:d9:d6:66:
                    07:a5:af:ec:e5:22:a7:f0:09:f9:13:8d:c4:6a:07:
                    85:f1:17:ec:da:2e:fa:56:28:b5:6e:5a:30:2c:1b:
                    df:ab:a0:08:f4:6d:14:27:99:9a:50:57:89:86:3b:
                    44:eb:62:be:61:00:d7:46:55:6d:46:7d:6c:c4:f0:
                    a7:89:72:3b:51:8d:6e:03:3f:6e:a3:91:be:1f:c3:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:EB:19:62:00:73:83:D2:51:FD:D7:8E:65:AF:5A:BF:5D:3C:F6:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7bb03b1-7428-34b7-be13-700d9df820d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.215.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:85:e5:3b:49:77:62:15:a6:03:a4:ba:33:73:a6:7c:6a:8a:
         7c:76:e7:44:93:3e:ce:10:61:d1:19:31:81:92:d8:0b:4d:de:
         0f:db:2d:5b:46:53:e3:b8:bb:b6:87:28:25:b6:2e:19:44:da:
         ad:31:06:0b:b8:cc:cd:40:ed:36:76:cb:cd:10:39:88:70:8d:
         97:03:8b:ef:1b:e0:ae:aa:8d:ff:80:f2:24:75:48:90:87:13:
         52:74:89:56:95:cc:d9:89:07:28:a3:e1:b6:53:44:78:f2:0c:
         99:71:93:ca:9e:18:5a:db:2f:1b:25:e7:fc:c4:bd:d1:0e:22:
         90:9e:4f:ae:b0:fd:ef:97:71:e4:b9:5b:1c:91:76:ed:f4:df:
         c7:55:51:0d:24:cc:dc:2e:50:2f:f3:fb:74:76:79:d8:da:fd:
         49:57:6e:28:7a:32:c3:1c:8d:38:4d:b9:77:65:57:21:2c:07:
         f9:b6:90:b4:59:05:b0:e8:d5:60:a4:d2:1a:6b:af:27:fd:ec:
         02:cf:7e:82:4b:4d:01:c4:25:c4:9e:d5:48:05:be:01:74:87:
         09:d7:30:7f:46:97:a7:31:c9:5a:d2:65:98:fa:25:de:01:1c:
         d1:33:a6:a7:28:3d:ce:76:89:10:40:1a:6c:5d:f1:5a:91:ae:
         a7:39:1d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:55:48 2026 by rpki-client