Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c096e1d2-b6bc-304e-8840-44df79ef8cfc.roa
File:                     c096e1d2-b6bc-304e-8840-44df79ef8cfc.roa (raw, json)
Hash identifier:          rpwRq8Xjlv/TrEiHEZJVEptqNwIb6VOkDe8chpy617g=
Subject key identifier:   15:31:B1:D1:95:13:E6:DC:63:CD:2E:D7:31:06:77:A2:5C:B0:C0:7A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E0006225F4048CA3404738040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c096e1d2-b6bc-304e-8840-44df79ef8cfc.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     20940
IP address blocks:        23.217.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:22:5f:40:48:ca:34:04:73:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=353e0b8f-5ee9-446a-889a-6bfa44259919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d8:01:c8:8f:f8:a6:5c:f4:61:63:6e:a5:f6:
                    1b:3a:24:75:a2:f7:82:c0:ae:3c:a2:cc:4c:7b:02:
                    b6:08:cf:5d:c0:54:56:af:a2:44:d8:9e:d2:83:ac:
                    2c:0f:f3:2f:97:59:78:8e:20:43:7a:89:8d:af:fb:
                    75:0d:38:d9:75:f1:13:f2:45:e7:2a:b3:5a:3a:a7:
                    ee:34:25:16:3a:ac:5d:dd:5d:f9:cc:40:fc:72:39:
                    7b:a8:0b:ac:9f:72:fb:19:75:ff:9c:f5:52:4c:90:
                    71:4d:e8:d9:6c:06:92:2f:68:80:5a:49:92:a0:4d:
                    fc:8e:84:a1:b7:5d:ce:b2:d3:41:ea:d6:e6:d3:8c:
                    95:59:c2:38:02:49:38:38:d1:16:d5:05:6a:b9:d8:
                    82:fb:ae:ff:da:5d:09:fb:43:53:4b:a7:d4:14:4d:
                    4d:05:c0:18:ed:ad:f3:8c:fd:5c:d5:0b:9a:df:a4:
                    cc:80:88:13:f6:e7:6d:94:67:ad:a6:e9:9b:25:a2:
                    63:9d:38:c5:05:27:25:59:11:41:45:b5:10:eb:e9:
                    b2:8f:6e:4a:e1:46:f6:ae:ac:be:a9:67:18:1c:14:
                    7c:f7:76:0d:ea:d0:0a:cc:62:0c:99:d5:11:f3:68:
                    68:00:ec:68:e1:fe:7e:4e:08:44:e4:aa:8d:23:4b:
                    9e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:31:B1:D1:95:13:E6:DC:63:CD:2E:D7:31:06:77:A2:5C:B0:C0:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c096e1d2-b6bc-304e-8840-44df79ef8cfc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.217.100.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:06:8d:10:2c:c4:44:d2:aa:61:b7:e7:43:a1:d0:7d:5c:b7:
         3d:c4:92:f5:5d:5d:4f:85:9d:3d:21:03:c0:5b:ef:82:91:c9:
         df:8b:63:fa:c5:6b:24:a8:17:96:fc:b0:4d:dc:d7:e2:d8:96:
         01:c0:2a:00:7c:34:eb:18:43:e2:8b:d3:a9:fd:76:80:a6:23:
         82:5d:d6:c8:d8:a8:85:12:8b:02:9b:17:66:9c:f5:3a:75:40:
         58:b2:89:77:31:ca:f8:f4:d9:91:a7:2c:e4:85:62:55:9d:62:
         a0:45:fd:82:09:af:3e:dc:1c:13:ce:57:66:dd:27:5d:59:6b:
         19:17:c6:0c:ff:01:32:65:d2:e8:f5:0f:c6:67:68:fd:fc:80:
         e2:19:82:d4:ca:2e:13:db:c9:98:73:58:44:76:cd:33:aa:5f:
         94:00:82:d3:07:5c:25:8b:8e:5b:e9:b5:50:3c:a3:cc:81:05:
         f1:6e:09:54:a8:18:3c:ce:94:88:11:b2:c4:93:e7:23:45:57:
         d8:e7:1a:2a:1b:4b:c5:fa:be:0a:95:f6:16:c4:05:fe:f1:4c:
         5e:7f:95:d8:58:45:a6:34:14:ad:65:98:da:bd:7f:89:60:10:
         d0:bd:4d:fd:2a:46:b6:95:08:90:e6:8c:cc:ab:30:41:05:38:
         be:07:91:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:54:50 2026 by rpki-client