Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da243638-8638-3d22-af08-b9bce391e3d2.roa
File:                     da243638-8638-3d22-af08-b9bce391e3d2.roa (raw, json)
Hash identifier:          AABY41goA9HIRzp2J/K1hkejR7A0ODec2HndUPOM4IA=
Subject key identifier:   F9:F8:91:E3:32:68:06:E4:0E:07:06:BA:0B:E9:05:0C:F5:A7:C0:27
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE84B59D155765BA6F2324C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da243638-8638-3d22-af08-b9bce391e3d2.roa
Signing time:             Thu 21 May 2026 13:00:32 +0000
ROA not before:           Thu 21 May 2026 13:00:32 +0000
ROA not after:            Wed 19 Aug 2026 13:00:32 +0000
asID:                     9498
IP address blocks:        23.201.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e8:4b:59:d1:55:76:5b:a6:f2:32:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 21 13:00:32 2026 GMT
            Not After : Aug 19 13:00:32 2026 GMT
        Subject: CN=8eba43b2-8780-4e92-87a1-ad31621514b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4a:51:38:4b:25:5e:0d:e4:b7:42:08:39:9c:
                    6e:f6:87:bd:b3:1d:4f:1b:4e:54:34:50:94:bd:ad:
                    e8:56:a1:d4:7d:77:f3:d6:2d:1f:4a:1f:35:62:ce:
                    f4:76:b1:cf:74:9f:82:82:ef:df:5e:90:01:c6:32:
                    33:5b:e8:fb:6e:4b:b8:73:f6:31:89:f6:ce:e1:9a:
                    fc:ff:48:42:ed:8c:3b:77:c5:cd:a9:51:b1:63:43:
                    45:bd:2e:6c:db:d2:c4:24:a5:06:ae:11:a3:7c:1d:
                    c7:fb:de:74:af:c9:84:ee:ed:bf:11:6d:d6:42:35:
                    33:4f:5b:2a:66:c5:d3:d9:4e:18:33:04:c5:75:ea:
                    aa:ca:4a:49:e8:b0:7a:15:9f:75:93:c9:30:50:6b:
                    e4:4e:79:f0:6e:a3:c9:e3:d0:98:af:55:1e:01:63:
                    0b:4d:fc:0e:ec:fc:7b:27:b5:51:5c:89:0a:3b:e7:
                    7d:e9:55:58:49:e7:d1:b8:03:26:40:58:cd:32:40:
                    97:ff:46:c1:ff:34:57:88:79:f7:78:2d:58:88:6b:
                    21:f7:0c:b3:8a:24:61:54:5e:42:3c:79:84:4b:f0:
                    57:d5:34:23:0e:0b:2f:82:6c:da:4b:95:a4:4c:12:
                    27:f6:c3:21:b8:c8:18:45:46:4d:21:b1:72:22:ee:
                    1f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F8:91:E3:32:68:06:E4:0E:07:06:BA:0B:E9:05:0C:F5:A7:C0:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/da243638-8638-3d22-af08-b9bce391e3d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:4e:b1:d6:6a:3f:15:ac:ff:97:14:94:eb:96:1f:3a:bc:50:
         4b:ba:5b:f5:f6:56:2c:b8:af:55:fb:0f:2a:09:02:c8:fe:38:
         77:74:a1:c5:9e:44:ff:7e:a4:fa:29:61:81:60:ee:de:fd:12:
         09:12:e7:4e:45:95:87:06:7c:54:af:6b:9b:a6:c5:97:20:08:
         81:29:23:6e:fb:19:d7:7a:0b:35:69:75:18:0e:70:9b:e0:dd:
         b6:90:af:c8:50:24:8c:07:6a:85:e6:dc:bf:a4:21:ea:5a:d8:
         18:62:0b:69:86:f7:c0:12:31:7b:66:72:8f:f5:a0:2c:1e:da:
         ec:d4:80:0d:fd:53:49:16:4e:3a:46:e5:4d:26:a7:e6:c4:63:
         cb:04:ac:1b:61:6e:e8:f5:0e:f1:42:40:57:c4:b6:f0:48:dc:
         0f:96:0e:a7:46:f6:b3:d8:42:1e:2a:e1:35:c3:09:49:60:8e:
         75:62:41:58:88:38:3f:a3:18:93:5f:f9:54:7f:7d:96:97:99:
         78:0b:a3:c9:23:75:9e:c9:17:ae:7b:09:8e:db:8f:88:de:c9:
         75:5c:a0:df:a9:cd:e6:67:fe:e0:05:71:cd:ba:95:7e:94:07:
         e4:5c:7b:d5:1e:fc:6b:59:0d:a0:3b:6f:51:13:0e:aa:33:e0:
         1d:2c:76:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:04:51 2026 by rpki-client