Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5e14c82-013b-3640-8e11-6f848a477169.roa
File:                     f5e14c82-013b-3640-8e11-6f848a477169.roa (raw, json)
Hash identifier:          HBP2HP1qnNf9lgASO30IBioScIQg58iWIT85ljCcjNc=
Subject key identifier:   A7:43:44:65:C5:1A:93:91:74:B6:D6:D1:19:5C:3F:05:12:B7:A7:58
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E0C1EE5C6DEF6D628D343B180
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5e14c82-013b-3640-8e11-6f848a477169.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     20940
IP address blocks:        23.220.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:e5:c6:de:f6:d6:28:d3:43:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=c015c467-b518-488e-90b4-45d9b18bbba5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:5e:81:94:e2:18:ea:79:e4:3b:fa:ae:77:38:
                    54:52:20:e7:0b:e7:f6:a2:46:42:38:ae:93:59:9c:
                    19:55:9b:1d:b5:70:ae:bf:57:2a:ad:39:ec:b6:47:
                    50:02:2f:8f:71:ff:b8:fa:44:0f:09:d8:81:48:0e:
                    d3:7c:b5:91:6f:3e:04:f6:9c:07:aa:0c:87:20:c2:
                    fb:b2:86:bd:e5:10:0f:6d:77:05:e1:a4:b7:c8:4a:
                    8a:60:46:18:c5:ae:6a:1c:49:15:4e:2e:05:3c:93:
                    18:d9:51:55:01:ba:52:f4:fd:49:3c:3d:83:6d:7e:
                    5d:cb:10:fc:d2:89:08:84:43:03:0a:77:36:a9:64:
                    6b:e0:24:4f:72:bb:cf:e0:9c:32:5f:0f:b2:ad:45:
                    e9:84:e4:31:a1:91:ab:26:fa:2e:bc:30:56:93:9c:
                    5c:5b:4b:80:01:4e:8e:1d:43:2d:9a:29:41:a9:1d:
                    5a:be:e9:a6:3f:08:4d:c9:a1:aa:02:c8:a5:5e:76:
                    1f:86:99:c8:84:6e:2a:ea:d6:ba:a6:4c:75:b7:33:
                    14:fb:75:f4:69:62:33:15:52:c6:3c:f4:9a:a7:9f:
                    ae:22:4c:e4:71:32:85:ee:df:80:37:a6:a4:e2:75:
                    f6:9d:96:52:e5:34:62:1e:4d:c6:bc:2b:20:31:f2:
                    53:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:43:44:65:C5:1A:93:91:74:B6:D6:D1:19:5C:3F:05:12:B7:A7:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f5e14c82-013b-3640-8e11-6f848a477169.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.220.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:37:3f:46:78:3b:b5:36:ae:e1:5f:bb:3f:fd:c4:e8:07:7f:
         c4:f9:ed:60:cc:03:a4:59:a5:0d:ed:d6:21:01:92:f9:b2:79:
         a6:7b:bc:5c:ed:13:cf:fb:9d:7e:24:22:2c:99:88:51:2c:91:
         22:8e:3e:d0:3c:5c:63:2f:9a:53:a3:ca:f4:77:2d:1a:19:5f:
         c7:34:4a:bb:b7:a8:aa:0a:12:ae:3d:7e:45:23:13:1a:92:a5:
         13:03:69:04:04:5a:6c:b7:85:f7:ea:81:ff:f3:fb:91:93:9a:
         e6:ea:c4:49:06:d3:e7:d0:78:0d:86:ff:0a:29:4d:76:96:db:
         5d:cb:d6:98:30:2f:5a:fd:6a:8f:91:2a:5b:d1:0f:55:ce:00:
         e1:a8:a9:5f:05:a1:41:c7:a5:b9:2a:9b:10:0a:89:80:cf:a4:
         4d:90:ca:ad:b1:d8:0c:77:2f:a9:8e:e4:17:64:51:d5:11:e2:
         57:34:5f:fb:e7:1e:89:1d:25:9e:74:10:c7:1e:e7:bf:80:ee:
         aa:dc:c9:eb:b9:1e:ae:a9:d4:99:5b:ef:fd:2c:36:68:0b:ed:
         a8:78:73:27:90:d4:bf:d0:2f:1b:dc:ff:2e:e7:88:08:e4:59:
         d6:9b:e7:60:a5:bd:65:a8:be:36:b1:dd:1d:df:9d:d4:11:d2:
         d0:1e:1c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:20:21 2026 by rpki-client