Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe81b1e4-f509-3e46-89e5-196a66089bd9.roa
File:                     fe81b1e4-f509-3e46-89e5-196a66089bd9.roa (raw, json)
Hash identifier:          ZJW9Yc6bUvZP+Q0IWfEhtkp7/th6s1uydmQwIschogc=
Subject key identifier:   42:CA:C6:0A:97:D5:C5:50:5B:76:7D:DD:D2:2F:A5:32:F4:8C:D6:8B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA798FCBE60B9E6732ECD5800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe81b1e4-f509-3e46-89e5-196a66089bd9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     16625
IP address blocks:        23.212.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:fc:be:60:b9:e6:73:2e:cd:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=e4be8a79-ac87-484d-9b2c-fe56acb46b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:23:34:23:fd:4e:2c:04:db:f9:06:55:6d:66:
                    f4:93:f9:d6:14:40:5b:ab:bf:05:e4:6b:35:3f:bb:
                    44:e8:98:68:38:39:16:ae:86:45:c6:42:bf:e7:84:
                    33:5f:79:c1:aa:3d:7f:f7:e3:c4:af:3a:bb:68:71:
                    68:90:ff:b3:2c:26:84:d1:02:67:41:cf:2e:04:1c:
                    39:fe:00:55:0b:d6:ad:52:63:6b:93:27:20:f4:d9:
                    11:c3:de:ce:c2:02:11:cd:a7:96:f6:e8:c9:b4:da:
                    da:4b:31:93:a8:60:7f:5e:14:7b:9c:95:82:75:7b:
                    93:f9:48:ab:38:52:0e:3e:01:dd:a5:4f:f0:05:fd:
                    81:e9:3b:dc:cc:23:14:2b:40:59:d6:5b:8b:4c:56:
                    3e:25:5d:b7:f3:45:83:08:2d:45:42:f1:62:72:06:
                    fa:a3:37:52:83:a6:54:87:7b:fc:5b:35:c2:4f:1f:
                    2b:1e:44:47:e3:9e:54:a0:bc:29:0f:0c:b2:39:d3:
                    aa:bd:74:65:3c:fb:06:12:e5:3f:f7:4b:5d:2f:38:
                    f4:d1:74:b9:cc:6c:3f:36:16:23:e3:f9:c4:b1:d0:
                    61:7a:df:f1:fb:c6:2c:cd:d4:a7:af:ef:db:d1:c9:
                    54:bc:4a:d3:8d:f0:59:ac:36:e7:dd:77:a4:ac:78:
                    53:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CA:C6:0A:97:D5:C5:50:5B:76:7D:DD:D2:2F:A5:32:F4:8C:D6:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fe81b1e4-f509-3e46-89e5-196a66089bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:92:e2:08:0b:88:f0:cc:65:71:b8:15:93:e9:94:1d:ac:2b:
         47:2c:e0:0e:76:87:f3:de:f3:93:e0:0d:1b:0e:66:41:af:aa:
         da:cc:b8:d6:df:04:3f:d7:19:ba:c5:9e:4c:44:f2:2d:48:30:
         98:78:30:e5:98:74:21:11:d2:fb:72:02:e1:e7:44:fc:bd:8b:
         61:49:c1:ed:2d:50:6d:23:e7:bc:b4:05:9f:47:9f:6a:ab:81:
         4e:4d:b8:26:4b:c1:e7:87:05:8f:c1:da:a2:a0:29:d1:73:e3:
         c1:91:11:b0:96:f6:fe:ed:58:81:c3:31:bf:5b:ed:81:cf:00:
         b7:02:e3:47:9d:f6:9b:cb:37:b7:f9:6a:11:6c:48:1c:96:ca:
         35:19:b5:68:d2:c3:6f:04:3f:ba:2e:b0:33:5f:32:bc:15:6f:
         fa:ab:b1:c3:70:5f:06:70:11:df:d6:d8:9d:c7:16:da:cd:af:
         89:98:c5:82:9e:96:61:21:1e:c7:0c:b0:2e:b0:7c:52:29:f3:
         90:6a:fe:7e:95:72:bc:3f:bd:0f:a4:90:67:26:56:22:50:e6:
         f1:67:c1:d7:ee:19:25:22:30:5c:f3:d1:e4:66:91:91:ae:e8:
         e5:90:0c:6c:36:8e:c4:7e:cd:3a:1c:af:0c:3c:93:90:49:a3:
         28:de:44:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:47:51 2026 by rpki-client