Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75d8c6f2-a718-390d-a00b-f629b43e3954.roa
File:                     75d8c6f2-a718-390d-a00b-f629b43e3954.roa (raw, json)
Hash identifier:          dQiAlITfvDDzYILNLcQeMn/FOkBs31nOz4LcN0Nfesg=
Subject key identifier:   E7:D6:54:94:5C:E5:4B:2B:01:32:CB:90:15:E2:CD:E6:7C:78:4A:34
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E8F54FEF3533F5BF273AA9F00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75d8c6f2-a718-390d-a00b-f629b43e3954.roa
Signing time:             Mon 20 Jul 2026 09:00:11 +0000
ROA not before:           Mon 20 Jul 2026 09:00:11 +0000
ROA not after:            Sun 18 Oct 2026 09:00:11 +0000
asID:                     20940
IP address blocks:        23.35.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:8f:54:fe:f3:53:3f:5b:f2:73:aa:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 20 09:00:11 2026 GMT
            Not After : Oct 18 09:00:11 2026 GMT
        Subject: CN=b9842104-eeba-49d4-ab03-d7b040a5e479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4e:b2:b7:c6:e3:91:19:f4:99:61:e8:b2:20:
                    6f:c7:15:80:22:4c:f6:cc:ef:55:a6:69:11:04:d8:
                    d2:b3:fd:aa:02:f3:14:a8:49:b7:07:58:83:1c:10:
                    29:7c:f6:5d:7d:46:71:da:27:42:cb:e3:3d:94:7b:
                    c6:18:27:2c:03:8c:29:b4:26:d8:ee:7a:8f:bd:b0:
                    a4:91:3d:ea:44:d2:ae:e1:68:50:48:cf:74:21:85:
                    67:07:01:0f:c4:7f:13:2a:3d:68:af:7c:bf:b0:97:
                    7c:9b:66:9d:78:ef:a1:5d:4c:6b:35:56:0b:cf:be:
                    87:6d:44:75:30:e8:6e:06:e6:68:93:eb:22:ac:b4:
                    ca:6e:c2:2a:28:a7:dd:cd:20:75:cf:2d:ef:48:90:
                    e9:31:69:f9:0b:86:94:d5:37:87:74:eb:5a:53:e2:
                    6d:d1:6b:46:c1:90:f2:17:24:65:ab:bf:e1:bc:26:
                    cf:ac:1b:a1:73:05:b1:0b:20:bf:e5:b8:25:e2:16:
                    ca:93:05:ee:3a:3c:8a:ec:e0:2c:ab:80:10:9f:b8:
                    56:4b:ff:2c:73:df:ab:24:c7:0d:54:10:68:72:67:
                    95:02:f7:25:a8:3e:7b:94:ca:35:a8:7a:2b:7c:48:
                    3f:ef:54:9f:cd:b9:39:31:71:b2:af:d9:12:ff:dc:
                    ff:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D6:54:94:5C:E5:4B:2B:01:32:CB:90:15:E2:CD:E6:7C:78:4A:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75d8c6f2-a718-390d-a00b-f629b43e3954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.35.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:ca:0f:fd:2a:4d:6a:81:4e:81:b4:0e:2f:19:44:9f:15:9e:
         bf:33:01:1e:3b:6c:30:d7:13:d0:07:ad:02:3f:cc:5b:73:f6:
         d5:5e:6f:21:41:99:a6:0a:5b:dd:0f:b6:aa:71:d4:7a:bc:5c:
         9a:12:bc:f6:d7:c4:48:9d:27:44:55:a5:ea:68:25:1d:4b:26:
         2e:70:05:2f:22:fa:b8:f1:16:56:67:99:d2:2c:40:bb:11:9f:
         75:28:95:4f:c3:5f:6b:95:d9:0e:79:91:68:13:67:67:02:ef:
         b5:9e:40:17:e7:fd:cd:13:32:d9:c6:21:3c:b8:f7:34:60:f1:
         2f:92:3a:29:cb:fb:92:fc:8e:f7:7c:be:66:ac:33:e9:1e:0d:
         66:17:84:d1:13:72:6a:16:4b:36:c5:1d:4c:38:7a:a6:8e:c0:
         ae:27:e9:b2:16:8f:ee:8c:ad:7b:7e:34:99:b8:66:3e:fd:e5:
         74:3e:51:35:e9:3e:8a:a3:6a:6b:f3:a2:e3:59:4d:2c:e4:b6:
         70:8a:c8:aa:6a:bc:a6:0e:36:3a:5d:02:5a:ba:fb:55:e8:7a:
         df:99:10:c0:57:8f:eb:0d:13:f7:ff:73:ff:6a:fa:47:0c:5b:
         fc:46:e3:5d:00:d0:6b:1d:69:1a:bb:5d:2a:45:d5:db:cf:e0:
         b7:00:f7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:12 2026 by rpki-client