Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e002b402-e20d-3329-a6cc-eb6084779038.roa
File:                     e002b402-e20d-3329-a6cc-eb6084779038.roa (raw, json)
Hash identifier:          zMOEd3d+HXsmAiAVGR+cAOdygTsDLy/AIJ8pbI8Qg+M=
Subject key identifier:   01:03:4E:A4:02:13:E1:A5:AA:E6:91:49:1D:D6:A6:C3:BA:F4:38:18
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E5FDF6A0FC048184CE88662E0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e002b402-e20d-3329-a6cc-eb6084779038.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        23.197.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:6a:0f:c0:48:18:4c:e8:86:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=73749648-31ef-47d2-91f0-d95599e0bbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:49:19:65:36:b5:17:64:a9:85:42:ce:e9:15:
                    ba:10:ab:02:8c:65:9c:e4:1f:cd:3c:4c:fd:14:62:
                    34:4b:1f:90:cf:df:89:fe:d2:63:5c:d9:b0:4b:8e:
                    0a:d6:3c:ac:39:4f:58:31:8d:8f:58:ca:0a:57:d6:
                    05:8c:fb:aa:b4:74:4b:0f:c7:a9:dc:f8:ef:1a:83:
                    6e:6e:98:0b:bb:fc:f2:54:8c:37:7a:13:24:5d:ea:
                    97:f3:d8:13:71:17:cd:35:07:27:4d:2e:74:b0:c6:
                    ed:68:e4:d9:b2:56:66:6d:9e:74:30:4f:6c:48:3a:
                    01:87:c4:e1:74:9d:31:56:61:d2:1e:91:15:dd:93:
                    53:0e:42:13:e3:c4:fa:f6:55:ad:ac:c2:28:c0:74:
                    29:f0:75:b2:59:db:a7:8c:50:7b:2e:a3:6a:7d:63:
                    7a:12:09:0d:28:9b:27:3a:25:b4:67:9b:89:45:9a:
                    71:95:7b:23:a2:81:3b:3c:06:12:87:72:f7:8b:b7:
                    f2:81:d9:17:44:ee:2b:5b:fb:70:cf:38:8a:07:c4:
                    24:da:0b:3d:17:b9:02:e3:3a:a4:7e:77:63:ba:14:
                    2b:a0:74:39:0e:a4:dc:90:52:44:ad:b6:a0:64:60:
                    bd:d8:c7:e9:aa:d2:c9:1c:24:20:42:52:29:09:85:
                    2a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:03:4E:A4:02:13:E1:A5:AA:E6:91:49:1D:D6:A6:C3:BA:F4:38:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e002b402-e20d-3329-a6cc-eb6084779038.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.197.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0c:46:82:c2:8f:41:00:eb:8c:bc:e1:d4:1e:c6:27:26:fc:
         14:7e:0f:62:b1:d3:26:da:74:d7:6d:c1:1a:d9:3d:6f:c6:b5:
         56:db:68:47:5d:e4:94:4e:47:cb:a2:3e:03:9b:02:f0:17:52:
         cc:7d:df:80:ce:36:ca:8d:0d:40:0e:36:ae:6e:ca:bf:2d:79:
         77:1f:56:60:ba:e8:04:71:2e:8b:bd:21:43:70:e2:b9:18:e6:
         42:49:38:ae:86:43:a8:d8:d8:d1:53:58:c0:d1:ff:b9:ee:d9:
         65:69:9f:6f:30:69:ad:6f:07:ff:4d:9a:d1:5b:6e:f8:64:d4:
         4a:50:18:27:89:ad:41:e7:7f:52:c5:12:84:eb:14:20:d5:5d:
         3d:b4:4a:3d:20:0c:15:4b:7b:63:8a:51:a3:33:21:55:eb:3c:
         9a:5f:0f:17:f9:c1:a3:34:ab:d0:50:6a:61:2e:38:cc:bd:7f:
         0b:f5:14:f0:6d:bb:5d:49:0c:48:5f:5d:f2:08:b9:90:10:d2:
         15:6d:3e:dd:08:4a:3e:c8:bc:06:25:71:19:17:4c:62:51:a5:
         ea:ba:b2:dd:24:a1:6a:39:95:16:89:18:b7:86:8f:61:e7:b5:
         0a:06:84:f3:55:70:5d:6f:7e:0d:d6:ac:c6:f0:67:04:04:cc:
         c0:83:d0:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:52:43 2026 by rpki-client