Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6841545-ef5c-3c40-a790-c28d745b787e.roa
File:                     e6841545-ef5c-3c40-a790-c28d745b787e.roa (raw, json)
Hash identifier:          K64i8ORCaNjkjoIlPJXvkjodtgB0vYkeeuPXhqyH/to=
Subject key identifier:   DB:99:E6:5D:EA:E0:45:9E:03:92:0D:FB:8B:A6:45:31:F4:82:BD:F8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E7E9500F5FFB314DDA7E26040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6841545-ef5c-3c40-a790-c28d745b787e.roa
Signing time:             Tue 14 Jul 2026 09:00:12 +0000
ROA not before:           Tue 14 Jul 2026 09:00:12 +0000
ROA not after:            Mon 12 Oct 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        23.45.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:7e:95:00:f5:ff:b3:14:dd:a7:e2:60:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 14 09:00:12 2026 GMT
            Not After : Oct 12 09:00:12 2026 GMT
        Subject: CN=0d008bb3-db3e-47d5-8060-27e432e97bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:2d:32:b2:fc:2f:fc:74:e1:a3:2e:5c:7e:
                    a0:31:33:ed:f8:5a:65:47:9b:cc:f2:a0:8f:95:42:
                    30:c3:84:57:9d:bb:14:de:de:d9:0a:d9:2c:89:e9:
                    cc:a4:bf:7c:63:8c:22:26:11:c0:3e:ff:0b:92:cc:
                    49:57:17:78:2e:95:4a:01:e0:08:6f:47:c4:94:55:
                    dd:e9:aa:03:11:46:e1:7e:3d:b4:d3:0b:23:df:88:
                    7f:13:a8:6d:79:4e:de:ae:e2:23:06:be:0c:f2:eb:
                    b3:6e:ba:46:cd:a1:8a:b5:83:5e:b0:aa:17:b6:58:
                    5f:b5:4d:03:39:c0:e9:ff:59:e9:a7:60:7d:1c:13:
                    79:51:81:82:38:b7:32:f6:52:e6:d7:6e:0a:86:c7:
                    e2:73:1d:49:65:be:1b:b1:7e:ff:0b:3c:4a:9e:1a:
                    9a:63:61:91:3d:27:9e:4d:c1:49:19:f5:ce:95:5a:
                    26:18:a8:44:e4:61:21:71:6c:7b:21:20:bd:66:77:
                    7a:1c:a9:31:95:57:13:c5:46:ff:b4:31:fa:78:40:
                    84:df:01:a2:9e:73:e2:fd:85:9d:37:a4:a6:25:9f:
                    e2:67:af:3d:e3:44:6b:73:af:ce:77:ef:6d:19:f7:
                    9b:57:50:76:dd:d4:6d:ad:ef:68:94:32:30:81:de:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:99:E6:5D:EA:E0:45:9E:03:92:0D:FB:8B:A6:45:31:F4:82:BD:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e6841545-ef5c-3c40-a790-c28d745b787e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:60:17:c9:64:95:08:d7:7d:7e:31:0a:d9:47:6e:3a:c1:64:
         60:37:8c:27:81:e8:8a:28:20:4d:7a:6b:9d:7b:36:2c:db:06:
         9a:78:52:87:5a:0f:19:b2:87:2d:29:c4:4c:28:f7:1f:44:cb:
         2c:3a:76:f2:95:5a:18:38:7d:af:81:07:3e:c1:48:d5:eb:d5:
         c8:92:a5:79:dd:12:4b:71:0a:ec:77:af:f7:9e:7b:f5:da:15:
         f0:ce:24:05:0c:62:77:2f:5d:e6:69:e4:00:89:70:b3:ac:ad:
         0d:17:5c:53:09:31:ce:32:a9:84:13:eb:48:d2:75:9e:d7:8b:
         67:12:a7:0a:6c:c9:d0:8f:42:05:79:23:31:9d:0f:a6:36:5f:
         76:39:55:5c:28:b4:83:86:0e:20:94:89:5f:bf:c6:c5:c5:1b:
         20:6f:c9:5b:73:a2:62:1c:2e:ab:a8:bd:34:71:af:da:a3:2a:
         7b:51:f5:49:dd:96:e6:c4:5b:0f:f6:29:a0:a5:3b:f5:92:0e:
         20:43:f9:fb:17:62:b0:46:f8:c0:2c:30:ec:74:20:bc:bc:d1:
         54:72:c2:30:2b:e2:63:24:f8:c0:fc:cf:d8:89:4b:ce:03:4d:
         03:92:1d:25:68:af:f4:8b:0f:69:91:15:cb:00:0b:18:2d:82:
         54:9a:33:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:54:41 2026 by rpki-client