Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
File:                     11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa (raw, json)
Hash identifier:          uCk7jKsk+dknWCa0lsPWFVZqZi8DgB6JbojhtPwufOc=
Subject key identifier:   3C:2C:B2:ED:84:B4:1A:C7:67:AB:F0:CC:6E:58:4F:B3:94:F9:C5:57
Certificate issuer:       /CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
Certificate serial:       010D0C9F4328584E11B430AF53446ADAC6762340
Authority key identifier: FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     394760
IP address blocks:        23.140.8.0/24 maxlen: 24
                          2602:fb30::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:30:af:53:44:6a:da:c6:76:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac7c3b4-cbfb-460b-8cba-a8b06504c892
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=d5cfca6e-827e-41d7-b20f-96c540eba2fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3c:bd:a1:1b:f5:a9:85:df:22:1b:1a:70:5a:
                    f3:0f:8e:8a:f6:ea:22:66:01:fb:d5:a1:9a:f2:1e:
                    c9:00:78:79:e8:9b:9c:49:70:90:0b:93:eb:31:44:
                    a7:cc:56:8d:38:3c:f1:16:ad:37:49:a5:a4:0f:04:
                    4c:d5:27:c8:27:22:e8:21:8f:6c:42:1f:f2:99:ae:
                    08:0e:16:6d:b2:43:c6:39:b7:36:93:52:0f:ec:c3:
                    05:5e:fc:ae:80:27:3a:52:dd:7d:f0:43:55:0f:a3:
                    34:fd:84:e2:7b:dd:2f:7a:ad:41:55:f2:82:83:c4:
                    13:0e:cc:da:ed:9b:bb:db:dc:ed:f5:f6:f4:35:70:
                    8a:a8:31:65:10:30:ff:7e:53:fb:29:fd:dd:2a:f9:
                    16:2f:6a:79:9a:2a:06:6a:98:fc:f7:30:82:ab:cd:
                    d0:39:d2:46:a4:61:0e:b3:25:ed:43:f5:aa:04:5f:
                    75:e4:f6:68:d9:d2:d9:11:c1:4c:cf:97:e3:c6:2f:
                    8a:25:47:7e:c8:85:f3:37:6e:72:bf:9c:5a:f2:99:
                    30:2a:9c:ae:bf:87:f0:70:b3:23:67:92:d9:ce:96:
                    62:7f:26:f8:44:8e:8c:93:d1:6d:14:93:67:7c:34:
                    a7:55:d9:51:64:40:f6:da:d5:b4:ea:65:29:cd:ef:
                    c9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2C:B2:ED:84:B4:1A:C7:67:AB:F0:CC:6E:58:4F:B3:94:F9:C5:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/11d1af60-91e7-3d5a-8532-9dffcdef9eea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.crl

            X509v3 Authority Key Identifier:
                keyid:FB:91:D9:0B:BD:67:B1:14:CA:D8:E0:33:8D:97:22:A0:6D:4F:21:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5ac7c3b4-cbfb-460b-8cba-a8b06504c892.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.8.0/24
                IPv6:
                  2602:fb30::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:85:65:31:e1:2d:bc:6c:0b:e6:4a:27:17:2e:49:86:a7:0b:
         2f:bd:91:78:40:af:6e:af:80:b3:82:0e:79:93:73:61:cc:d3:
         13:c7:bb:54:63:12:b8:d2:f8:a2:d1:e7:45:e8:e1:b2:ed:10:
         11:a6:7e:a2:00:43:98:bf:77:a8:9e:5b:47:4f:7e:79:16:58:
         0b:b7:48:e8:a1:78:dd:c1:45:b0:ba:cb:81:31:11:a5:ca:21:
         80:50:5f:9a:65:95:e4:dd:c3:e0:96:64:7f:ae:a2:99:49:38:
         78:37:08:17:6d:d5:38:c0:89:4a:4b:cd:ab:d8:24:6f:4d:31:
         77:5f:08:5e:65:15:b9:b3:93:b2:bf:24:6b:71:5c:ef:60:08:
         59:92:2b:ea:ab:93:f0:c5:2b:8e:53:40:b0:49:0f:7b:fb:f8:
         9b:07:4d:58:54:28:7d:00:d8:21:7c:c9:44:5c:9f:37:5b:64:
         25:f3:db:98:a6:47:c1:33:f5:4d:fb:ba:4c:ff:08:6d:71:89:
         81:b2:09:65:39:e0:96:3a:6c:1b:fa:a8:dc:17:51:5b:3f:34:
         ad:af:42:4f:6c:06:45:e4:86:d6:3f:b6:f8:67:d9:5d:e7:22:
         0c:30:87:a9:1c:32:35:b8:80:cd:82:8c:17:4d:6c:18:33:e6:
         8b:2a:a3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:41:27 2026 by rpki-client