Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c1dcf1d-96a6-34b4-8bd1-0328ac34d040.roa
File:                     0c1dcf1d-96a6-34b4-8bd1-0328ac34d040.roa (raw, json)
Hash identifier:          L756+nlUCYjjG+9yBzNuP7I2SbLFIs8K8fACL1DCxK4=
Subject key identifier:   AD:A9:96:E2:2B:74:83:AB:C6:E1:59:0C:ED:FD:32:80:94:EA:59:19
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE9B0B8F0A35819FFCAE31A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c1dcf1d-96a6-34b4-8bd1-0328ac34d040.roa
Signing time:             Fri 22 May 2026 01:00:24 +0000
ROA not before:           Fri 22 May 2026 01:00:24 +0000
ROA not after:            Thu 20 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        23.202.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e9:b0:b8:f0:a3:58:19:ff:ca:e3:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 22 01:00:24 2026 GMT
            Not After : Aug 20 01:00:24 2026 GMT
        Subject: CN=708df814-7502-464c-a4b2-cca08facf0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1e:df:4e:c7:41:41:7d:05:57:ba:38:64:5c:
                    f6:e3:fc:bd:b6:37:08:45:be:a9:55:0c:ed:76:b5:
                    ea:fb:65:62:31:32:95:d5:0c:75:d6:6a:6a:1a:64:
                    26:e0:96:bc:80:8a:99:73:cf:ea:ed:01:1e:74:ca:
                    c0:8d:49:27:fa:4e:c2:3f:e2:9a:73:27:9a:25:53:
                    a4:b7:7c:e5:53:29:67:08:c0:d1:6b:18:05:b3:ce:
                    33:51:2d:e6:69:4c:ce:92:bb:71:80:f2:1c:cd:34:
                    29:8e:d2:22:f8:8d:e2:b5:34:ef:68:a7:8f:e4:43:
                    67:49:49:e3:fe:ff:2d:8a:23:11:f9:93:38:3d:d0:
                    3f:8e:5a:ad:b0:c9:79:87:2a:d0:1e:5f:1f:2b:98:
                    ef:28:43:44:a7:b2:53:8d:75:03:d0:f0:c3:77:61:
                    fc:79:c8:51:38:3c:99:8c:da:ab:fe:ba:ea:8f:54:
                    1b:96:90:d1:2f:61:22:75:1a:92:ef:37:47:48:cf:
                    2b:18:4a:4c:89:f7:97:1e:06:63:19:eb:1b:9b:b9:
                    04:c4:59:b0:90:b0:57:bb:6b:8c:87:12:91:28:e8:
                    71:b6:b1:96:1e:51:fc:1b:44:fa:1a:11:69:0b:c9:
                    1c:52:80:ee:0c:22:a3:79:42:40:7b:18:14:23:0f:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A9:96:E2:2B:74:83:AB:C6:E1:59:0C:ED:FD:32:80:94:EA:59:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c1dcf1d-96a6-34b4-8bd1-0328ac34d040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.202.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:2e:aa:4c:3c:7c:27:bf:5c:6c:bc:01:fc:46:8f:77:24:d1:
         f5:40:fc:bc:3f:60:f8:76:50:53:6b:cd:34:1e:5e:fd:b1:56:
         f3:4b:74:58:90:d3:dd:b0:45:1e:b8:9c:88:53:a2:02:d7:19:
         6e:21:5f:e7:21:a9:a5:21:c6:c0:aa:a4:8b:25:f1:ee:3e:55:
         37:bd:c9:6a:9e:51:18:9f:14:80:36:94:df:64:bf:00:ba:3a:
         34:e0:78:4a:7c:22:7d:52:6a:87:3b:6a:bc:9c:32:5e:f4:49:
         0f:59:66:84:84:b3:58:db:a8:83:41:bf:66:b6:d5:ef:4d:83:
         eb:56:0c:bc:c2:1f:bc:19:37:59:39:fb:da:3c:ef:40:15:e5:
         c4:25:f9:4e:a4:74:1a:68:45:2c:9e:ee:82:79:05:c8:bf:5f:
         1d:07:77:b7:33:a6:44:cd:68:7c:41:7f:79:35:7a:0d:e6:c1:
         58:e1:31:01:b6:5f:11:30:c6:f4:24:bf:3a:a5:2b:5a:4e:fd:
         6b:05:83:29:57:91:15:ee:05:37:f6:bc:1a:a4:d4:3d:b0:6b:
         c1:bf:49:b8:2d:0c:e2:f4:59:12:49:6e:42:b9:6f:86:0c:87:
         fe:5e:f7:7d:0b:9c:3d:09:e7:79:b9:cc:35:76:1a:89:88:5d:
         30:a0:cf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:28:59 2026 by rpki-client