Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e755b72-ed35-34ad-8912-857d668c4ee1.roa
File:                     0e755b72-ed35-34ad-8912-857d668c4ee1.roa (raw, json)
Hash identifier:          5c4egw08xijjhYsh5qpOewkdwnLRwx6T6q1FhRNKZgI=
Subject key identifier:   CA:91:F1:9E:1E:70:E5:8F:69:93:7D:29:AE:19:6D:DB:DE:92:EB:7C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E0C1EE66A8F951A367C62A500
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e755b72-ed35-34ad-8912-857d668c4ee1.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     20940
IP address blocks:        23.220.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:e6:6a:8f:95:1a:36:7c:62:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=ac4c2bd0-2aa3-4315-aff4-ca9289800f57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:60:21:21:fa:92:9e:fd:eb:27:de:98:8f:
                    47:5d:db:07:c5:35:75:36:dc:d7:6c:46:af:a4:3a:
                    af:22:8e:71:c4:7a:91:c7:11:1c:c4:5a:2e:0b:90:
                    9d:99:88:74:a0:f1:49:5c:b8:37:a5:fc:6a:af:93:
                    9b:c9:14:8e:e4:0f:b7:9d:e8:48:b1:aa:77:04:9f:
                    8a:49:e2:d7:01:60:eb:8e:ca:29:f7:87:55:16:4e:
                    1c:64:de:e8:ac:e6:0e:43:f7:a4:0f:bb:6b:19:10:
                    f6:69:1c:8f:7c:cb:ba:a1:4e:56:f1:0c:86:a6:0d:
                    50:48:c1:98:bb:20:b1:f7:50:52:8f:ac:e6:54:3b:
                    af:2b:29:0a:5a:1d:08:c5:bd:3b:a9:03:cf:ad:93:
                    86:78:7a:aa:4a:be:2b:83:3e:65:34:75:97:28:03:
                    bd:32:67:29:c9:3c:8f:5e:19:86:b9:32:d5:d6:f7:
                    c6:09:3a:f2:50:65:0e:08:90:6b:3d:0e:aa:e4:20:
                    39:d9:4b:91:47:85:03:87:94:0e:77:19:83:74:aa:
                    90:0c:e2:62:d5:a8:e4:72:70:83:d0:aa:61:b7:1f:
                    bb:f6:c4:91:01:26:0e:a5:e0:9e:95:4d:e1:ec:b1:
                    94:76:fd:82:15:22:24:51:b0:74:6c:6d:39:65:dd:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:91:F1:9E:1E:70:E5:8F:69:93:7D:29:AE:19:6D:DB:DE:92:EB:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0e755b72-ed35-34ad-8912-857d668c4ee1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.220.244.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e6:e9:a4:75:e5:f2:cb:25:5a:50:87:d4:56:f7:29:0e:20:
         d5:76:ab:ac:c1:81:e8:2d:44:d1:84:aa:d4:dc:c7:74:a8:27:
         b0:a6:63:6b:3e:13:7e:d3:e8:1b:56:22:26:c1:1a:5f:d3:bc:
         ac:4b:12:e3:50:b8:12:86:59:dd:76:3b:a1:bc:dc:a0:5a:5f:
         4a:43:43:68:39:00:df:43:13:ad:bc:19:38:f3:0c:ad:f3:5e:
         bd:cb:3b:c3:78:8f:2d:7b:4c:f7:6c:b7:24:98:7b:c8:f5:2c:
         0c:72:06:23:af:9c:84:51:ea:f3:b4:34:4d:a6:06:94:2c:26:
         5d:6d:6b:34:f4:ca:96:e2:cb:93:da:d5:61:14:98:c1:26:26:
         ad:6e:19:0f:d0:75:f3:09:f4:16:ac:43:6d:24:2c:89:ed:8d:
         27:7a:73:6e:d5:0c:ba:01:39:cd:4c:f1:68:03:a8:b1:13:6e:
         71:e1:68:5a:ec:32:4c:a8:45:9f:0c:59:1f:da:0b:20:0c:77:
         a3:1c:58:49:ef:01:f7:73:00:7f:f6:0e:dd:a5:c6:08:1b:3e:
         b8:c6:e5:25:5a:a8:50:e8:c6:94:24:81:ee:88:2b:57:9a:c2:
         b5:6a:10:08:c0:db:fb:a1:89:43:c4:08:e9:e3:83:b8:ab:c7:
         1b:ec:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:02:56 2026 by rpki-client