Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18129651-92b3-3d42-8171-0797c5d965cb.roa
File:                     18129651-92b3-3d42-8171-0797c5d965cb.roa (raw, json)
Hash identifier:          lOUdww7u6y7MJ0yRE52gnRQl3wifsNxonBrXmGCSLtM=
Subject key identifier:   24:FE:23:50:6D:15:AE:04:37:B7:D5:E4:53:E2:C4:49:7C:18:AE:16
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E0C1EE2A6AE65FB951C0B04B6
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18129651-92b3-3d42-8171-0797c5d965cb.roa
Signing time:             Wed 03 Jun 2026 09:00:13 +0000
ROA not before:           Wed 03 Jun 2026 09:00:13 +0000
ROA not after:            Tue 01 Sep 2026 09:00:13 +0000
asID:                     20940
IP address blocks:        23.223.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:0c:1e:e2:a6:ae:65:fb:95:1c:0b:04:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  3 09:00:13 2026 GMT
            Not After : Sep  1 09:00:13 2026 GMT
        Subject: CN=679a826d-f156-4365-b83a-92bae542cc57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ee:82:31:0c:d8:34:e9:80:70:92:7b:f8:92:
                    10:28:d5:b0:bb:7e:ba:d3:5c:34:5d:4e:45:d4:59:
                    d4:50:86:bd:e1:4b:ea:6d:0e:0f:5e:39:a3:20:8f:
                    cf:65:1a:f2:e4:5f:20:b8:5c:24:06:ef:2d:e9:42:
                    9c:54:da:e4:8f:6d:89:93:71:2e:67:31:dc:86:91:
                    ba:e3:02:4c:80:d3:c0:eb:b9:42:f3:90:cf:73:ae:
                    70:4f:3b:48:45:72:db:5d:59:17:73:c1:42:d0:79:
                    46:70:0f:b9:fd:3a:ab:5a:e9:a2:c2:76:df:8b:09:
                    39:27:1f:3c:d4:7d:fc:7c:84:1c:41:5d:1d:9e:7e:
                    61:3b:10:bc:49:df:a9:d4:59:ea:3b:e3:5c:68:15:
                    0a:58:38:7a:b6:f9:2b:f9:33:2d:41:72:a7:ce:65:
                    8d:95:c6:dd:0e:60:15:57:85:ee:9a:ae:68:e5:b8:
                    82:08:7f:e1:93:b2:66:25:99:4f:56:17:6a:4e:81:
                    50:bd:72:e1:5c:f2:88:20:96:9e:ba:ec:03:c5:22:
                    a0:f2:05:bf:ce:89:2e:13:5d:17:4e:73:70:80:7d:
                    6d:53:d8:f8:7c:a9:3a:94:f4:7a:5c:7c:f5:d3:f3:
                    14:b6:7f:e6:e8:8b:f6:39:bb:71:7b:67:55:b8:eb:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FE:23:50:6D:15:AE:04:37:B7:D5:E4:53:E2:C4:49:7C:18:AE:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/18129651-92b3-3d42-8171-0797c5d965cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.223.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:cb:1d:44:3c:fb:a5:64:17:75:79:05:cf:88:f7:b4:3a:c8:
         03:ce:89:00:ed:8b:df:ce:44:e6:22:60:fc:53:d3:7a:ce:00:
         ec:43:1e:be:f1:65:60:51:a4:3e:da:19:f4:0f:26:f7:06:02:
         4d:68:be:de:c8:fa:f9:a1:d3:df:f2:d7:8c:ac:1f:d1:07:e0:
         f7:1b:a8:67:76:b4:ab:41:92:a7:74:52:56:5d:78:9a:66:6b:
         03:ce:f8:fd:27:c7:ec:e7:26:21:60:10:8b:84:a4:1a:9f:e0:
         62:85:02:ed:2e:29:aa:42:b6:82:d6:a5:45:39:3d:23:45:a0:
         90:5f:d1:c3:8f:f7:03:11:17:80:54:18:b6:9c:94:76:87:fc:
         39:67:a8:81:ca:a1:3e:dc:0f:53:63:21:68:9e:2d:6b:d0:7b:
         15:92:5a:ec:66:dc:cd:65:94:da:be:4d:f3:ef:e3:26:fa:a9:
         69:f4:05:fd:6b:9e:fc:4c:a2:cf:e7:2b:0e:85:52:d8:12:e9:
         46:53:34:49:e9:2d:34:cd:05:15:a2:4f:90:b9:4b:4d:a3:eb:
         b9:12:b0:1d:1a:02:29:e7:20:b3:9e:24:7f:9b:12:4e:45:1c:
         e2:58:06:87:01:90:9b:fe:30:d3:7a:fb:ca:88:41:17:6b:f0:
         a9:e2:a5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:32:52 2026 by rpki-client