Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42560bb6-4436-36aa-b123-a87d46072f6a.roa
File:                     42560bb6-4436-36aa-b123-a87d46072f6a.roa (raw, json)
Hash identifier:          No1rNgubMxejvamFD7XgdtwNuJf55CNVaaGRfyyh4gA=
Subject key identifier:   07:95:62:C5:64:74:F3:44:9E:19:DD:16:AD:03:9C:40:7B:D6:E1:9A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DDBBB13671F790C7492636670
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42560bb6-4436-36aa-b123-a87d46072f6a.roa
Signing time:             Sun 17 May 2026 01:00:24 +0000
ROA not before:           Sun 17 May 2026 01:00:24 +0000
ROA not after:            Sat 15 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        184.25.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:db:bb:13:67:1f:79:0c:74:92:63:66:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 17 01:00:24 2026 GMT
            Not After : Aug 15 01:00:24 2026 GMT
        Subject: CN=daf28a73-5401-4ed6-8426-f30ea4ff6803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5c:35:d9:de:aa:05:6c:2e:45:71:3e:8e:dc:
                    8c:c7:84:ac:fc:46:3d:0c:1b:3f:b9:d9:c3:0e:04:
                    c8:55:14:9f:c9:5c:24:46:50:5c:2c:b8:69:5a:dc:
                    03:9b:95:74:81:3e:e0:54:c5:ed:84:d8:3e:ae:8b:
                    e2:1a:bf:ca:58:5f:e6:c7:72:b7:b6:29:1d:97:52:
                    de:0d:5e:95:12:8e:2f:49:b8:cd:f9:cf:eb:e2:7e:
                    45:7f:9c:22:11:fc:cb:77:d2:93:ae:11:28:48:e8:
                    bb:53:5a:15:37:9f:13:49:c6:ee:bc:47:ef:35:c8:
                    ac:fd:a3:44:84:46:63:fd:9b:4d:29:b0:52:c2:c3:
                    9a:b5:0c:12:95:5a:e1:01:56:06:99:f4:24:dd:41:
                    77:46:75:e6:14:c7:4e:d2:81:72:af:50:88:c2:b5:
                    e3:85:50:b6:c2:e7:0e:88:de:8f:fa:83:3e:cb:cd:
                    a2:02:5f:ab:a4:a2:e6:81:62:32:6b:57:25:af:5d:
                    b2:cb:2e:37:f2:9c:00:97:f9:bd:5d:da:ef:35:f3:
                    43:57:c2:df:d3:a6:f4:c6:32:e8:f1:fd:d0:2a:6b:
                    40:32:f4:c9:33:a3:15:2d:b4:91:99:3e:75:aa:fc:
                    1a:2e:2b:c2:48:a1:f0:39:27:2f:5b:10:06:23:92:
                    cd:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:95:62:C5:64:74:F3:44:9E:19:DD:16:AD:03:9C:40:7B:D6:E1:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/42560bb6-4436-36aa-b123-a87d46072f6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.25.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:55:24:0b:40:57:3c:70:09:d1:bd:3a:0a:3a:af:5d:3f:1d:
         3c:ce:b7:19:8c:66:f7:39:1f:34:bf:28:c5:b0:9a:66:f8:3d:
         ba:a5:62:9a:ba:f3:a3:0d:a2:e3:d3:cf:54:5f:22:7e:5c:cc:
         d0:be:a8:4f:76:05:2d:4c:b1:78:80:4a:c3:21:2f:b1:7e:44:
         06:ae:e8:04:30:2f:81:58:dc:3f:43:69:b0:40:19:51:9a:02:
         bb:5b:05:9a:d0:81:88:71:d7:40:3c:dd:e4:20:4f:fc:f6:c9:
         b8:2b:6a:cd:f0:64:cd:6e:4c:30:7b:6e:18:e2:67:f6:a0:6a:
         54:45:77:48:c8:67:eb:ef:aa:cd:c1:3a:1b:e0:91:26:02:3b:
         5a:58:bc:96:12:29:db:92:7f:5f:05:17:3b:db:99:f5:8f:e7:
         0f:c0:42:0d:b2:9a:b9:03:cf:39:70:db:cc:ae:e0:89:62:7d:
         7e:d7:3b:1d:a6:d0:7a:07:0e:05:e6:30:09:00:51:e1:2c:99:
         dc:65:83:1f:bb:bd:8a:87:18:fc:37:4e:6d:a3:ee:c5:51:6d:
         55:1b:5e:6f:84:67:7e:ff:b6:f3:78:0e:88:32:f7:ec:00:f5:
         b0:ca:49:7e:3e:42:c0:4f:61:ab:52:d9:9e:e0:f3:4c:f6:60:
         95:f8:37:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:29:59 2026 by rpki-client