Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43083772-3eb5-35cd-a8ea-5deefe5de773.roa
File:                     43083772-3eb5-35cd-a8ea-5deefe5de773.roa (raw, json)
Hash identifier:          4mPBbvSKHhwLf8hEOJPABjUQSxtXII8aquMtVt203Ak=
Subject key identifier:   A5:E9:DC:CB:5D:A1:44:AC:0B:DC:C1:0A:B4:0D:73:E7:21:19:CE:9B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D8AC548E8D22678B76A3FB280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43083772-3eb5-35cd-a8ea-5deefe5de773.roa
Signing time:             Sat 18 Apr 2026 01:00:24 +0000
ROA not before:           Sat 18 Apr 2026 01:00:24 +0000
ROA not after:            Fri 17 Jul 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        23.0.0.0/12 maxlen: 12
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:8a:c5:48:e8:d2:26:78:b7:6a:3f:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 18 01:00:24 2026 GMT
            Not After : Jul 17 01:00:24 2026 GMT
        Subject: CN=37357084-2fa1-463e-9300-9dc013a7ad0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:91:24:4d:b9:31:06:5b:19:ce:c1:e6:7d:
                    80:63:7a:c4:34:71:b8:59:07:3b:3b:42:1e:26:79:
                    7a:3c:b2:43:6e:a6:dd:10:50:28:60:65:de:c4:68:
                    7e:77:d5:65:9e:33:86:71:91:48:2d:7f:62:17:39:
                    27:f0:dd:e5:21:db:53:ba:29:d8:36:85:11:c5:75:
                    cb:8e:9a:c7:27:8c:ac:2e:79:ac:68:99:f7:70:82:
                    7c:f9:25:e2:51:d4:ca:45:48:05:04:a4:49:7a:d0:
                    cd:36:6e:69:3e:bd:7f:e7:b6:35:b4:40:1f:1c:c5:
                    cb:8b:0c:26:bb:e4:af:05:6f:13:28:0b:b4:ef:7a:
                    a0:54:5c:27:f9:bb:be:54:95:54:86:fe:f4:fb:09:
                    35:02:61:67:23:60:c1:33:99:2c:91:51:26:9f:db:
                    ce:0b:e2:6f:54:5c:d9:86:56:db:56:bb:1e:8a:dc:
                    93:f4:38:78:1b:74:b9:5c:61:bb:47:9c:ed:3f:c4:
                    51:34:22:a2:85:00:a0:17:96:93:15:47:9e:98:8b:
                    d7:78:b1:9a:b3:71:79:28:46:59:35:ae:6d:2f:8e:
                    60:50:3a:9e:d5:7b:9a:a6:d8:4e:b2:bb:ff:2d:ac:
                    f2:1f:a9:aa:e6:14:d8:b0:50:5a:c4:bf:d6:21:cb:
                    df:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E9:DC:CB:5D:A1:44:AC:0B:DC:C1:0A:B4:0D:73:E7:21:19:CE:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/43083772-3eb5-35cd-a8ea-5deefe5de773.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.0.0.0/12

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:eb:d4:fa:1e:8d:4b:92:0e:e7:26:d7:12:ab:fb:55:c1:39:
         f5:f4:fc:48:29:15:97:71:75:06:89:31:a9:0b:05:1a:f6:c6:
         6f:91:34:8b:e1:ca:f0:f0:30:6d:02:45:46:73:80:4f:e3:9b:
         1a:f9:1d:cc:00:f3:db:00:65:bc:d1:d7:4c:52:44:ed:21:48:
         e7:9f:0a:17:e1:fe:1c:ca:f1:4e:bd:be:9a:13:e2:74:fa:1c:
         6a:1b:74:5e:6f:b4:71:7a:49:32:9b:65:df:9e:07:de:02:bd:
         29:7c:d3:bd:28:df:a3:58:73:e4:02:35:41:bf:ed:a6:ed:05:
         97:93:7f:77:25:42:d2:5a:f0:e1:17:20:d3:ad:27:5a:76:54:
         87:02:a2:62:1a:15:6d:2f:58:72:3b:97:b6:97:89:65:e6:e0:
         42:b4:2d:86:8d:63:e3:fd:3c:a8:b4:29:35:a9:85:05:86:94:
         fc:f0:4e:d1:ab:e3:61:b7:7c:35:d0:88:eb:c6:a1:63:dd:aa:
         b3:79:18:b1:6d:7d:0f:68:4e:f8:22:58:ad:7e:2b:46:e9:6a:
         c2:0e:7b:e4:2a:2a:00:f0:95:af:88:c9:bc:0f:63:d7:30:9e:
         f5:1f:9f:0d:b1:1a:26:e5:6d:d9:2f:4d:01:67:9b:35:09:9a:
         f6:b6:a1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:43:30 2026 by rpki-client