Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/443192fd-61e5-3a6c-ae1c-920a113ceafb.roa
File:                     443192fd-61e5-3a6c-ae1c-920a113ceafb.roa (raw, json)
Hash identifier:          ydhDaXvLDQDrEBMknMQnwG2007fwPZrcRaYbb38yoVs=
Subject key identifier:   BD:8D:A4:22:AF:E1:A9:D8:7C:D5:10:E3:31:38:D7:99:2F:83:41:C7
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE41B4314B16C02693825A240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/443192fd-61e5-3a6c-ae1c-920a113ceafb.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     20940
IP address blocks:        23.193.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:43:14:b1:6c:02:69:38:25:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=1c26fa2c-af06-4f3b-a6b3-f486431cadf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:a7:69:30:df:da:79:ad:fd:2b:43:3e:be:
                    58:29:ba:8e:c2:1a:84:83:59:2c:98:9b:69:54:e2:
                    67:bf:2d:c5:02:87:a9:95:45:b7:53:7d:11:08:ed:
                    a7:fe:72:36:00:61:1f:1d:dc:c8:5b:c2:1c:01:67:
                    95:63:fa:f5:cd:91:74:c1:d9:df:59:b6:c0:5a:40:
                    d1:04:73:dc:5e:6a:28:d7:bb:8d:26:01:f6:82:7e:
                    71:ef:af:ff:35:9f:18:04:95:bd:7b:da:99:dd:3e:
                    bd:d5:e3:d9:4d:16:46:aa:0e:3d:1b:82:4c:4a:e9:
                    06:98:df:aa:97:97:fc:12:5d:f0:53:9f:16:64:94:
                    3e:e3:bb:0c:3e:b0:83:fc:2e:e6:d4:ce:08:b7:ce:
                    70:b8:08:cc:8e:87:54:32:54:37:25:d9:50:55:f0:
                    8c:42:c9:5d:11:8f:4c:2a:d9:09:5f:49:21:5a:cc:
                    3f:12:0c:32:02:da:58:cb:65:1e:3a:03:71:a4:ab:
                    39:5a:56:e9:c8:2a:2e:74:1d:78:2c:6d:65:23:1f:
                    88:42:c6:90:09:dc:2c:26:14:c6:9e:28:0c:45:c7:
                    81:a1:d1:ee:95:97:4c:70:34:01:b6:6d:40:21:13:
                    f6:b6:25:77:d9:16:76:19:e0:ad:9f:03:47:4f:a6:
                    32:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8D:A4:22:AF:E1:A9:D8:7C:D5:10:E3:31:38:D7:99:2F:83:41:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/443192fd-61e5-3a6c-ae1c-920a113ceafb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.193.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:81:e3:63:5b:4f:4d:b4:39:20:56:8d:44:f9:0d:62:69:f0:
         9b:6e:e2:6b:a0:39:98:2f:1d:27:7c:50:c6:06:92:72:3b:eb:
         1c:e8:ca:1b:12:eb:ac:77:d1:7b:ab:5c:23:a2:9c:06:db:62:
         37:28:1d:58:61:a4:5b:f3:54:4a:d6:6d:1d:ef:d4:cc:96:9e:
         96:51:1a:cb:e2:8e:99:36:82:f6:10:11:ee:dc:64:ae:8f:aa:
         c8:75:ca:0c:16:8b:0d:ef:89:87:25:f6:3b:2a:b9:fe:d1:d9:
         62:02:ef:75:ce:eb:2c:d1:5d:25:ab:f4:33:bc:9e:71:48:2d:
         0c:70:80:f9:75:3b:b9:84:bd:8c:5c:cd:60:6c:ec:17:0d:ce:
         25:f5:6c:06:4b:b8:e3:94:ea:aa:d7:a2:01:01:d7:13:2a:a0:
         92:22:f5:89:e2:7a:96:57:73:c9:28:22:47:79:8f:34:be:ad:
         4d:1b:0e:7f:52:3e:00:0a:fd:d5:bc:43:cf:a6:77:fd:cb:4c:
         03:1b:de:7f:f1:ed:7f:a3:77:c9:99:2e:5b:4e:62:78:ee:34:
         00:75:bf:5e:93:6b:fb:fe:83:6d:cb:b3:a3:41:c5:90:24:3e:
         bd:2c:c8:e3:dd:4a:92:b9:a7:88:0d:8c:95:25:4c:bc:7a:d5:
         a9:31:18:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:55:20 2026 by rpki-client