Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bf1719b-9588-3d91-a767-afdb643b270f.roa
File:                     4bf1719b-9588-3d91-a767-afdb643b270f.roa (raw, json)
Hash identifier:          upGb0XBRu7U4w87sLOuY00cwQpZ1bnBvMJ0njRWAvFo=
Subject key identifier:   14:53:04:C7:A6:D0:98:D9:A0:38:A6:62:C3:31:C3:73:1E:3B:14:60
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E00060086D7BABA0D64F04400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bf1719b-9588-3d91-a767-afdb643b270f.roa
Signing time:             Sat 30 May 2026 01:00:10 +0000
ROA not before:           Sat 30 May 2026 01:00:10 +0000
ROA not after:            Fri 28 Aug 2026 01:00:10 +0000
asID:                     20940
IP address blocks:        23.215.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:00:06:00:86:d7:ba:ba:0d:64:f0:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 30 01:00:10 2026 GMT
            Not After : Aug 28 01:00:10 2026 GMT
        Subject: CN=2e55099e-3e63-44bc-8e2b-ca01f8baadb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:78:9b:be:ad:e7:b9:04:4a:20:3e:7c:1f:b9:
                    e1:e5:23:2b:7a:0e:26:dd:41:57:95:9b:51:42:6f:
                    0e:e9:f7:d5:12:b8:71:44:f7:65:27:7a:35:b8:41:
                    cf:10:23:df:43:39:5e:bc:b9:dc:d5:78:ce:ac:f8:
                    ba:1b:3c:c4:80:46:b4:53:35:45:ba:f6:fe:06:3d:
                    68:b8:1c:59:b8:f2:98:a8:9b:e7:26:db:f4:c2:f6:
                    0e:cd:ee:4d:ef:6d:24:c1:6b:0a:30:39:10:e0:d6:
                    5f:2d:b1:19:65:79:83:9b:db:9d:44:8d:d1:5d:ef:
                    77:a5:57:f0:52:b7:22:cd:48:39:70:ea:b1:5a:75:
                    4b:c1:86:bc:8d:0a:be:6b:b4:4d:cd:ac:33:60:f0:
                    32:f4:58:6c:d3:2d:8f:af:a8:3f:fd:0d:e8:27:f9:
                    30:2e:ed:7a:20:30:0b:cd:59:5c:b2:e3:29:0b:6b:
                    81:ee:d0:1b:fb:d2:b6:ac:c7:e7:f6:8b:b1:ca:45:
                    1c:3e:6c:1f:ac:f9:6b:f7:b8:5b:79:37:38:f1:70:
                    ba:cf:ed:3f:fc:bf:b3:53:e0:5b:4c:7d:b0:f2:cc:
                    bc:00:8a:83:7b:98:df:d3:05:51:08:16:4b:c3:1f:
                    55:a4:15:a0:65:4d:ce:60:4d:9b:5e:41:aa:78:75:
                    e6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:53:04:C7:A6:D0:98:D9:A0:38:A6:62:C3:31:C3:73:1E:3B:14:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4bf1719b-9588-3d91-a767-afdb643b270f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.215.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9c:64:c5:03:06:4c:6f:5a:fe:92:48:c1:9a:8e:7c:0f:95:
         15:ee:46:36:db:99:90:7a:05:7e:f9:23:fc:c9:46:fe:90:af:
         ed:eb:42:61:5c:f1:bd:f0:b0:1a:12:34:ff:03:99:8c:f6:d1:
         eb:3e:7b:db:ce:ec:43:cc:d5:51:f7:3f:3f:f7:ac:be:fb:20:
         81:cf:96:0c:39:05:c0:3d:c9:f8:d3:ff:84:ae:b1:e9:23:0a:
         9e:8e:d8:54:ee:08:2f:89:08:ef:b6:6c:f8:a5:11:92:6b:aa:
         42:97:4b:70:5c:29:99:dc:dd:8b:3a:e1:2a:d3:4f:0b:42:35:
         88:6d:b9:4f:32:59:24:02:e0:bf:94:f2:ad:c3:4a:ee:8b:1c:
         49:03:a1:7a:72:11:ac:ed:64:ff:b4:c9:53:c0:bb:ed:dd:0b:
         5f:b9:70:9e:5b:a0:d5:c4:52:a9:8b:6a:c8:de:e3:00:9d:65:
         2b:87:23:37:a9:2b:96:a3:51:69:8c:26:50:dc:5c:68:b9:2c:
         b3:09:e1:17:05:20:a5:10:a5:2c:4c:0a:e8:98:58:5b:d0:98:
         6d:24:a1:3e:6a:43:70:e5:00:dc:b3:26:8d:43:d6:86:ec:d9:
         9e:19:ea:95:d5:24:b3:c1:e6:42:09:a0:24:b9:28:33:8b:ce:
         fe:cd:61:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:42:53 2026 by rpki-client