Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51c596c4-646c-3188-be40-fe7afeee2157.roa
File:                     51c596c4-646c-3188-be40-fe7afeee2157.roa (raw, json)
Hash identifier:          s0o1inMMGd+c4Ylv1keM78ZdJv2tA9xSWSXMJkS6BG4=
Subject key identifier:   F7:B3:A1:60:63:01:5B:68:4F:58:80:10:45:3D:9E:3F:01:B0:1B:BE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E66DA250A89D9CAD3DD734BC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51c596c4-646c-3188-be40-fe7afeee2157.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     16625
IP address blocks:        23.8.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:25:0a:89:d9:ca:d3:dd:73:4b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=48d874f4-b300-468c-8204-185e0dc783d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:08:9c:81:a8:49:69:6f:ae:fe:9c:ff:9a:68:
                    86:ed:e2:db:9c:1d:12:46:c5:a0:77:d7:e4:37:b0:
                    e7:e4:9a:16:69:16:e5:56:83:32:2b:fd:fc:f8:b4:
                    c9:fd:26:82:f5:1e:c5:86:02:ae:31:f7:7d:99:1a:
                    5a:1b:6c:71:94:0b:a3:7d:7b:97:01:b2:bd:c7:b1:
                    8c:f4:45:99:ca:b3:b1:45:c2:27:50:ce:d0:8b:48:
                    e9:c1:a4:b7:fa:8a:85:5c:8c:f2:79:ce:9b:b2:47:
                    85:2e:48:ab:db:5a:4c:81:01:d1:de:68:f5:14:0a:
                    87:17:fb:80:82:31:22:e6:5f:1c:74:38:2f:f3:28:
                    a3:9c:50:10:b2:a8:8e:2a:e2:13:b4:51:7f:f9:c2:
                    a6:b8:e3:0d:2c:d8:4d:a5:29:7d:27:e8:81:46:4e:
                    c4:bf:5e:55:04:9a:a2:2c:8a:96:d2:86:63:e6:f3:
                    92:b9:fc:d8:96:51:da:16:dc:39:51:03:b4:ae:c9:
                    b0:54:6b:de:c8:be:4e:58:ef:32:bf:5b:9e:c3:b2:
                    34:2e:2d:62:a5:5e:d6:78:84:12:83:6d:88:86:93:
                    de:b5:2f:d8:0d:f7:e8:51:73:05:c2:ee:4b:22:21:
                    92:7d:d2:5b:0d:4f:f8:92:1f:30:48:a2:11:2d:5c:
                    2e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B3:A1:60:63:01:5B:68:4F:58:80:10:45:3D:9E:3F:01:B0:1B:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51c596c4-646c-3188-be40-fe7afeee2157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.8.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:1e:6c:02:ea:17:2c:07:a6:21:67:66:55:32:85:3b:07:3f:
         c9:79:93:50:7c:1f:f0:90:e4:47:8a:1d:6c:e0:04:0d:32:01:
         7e:10:3c:fb:8c:3b:c0:26:b3:af:85:f2:ba:e3:a2:b1:57:0a:
         07:12:82:09:04:df:c6:aa:ed:06:37:18:d6:e2:c3:c9:c3:94:
         3b:cd:b9:e7:2f:1d:50:b8:58:4e:07:a3:13:f8:c9:7d:12:4a:
         44:16:25:74:9f:b8:c2:f3:f7:93:17:57:52:7c:9e:4e:02:3a:
         a6:21:c8:58:8e:42:1f:74:2b:f2:b9:00:c9:06:7d:56:5d:11:
         cd:28:2a:b8:8d:9e:b8:14:06:4c:8a:ef:8c:1b:53:de:d2:a7:
         79:46:1e:af:b2:bb:a4:76:80:8d:27:f5:32:8c:14:73:2c:61:
         8c:1f:03:ec:d4:68:6f:dd:cd:af:81:3d:8e:eb:58:0f:43:fb:
         f5:18:e1:f5:ed:13:41:45:d4:71:95:ce:b3:ac:9d:1b:58:ab:
         f4:f2:a2:36:18:fd:40:97:7d:7e:d2:89:35:18:80:65:27:eb:
         ce:50:00:09:0f:ec:9d:4e:32:39:71:87:a4:16:a5:62:22:c0:
         90:ae:ba:93:30:69:70:71:68:61:28:8b:2b:a2:2a:11:e0:c1:
         74:74:b5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:59:26 2026 by rpki-client