Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56fb240d-7da7-3a4f-b5ad-de4fa1d248d0.roa
File:                     56fb240d-7da7-3a4f-b5ad-de4fa1d248d0.roa (raw, json)
Hash identifier:          o7zbMb736yNpow0XItbHllk+jUUspQLDsJuJWS7bugY=
Subject key identifier:   00:73:5C:E3:10:F9:CD:EB:EF:8C:A6:59:CD:C3:1C:D6:ED:EE:A7:85
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E11B431AAD9FDF775E501B040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56fb240d-7da7-3a4f-b5ad-de4fa1d248d0.roa
Signing time:             Fri 05 Jun 2026 09:00:12 +0000
ROA not before:           Fri 05 Jun 2026 09:00:12 +0000
ROA not after:            Thu 03 Sep 2026 09:00:12 +0000
asID:                     16625
IP address blocks:        23.40.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:11:b4:31:aa:d9:fd:f7:75:e5:01:b0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  5 09:00:12 2026 GMT
            Not After : Sep  3 09:00:12 2026 GMT
        Subject: CN=9302089e-5544-4259-b180-6eb7184e3a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:20:6c:7e:81:5a:91:a2:ea:8e:40:43:d4:29:
                    ec:77:23:5d:03:ab:67:a4:4b:51:1f:12:52:13:55:
                    f8:97:92:6a:be:66:06:f1:84:08:28:8e:b8:1f:ff:
                    cd:ce:ad:f8:f3:c5:2f:98:fb:11:07:87:78:22:59:
                    0d:72:0c:7e:32:f3:8f:1a:57:3c:66:05:2c:d1:c0:
                    48:40:55:ff:e0:42:e0:c4:17:e1:01:bf:e8:d1:81:
                    77:e4:01:8c:93:4b:7b:33:2b:57:f0:8f:63:a7:96:
                    60:3a:b2:c7:d6:16:49:eb:84:2d:a0:3a:18:23:63:
                    50:3b:59:16:9d:8e:87:9e:92:47:91:2f:c4:40:a9:
                    0a:a3:a4:ca:20:22:ce:a2:1d:dd:3d:b9:1a:d7:60:
                    65:72:ef:4e:b6:56:1d:d3:5c:82:97:53:ab:43:8f:
                    e6:c4:de:e2:71:89:e2:5d:40:79:24:1a:ea:41:29:
                    f3:c0:48:9f:f6:e5:7d:bc:43:26:e0:f5:c5:21:d5:
                    62:c3:82:1b:cc:09:31:e3:ae:5f:4d:d6:bd:90:e5:
                    56:28:21:1a:21:18:19:61:6f:d5:fd:fe:95:a4:d6:
                    db:32:a7:76:92:f5:db:bc:32:fe:01:a1:08:78:55:
                    6f:61:40:05:b4:7d:59:9d:d4:ba:fe:44:cd:a7:fe:
                    67:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:73:5C:E3:10:F9:CD:EB:EF:8C:A6:59:CD:C3:1C:D6:ED:EE:A7:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/56fb240d-7da7-3a4f-b5ad-de4fa1d248d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.40.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:f1:c5:7c:f7:35:2c:1c:cf:8a:f6:7d:c4:5d:e0:24:07:8d:
         07:c7:86:f2:d7:3b:0e:88:8d:0f:0e:5f:2d:ef:09:67:28:d9:
         ad:9e:7f:22:6c:13:47:7e:7e:de:73:fe:e8:23:d8:d9:a2:82:
         db:24:22:d6:07:72:09:8d:6f:28:68:66:f8:54:d4:6c:74:7a:
         ca:84:2e:4c:04:99:ab:15:0c:42:45:58:44:bf:e7:5e:42:60:
         a4:1e:2f:8a:c4:54:83:1c:f9:49:2f:9f:61:ff:e0:72:7f:5f:
         9c:e0:fd:bb:a9:52:bf:c5:2b:20:a2:4f:4b:dd:f4:42:07:7d:
         f5:80:83:0e:5c:61:e6:0a:f8:f1:f3:ea:5d:eb:19:ca:61:35:
         91:98:c9:82:57:39:8f:07:e7:3a:3e:80:26:2a:f6:da:1e:e9:
         a7:6f:c6:35:c8:09:2a:ce:14:c5:f5:f1:23:5d:1c:55:05:10:
         be:73:09:61:61:93:46:2a:3d:ed:93:ef:62:6f:47:a8:50:30:
         4f:2b:74:90:39:92:94:c3:bd:51:fa:b3:be:74:ff:63:9f:76:
         4f:dd:db:d6:91:50:53:f4:7f:3e:30:78:dc:f4:b2:a6:da:51:
         ad:3a:21:cb:99:e1:08:35:1b:f7:0c:d9:36:07:43:17:36:f3:
         08:28:91:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:24:41 2026 by rpki-client