Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7594d2ad-2553-3bbf-b6db-a784fe007c27.roa
File:                     7594d2ad-2553-3bbf-b6db-a784fe007c27.roa (raw, json)
Hash identifier:          VGCuxMtvJi/EXh8cVo/iL7a8Q9o7J3HExCJCJq/nI6A=
Subject key identifier:   73:64:D4:17:B8:B5:B3:21:87:5F:B2:D6:95:F8:2D:BB:30:9A:AC:56
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E059B3E0863172CADE2985D00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7594d2ad-2553-3bbf-b6db-a784fe007c27.roa
Signing time:             Mon 01 Jun 2026 01:00:10 +0000
ROA not before:           Mon 01 Jun 2026 01:00:10 +0000
ROA not after:            Sun 30 Aug 2026 01:00:10 +0000
asID:                     20940
IP address blocks:        23.7.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:05:9b:3e:08:63:17:2c:ad:e2:98:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun  1 01:00:10 2026 GMT
            Not After : Aug 30 01:00:10 2026 GMT
        Subject: CN=3ff1dcf5-f3a8-4318-809a-14d03198f974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3b:29:4b:96:05:f5:78:51:53:f2:a6:b9:0b:
                    d3:f8:4e:b8:c9:37:f0:60:ab:86:a1:db:d4:19:c5:
                    68:4f:dd:9c:b1:66:2d:8b:75:cd:00:19:7f:08:b6:
                    92:31:51:59:39:43:45:7c:0b:dd:55:5d:c9:c5:d3:
                    87:f5:d0:f2:e5:e8:65:78:13:66:e2:54:4b:9b:74:
                    91:71:e3:87:48:8a:d7:d5:f9:68:fd:b6:3c:f1:19:
                    d9:28:fa:05:72:fd:0d:d0:7b:82:b5:05:8e:e3:70:
                    52:95:b7:96:f7:f0:de:b0:02:ae:76:37:93:19:eb:
                    5a:bc:3d:ad:9d:2c:76:34:47:cf:b8:a0:cb:51:7d:
                    a4:5a:02:a3:24:a2:67:c1:44:43:0e:bc:1b:6b:81:
                    59:48:33:fe:2d:95:96:d7:4e:28:a1:1a:86:a0:2c:
                    8d:61:61:bc:bd:b4:ef:eb:c5:50:fe:c2:4e:08:95:
                    f8:e2:d8:a2:55:e6:b0:49:24:a1:19:3a:57:08:90:
                    1b:f2:b8:54:b2:2f:d0:b2:98:c2:4b:a8:c7:d2:6f:
                    c8:44:8d:2f:1b:ce:13:01:1c:c2:de:38:9e:b6:4c:
                    e2:78:29:38:ac:e8:73:2a:09:69:c7:83:3e:7c:d7:
                    0c:2b:2c:d5:4b:ec:a8:1b:f1:e4:47:c6:90:28:be:
                    f6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:64:D4:17:B8:B5:B3:21:87:5F:B2:D6:95:F8:2D:BB:30:9A:AC:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7594d2ad-2553-3bbf-b6db-a784fe007c27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.7.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ae:e2:77:43:7c:ef:b5:03:d2:58:23:cf:01:1b:df:a0:7d:
         29:5a:70:f8:e2:6d:99:78:95:90:a5:2b:e7:97:0c:a9:7d:8a:
         14:bd:0d:7a:e4:84:47:0d:7a:d6:57:14:97:e1:7e:ad:9d:81:
         46:7e:bf:0b:a1:83:b5:82:6c:e2:71:89:74:7c:7b:29:73:b1:
         7c:26:3d:51:c4:7d:64:a6:2e:2d:e4:e7:1a:a5:55:ed:6f:72:
         f2:06:ca:f5:1c:83:92:de:51:f2:1e:f1:f5:b1:51:fc:d7:f2:
         fd:e9:89:41:e9:23:36:e3:79:01:90:dc:09:2f:63:94:50:a0:
         70:f5:21:a3:11:56:d6:b1:a0:98:43:01:8d:f6:5e:aa:e4:24:
         42:82:05:65:8d:63:1f:20:2d:cf:a1:82:71:f2:19:bf:1a:8e:
         2a:0e:5f:ff:5e:ad:28:e1:2d:27:51:36:ad:58:ce:1c:3c:d8:
         6f:73:7f:b1:18:e4:4b:09:94:41:f4:d7:fa:79:55:f9:99:fd:
         bf:1d:da:1e:96:85:24:7a:aa:3b:69:3c:ec:19:50:e4:00:48:
         6f:82:90:48:70:82:5d:ac:6d:e8:14:18:39:60:3d:d7:80:b3:
         6a:8b:10:05:c7:e3:b3:4c:4f:f5:50:be:9a:c5:cd:0a:58:29:
         46:23:6c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:41:43 2026 by rpki-client