Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b6cc9ec-ae83-393f-a366-2a39f4faa50e.roa
File:                     7b6cc9ec-ae83-393f-a366-2a39f4faa50e.roa (raw, json)
Hash identifier:          LDO+eVqvQ3uQVmAtDwpghzxE1Cr4IdUDRcg4Xj07G1s=
Subject key identifier:   70:8B:96:67:57:C1:EF:01:E6:B7:72:D3:24:C4:5E:0B:34:96:C6:0B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E4559E3FE3582DA7565424780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b6cc9ec-ae83-393f-a366-2a39f4faa50e.roa
Signing time:             Tue 23 Jun 2026 21:00:12 +0000
ROA not before:           Tue 23 Jun 2026 21:00:12 +0000
ROA not after:            Mon 21 Sep 2026 21:00:12 +0000
asID:                     35994
IP address blocks:        23.199.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:45:59:e3:fe:35:82:da:75:65:42:47:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 23 21:00:12 2026 GMT
            Not After : Sep 21 21:00:12 2026 GMT
        Subject: CN=8bb02f0a-b662-43a3-93a3-eb4cccfbbab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:f5:b1:46:db:d1:b6:af:fb:b8:52:0a:d6:
                    fe:3d:13:7b:9c:66:fd:61:b2:cd:90:97:01:43:1a:
                    e1:15:b2:5b:84:94:b0:8c:1c:02:e0:da:ac:f4:4a:
                    bc:1f:7c:03:fe:9c:cd:f0:99:f8:cc:e4:12:a7:49:
                    d1:0f:66:1a:73:64:10:97:b5:da:7f:33:64:90:1d:
                    56:fe:13:63:71:63:f5:34:21:6a:b3:92:34:51:3e:
                    d1:79:e7:45:91:51:42:c8:10:a6:05:b8:c9:75:cb:
                    6b:89:85:8d:a3:58:63:78:94:80:a2:7b:8e:4b:01:
                    db:fc:8d:9c:e3:da:e6:20:84:34:f7:97:bd:07:b6:
                    a8:cc:ed:e2:4b:44:c8:44:e2:f0:d9:71:7c:7d:0e:
                    ec:9f:ff:e1:eb:13:a1:88:dd:54:61:f1:91:58:cb:
                    fb:db:05:6a:3f:a9:3d:00:d9:e9:14:43:d5:3f:48:
                    c2:c0:13:25:5c:d2:d2:ca:d5:8d:ba:fe:28:ba:cd:
                    e0:c7:f1:d4:99:67:bf:3f:9f:63:98:33:49:9d:d7:
                    8f:c0:62:69:bf:fb:26:d0:34:11:b7:04:39:2a:2a:
                    64:91:96:69:aa:c1:aa:5a:17:05:ab:49:8f:9b:dc:
                    5d:f7:9f:3b:30:d0:f8:52:57:b3:4a:ed:99:08:d5:
                    ff:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8B:96:67:57:C1:EF:01:E6:B7:72:D3:24:C4:5E:0B:34:96:C6:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b6cc9ec-ae83-393f-a366-2a39f4faa50e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.199.35.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:95:5b:61:cd:21:b9:93:50:1f:7e:34:a9:50:62:ec:dd:2c:
         88:5b:59:2b:d1:81:13:47:71:d6:91:b5:a4:a8:22:68:1a:7b:
         56:c1:f4:26:34:6d:c8:0b:f7:9f:1c:cc:ee:26:2d:e7:8e:c0:
         e8:59:25:62:75:85:21:54:4f:7e:7f:44:6a:87:47:7d:b6:29:
         a0:c2:92:f5:25:e0:07:ff:b1:1c:39:c9:c0:6f:ee:1e:7c:b0:
         93:35:c7:5c:dc:35:78:15:af:0d:36:5b:06:26:94:db:09:4f:
         54:8c:4f:09:a1:8e:31:1a:ed:1b:57:4e:91:0b:e0:7d:ca:bd:
         2f:fd:fa:78:fc:c3:78:04:68:e7:32:0e:23:b2:9a:ff:56:d7:
         bb:bb:3d:55:15:34:c6:8f:d4:01:43:17:e7:8b:c0:79:f3:a3:
         e8:7d:46:ca:9a:28:08:b4:b5:b7:f2:fe:ff:7b:a6:fd:b2:e4:
         14:04:24:e7:a3:7d:5e:d5:f9:a2:44:fa:7a:4a:5d:cc:90:76:
         05:ff:4e:07:54:fd:11:42:d2:e7:2f:6d:86:e8:60:44:2a:7f:
         09:b0:fa:7d:11:d5:70:1a:50:2f:3a:29:cd:0c:18:c3:23:1c:
         08:48:1e:ec:8e:a4:c6:9f:58:53:a5:5e:0c:e8:45:30:36:a3:
         a7:0b:37:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:58:14 2026 by rpki-client