Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b32930a5-1b3c-3ac9-946a-706e73d22623.roa
File:                     b32930a5-1b3c-3ac9-946a-706e73d22623.roa (raw, json)
Hash identifier:          ej9FHommErX0jE7Ze0SKpYO0fUyqXmrfRJqe+2b6T8E=
Subject key identifier:   96:0D:22:97:CF:1F:44:39:2C:DA:23:B1:FD:B2:7F:DB:E0:92:F5:A4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DFA70918B1A7CFE1E5F802B04
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b32930a5-1b3c-3ac9-946a-706e73d22623.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     24319
IP address blocks:        23.204.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:91:8b:1a:7c:fe:1e:5f:80:2b:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=c533bb07-1f74-44b0-bfba-393d108b5018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:79:b5:2e:d6:79:34:66:9d:3f:99:16:c3:73:
                    df:e2:bd:0f:11:18:9f:1c:80:9e:a1:33:87:16:f2:
                    cb:d3:f5:0e:dc:ce:f9:ac:4e:c3:ce:53:e1:ae:95:
                    c4:0b:f4:bd:fd:14:8a:41:52:d5:a7:fd:1c:5e:d8:
                    e4:87:e7:02:b4:e5:f9:51:30:62:42:7a:25:c5:b9:
                    50:26:fa:39:e0:fe:82:90:73:0a:32:2e:2f:42:77:
                    44:3a:81:ac:32:a9:d1:5b:7d:aa:e7:a4:44:b4:c9:
                    27:c6:8a:71:a4:68:38:ec:8e:a5:9f:11:58:89:20:
                    52:4d:93:df:ff:0f:55:ad:a3:a3:0a:6d:7c:a3:c9:
                    4f:89:5f:4f:26:08:6f:74:ac:3e:3c:66:9c:77:05:
                    81:75:e0:d2:b5:f9:88:2a:9d:b4:1f:31:4e:4b:5f:
                    c6:b2:29:0b:63:18:cd:3b:63:4e:14:6c:84:bc:5d:
                    9d:c1:65:96:37:17:23:98:7b:32:a2:79:a6:e1:35:
                    10:cd:38:37:ef:bf:aa:8d:60:9e:ca:37:a2:c0:24:
                    4f:4e:dc:e4:27:bb:54:e8:dc:d9:52:8d:c6:3a:0c:
                    a5:75:22:9b:39:c8:ac:0e:40:82:a6:29:d7:e5:07:
                    1c:88:ad:f8:9d:6d:91:d5:7e:7d:4f:ba:d4:b3:84:
                    18:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:0D:22:97:CF:1F:44:39:2C:DA:23:B1:FD:B2:7F:DB:E0:92:F5:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b32930a5-1b3c-3ac9-946a-706e73d22623.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.204.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:f4:a7:8e:61:0e:90:74:62:57:69:25:59:e5:3a:73:6c:8f:
         8f:a5:89:99:1e:fc:2e:61:e5:a9:f5:cb:a4:50:ce:1e:7d:56:
         51:35:47:34:76:84:b6:26:16:37:82:0a:18:81:16:88:3a:14:
         ca:e3:de:c1:e8:40:dd:21:c1:5f:bc:01:ea:bc:67:79:08:3d:
         96:db:b7:19:cc:4f:ed:38:41:a7:ef:19:a1:e4:fa:a1:a6:56:
         20:4b:f9:2d:55:92:d3:ac:ef:55:fd:a8:7d:27:6f:89:7c:84:
         bb:b4:53:23:a8:dc:a2:c7:8d:1c:9c:79:6a:62:50:5e:ed:ec:
         28:da:2d:18:a5:98:90:a1:91:56:3c:d7:a7:30:03:40:68:25:
         54:74:a6:5b:e3:0e:28:a2:32:14:cd:97:32:3c:e3:ec:b9:42:
         de:79:58:c0:12:05:38:6f:3e:6b:66:15:fc:da:ca:d5:45:97:
         11:c7:6a:21:b8:7c:61:f0:92:ee:27:79:d3:c4:cf:3e:80:53:
         9a:97:9b:17:e4:21:a4:5c:57:34:bf:d5:c9:ed:2e:1a:56:82:
         73:37:87:29:29:91:73:ad:aa:4b:19:a5:18:3a:2b:7c:1a:ac:
         e1:6a:c9:61:27:d6:c3:8a:c7:c1:8d:dd:04:8b:80:6f:61:9b:
         ca:39:ba:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:57:25 2026 by rpki-client