Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d601b4d4-57ea-3448-8d12-76a7f2c1bb10.roa
File:                     d601b4d4-57ea-3448-8d12-76a7f2c1bb10.roa (raw, json)
Hash identifier:          Cx8phI5t38zv09d1ap/2y87/+GmAUZrMDk5XvrPZIbY=
Subject key identifier:   AA:2E:0D:8B:4F:6F:A4:B4:77:A3:71:DB:E2:B3:61:48:A6:84:66:E2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DE41B3750CD9056CCDB29D200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d601b4d4-57ea-3448-8d12-76a7f2c1bb10.roa
Signing time:             Wed 20 May 2026 01:00:25 +0000
ROA not before:           Wed 20 May 2026 01:00:25 +0000
ROA not after:            Tue 18 Aug 2026 01:00:25 +0000
asID:                     20940
IP address blocks:        23.196.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e4:1b:37:50:cd:90:56:cc:db:29:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 20 01:00:25 2026 GMT
            Not After : Aug 18 01:00:25 2026 GMT
        Subject: CN=171b4c18-5341-4643-8a31-18589b0ab28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:8a:b5:d0:22:b7:81:da:d0:06:f8:a1:b1:10:
                    8d:d5:6a:55:a9:37:4a:7e:d5:1a:46:33:c3:d5:83:
                    6f:c8:fa:46:71:b0:0e:f7:db:f8:26:4e:d5:b3:4c:
                    3f:2a:c4:71:18:b9:b9:b8:2e:2b:d7:2e:dd:09:e1:
                    b5:7e:85:38:67:4a:44:8f:66:cb:3a:72:e8:68:ac:
                    dd:2f:55:58:e0:49:c7:c2:52:00:af:4a:c2:f8:d1:
                    34:9f:30:88:32:4f:fc:61:65:ce:c2:6d:83:cd:5f:
                    d5:c2:a4:ec:5b:da:f8:a6:3f:19:86:5e:76:89:3a:
                    c5:28:68:7a:51:29:7a:1c:99:5b:94:e2:3f:de:b9:
                    77:e8:89:e0:6a:51:23:a9:31:5d:ee:33:79:c0:4e:
                    56:56:73:de:bc:0a:4b:54:ec:b7:c1:97:77:8a:ed:
                    c8:51:42:f9:8d:ef:30:cb:ed:33:a6:64:ee:59:eb:
                    89:01:61:2e:f7:d7:d0:f6:f6:d3:73:06:61:da:40:
                    90:aa:c4:3d:72:8d:4e:00:cd:11:6b:5e:f4:e0:9a:
                    31:4e:79:03:4e:24:73:b4:bf:70:14:4c:51:1e:0c:
                    86:d3:23:81:56:3c:40:c0:61:93:63:8a:04:a8:39:
                    9f:f2:b4:d3:1b:53:75:13:7b:58:13:ec:34:fe:5a:
                    88:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2E:0D:8B:4F:6F:A4:B4:77:A3:71:DB:E2:B3:61:48:A6:84:66:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d601b4d4-57ea-3448-8d12-76a7f2c1bb10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.196.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:06:f0:e7:fb:1d:33:bd:95:70:cc:ba:c4:ec:50:88:13:c2:
         c0:03:b3:95:94:bb:05:e7:9a:79:0d:60:1e:b9:25:0d:07:49:
         d4:fc:6b:fa:ca:52:e5:4e:70:e4:6c:0a:21:8b:2b:9a:f6:ef:
         ec:15:fe:a7:df:69:34:09:24:e0:93:30:23:bc:e2:37:4c:ef:
         33:d2:15:65:56:b7:32:d7:cf:0c:36:13:46:49:4f:05:2e:50:
         a3:d1:e2:9c:cf:97:ef:21:5e:f8:ec:7f:9b:a6:e8:9f:db:44:
         bb:e0:fd:9b:8c:76:41:7c:5a:7d:b3:39:b8:03:a6:d0:4d:c5:
         8f:ad:69:95:87:89:f8:3b:48:20:80:6a:e7:e8:b9:d9:92:70:
         40:2b:62:0d:fa:79:ab:65:42:50:ff:f5:38:21:65:67:43:69:
         b5:39:dc:b9:dd:a7:9a:2f:ca:6f:30:7b:fd:23:2c:a3:57:37:
         db:22:68:08:cf:74:16:18:64:8d:86:11:45:44:69:88:50:17:
         95:62:50:04:da:4e:a1:ce:43:7a:f4:ea:9c:83:01:e1:aa:8c:
         d5:0a:33:31:6c:a1:2e:f0:2b:e6:65:60:9b:55:c3:42:78:ef:
         89:13:b8:ec:37:5a:a8:a5:fc:28:a9:8d:57:7b:64:cc:a7:89:
         a0:a5:37:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:10:44 2026 by rpki-client