Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d86d42b0-7ca2-3ccf-849e-f932f50a880c.roa
File:                     d86d42b0-7ca2-3ccf-849e-f932f50a880c.roa (raw, json)
Hash identifier:          rKl/HB3s4vBpym8wM093zSC9vM0zpbIzhnR4AaK+hh0=
Subject key identifier:   A1:BA:D9:3B:60:7A:7E:AF:22:D0:27:DB:CD:E7:E8:85:B8:4C:DC:BC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DFA708C2C60BC47CF1C056900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d86d42b0-7ca2-3ccf-849e-f932f50a880c.roa
Signing time:             Thu 28 May 2026 01:00:10 +0000
ROA not before:           Thu 28 May 2026 01:00:10 +0000
ROA not after:            Wed 26 Aug 2026 01:00:10 +0000
asID:                     20940
IP address blocks:        23.206.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:fa:70:8c:2c:60:bc:47:cf:1c:05:69:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 28 01:00:10 2026 GMT
            Not After : Aug 26 01:00:10 2026 GMT
        Subject: CN=ae4d7e27-8362-4a1b-bd0f-7d86734fa687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:97:74:a2:9d:4f:25:0d:69:7d:e0:ac:0a:
                    24:69:a9:d9:c6:c8:63:b7:65:fc:5f:ea:89:26:03:
                    35:db:f6:52:5c:43:c2:13:42:db:ce:e2:fb:89:44:
                    cf:58:4a:60:8b:9f:0b:e6:b2:b1:bf:65:10:2e:80:
                    e2:11:c1:94:62:51:65:3b:8b:2c:92:1c:15:24:d0:
                    56:c5:52:1c:da:82:74:0f:02:53:7e:14:6a:55:19:
                    33:ff:88:c1:cd:ff:fe:c2:b0:bb:cd:61:c4:27:d7:
                    ac:05:99:2d:0b:5e:f6:83:df:0f:99:d5:e0:cd:8d:
                    1d:95:9e:8e:e5:93:9f:e7:4f:98:c4:e9:c6:3c:e3:
                    a6:f5:b4:ed:bc:0c:95:b6:af:6a:00:30:c8:9c:08:
                    7a:69:f3:8f:f4:ed:40:d3:0e:13:9d:ab:2b:86:41:
                    07:81:95:9d:56:39:4c:f3:3f:e0:4d:25:c3:ab:8f:
                    39:8a:c1:5d:fb:48:62:1e:86:17:c9:52:1f:6c:c8:
                    65:54:fc:87:4c:fe:d5:16:f1:aa:cd:4a:ae:e1:e5:
                    70:aa:fc:93:e3:ad:fe:ca:bc:e4:02:0f:a8:fc:cc:
                    a1:c9:65:12:20:75:0b:64:a2:43:08:e2:46:d7:27:
                    81:47:27:32:dc:3a:0d:50:fb:00:da:a4:3c:01:78:
                    b2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:BA:D9:3B:60:7A:7E:AF:22:D0:27:DB:CD:E7:E8:85:B8:4C:DC:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d86d42b0-7ca2-3ccf-849e-f932f50a880c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c7:c6:7c:9a:39:24:6c:39:f9:4d:d5:07:1a:0b:db:0c:15:
         ba:76:65:51:69:ec:46:3e:b6:d3:50:d6:7a:35:3a:db:ff:84:
         aa:25:ad:51:b7:8c:4d:f5:39:8c:c7:88:95:a8:25:cd:43:15:
         9a:97:7c:65:7d:6c:35:6b:85:d8:40:2f:7d:ea:c3:a3:8a:a5:
         62:44:16:f9:e5:a1:a8:de:3d:cc:09:57:ce:73:44:bf:f0:41:
         e0:17:26:7e:19:64:66:13:fc:06:ae:cc:98:b9:8b:d2:ed:27:
         8a:32:b3:ec:27:33:74:18:58:56:d8:35:63:06:3c:c3:99:0d:
         10:af:cb:8b:9b:9d:e2:52:18:db:71:9c:2f:72:5d:f2:d8:48:
         bc:e7:32:06:75:79:e4:b2:9c:8f:cd:0d:69:2c:73:01:f8:bd:
         75:ae:f9:af:ee:aa:b4:2d:04:cc:7d:cc:e0:c4:aa:b0:b7:ba:
         4b:f1:b8:45:24:d3:f0:53:4f:cf:26:a4:25:52:94:75:4d:89:
         2a:a6:4f:76:bd:34:54:7c:55:00:19:b1:c8:71:b2:3f:fc:80:
         f9:78:70:28:3d:d7:24:78:75:cd:20:a9:40:b2:36:29:e7:92:
         67:3c:99:7f:e6:2d:c6:a7:10:60:a0:6a:8a:72:72:0c:7c:ee:
         7b:32:7b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:57:39 2026 by rpki-client