Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01713301-95bd-3c3d-9c8c-29ee3dcbee8b.roa
File:                     01713301-95bd-3c3d-9c8c-29ee3dcbee8b.roa (raw, json)
Hash identifier:          48oah6XjHOPvBCRy/HqEW1vOrGhjU9eVsBro+kW2Cm8=
Subject key identifier:   32:F7:C2:15:4F:62:FD:BB:CC:86:09:C6:BD:6C:AD:6D:A8:F8:3D:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D87FA9546A5F9045C73F127C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01713301-95bd-3c3d-9c8c-29ee3dcbee8b.roa
Signing time:             Fri 17 Apr 2026 01:00:27 +0000
ROA not before:           Fri 17 Apr 2026 01:00:27 +0000
ROA not after:            Thu 16 Jul 2026 01:00:27 +0000
asID:                     20940
IP address blocks:        23.212.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:87:fa:95:46:a5:f9:04:5c:73:f1:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 17 01:00:27 2026 GMT
            Not After : Jul 16 01:00:27 2026 GMT
        Subject: CN=88bca178-4f6e-462f-9fe6-4e8859cea0f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:43:11:35:56:90:56:4b:3b:41:70:c7:bf:
                    f6:80:49:39:9d:0d:3e:1a:51:a5:30:dd:82:f9:ef:
                    71:3c:b9:e5:33:c4:52:eb:d4:8c:b2:04:ef:d2:77:
                    01:9e:47:7c:d5:a6:f5:5d:a5:13:38:05:6b:65:70:
                    a7:cb:72:91:f7:1e:eb:49:cc:16:bc:ea:bd:98:92:
                    50:66:b2:8c:b9:54:37:5f:99:83:cd:9e:70:a3:19:
                    6a:da:a6:a6:cf:d5:30:f7:92:af:49:17:2b:94:25:
                    d4:12:af:e2:e4:fc:38:0e:29:49:37:64:20:03:bc:
                    e5:9d:63:52:c6:5c:eb:6b:29:6c:8a:53:04:9d:93:
                    ca:5c:11:2a:ac:f0:42:07:bd:c9:7e:33:e5:ab:98:
                    d1:d8:2c:aa:ec:8a:06:ae:a9:1a:8e:79:5b:14:f1:
                    6a:7a:e9:87:bb:e1:7a:18:c9:e2:f6:e5:41:00:13:
                    79:10:6d:6a:72:45:fc:cb:3f:ea:d1:76:06:6b:6f:
                    2a:6e:6b:7d:04:be:10:ab:c4:49:ee:41:a5:93:44:
                    fe:6d:b1:05:1a:c3:e2:38:12:7c:ee:92:17:35:5e:
                    5f:14:65:93:86:c0:41:4e:26:bd:a2:b2:2b:3b:43:
                    1c:76:12:2d:5c:14:fb:5a:26:1a:01:b2:9d:b9:bf:
                    7d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F7:C2:15:4F:62:FD:BB:CC:86:09:C6:BD:6C:AD:6D:A8:F8:3D:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01713301-95bd-3c3d-9c8c-29ee3dcbee8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:e2:ad:f2:4a:0d:47:e8:ac:19:b5:06:e2:18:61:6c:23:2f:
         6a:60:60:24:2c:db:c8:20:73:8d:40:07:ea:55:25:db:2c:c5:
         bc:0b:1b:56:fc:92:24:fe:3b:a9:ff:86:2b:da:b6:14:b1:8a:
         09:57:e6:d0:0a:c5:2f:51:79:04:c8:d7:c3:a0:1c:c4:6a:9f:
         36:12:dc:3b:fe:af:f7:90:ae:aa:1e:40:d0:78:c5:59:af:f0:
         26:4b:1b:9a:5e:03:25:39:97:7a:a6:c5:52:53:e0:1c:df:88:
         e6:55:4d:e7:e2:b8:da:a5:38:fc:66:e4:a1:b6:48:a9:bd:74:
         98:55:ce:9e:dd:7a:f2:d2:d2:83:0a:3f:66:e3:79:60:19:1e:
         ee:52:c2:dd:c9:89:98:42:96:f0:11:f8:29:ca:28:f3:bc:3c:
         a0:9a:56:10:c5:6f:7c:c8:59:48:22:7a:71:61:34:40:c4:a5:
         d9:a9:c2:52:7a:0a:cc:3f:2c:0f:d3:58:83:d0:ff:1c:93:44:
         11:1f:f9:ba:3e:29:83:e0:ee:44:94:00:a0:9c:31:c5:cf:99:
         9a:4f:c8:2d:d2:42:73:23:4b:43:93:35:12:78:13:e0:29:8f:
         7a:46:bc:97:b6:a2:81:7e:2b:28:2f:f1:7d:c2:63:a4:d7:3e:
         55:0f:e6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:45:24 2026 by rpki-client