Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ece8b14-9cd6-332c-8c7d-419986246fd4.roa
File:                     1ece8b14-9cd6-332c-8c7d-419986246fd4.roa (raw, json)
Hash identifier:          dJW52BuSp/AA/8hCdr7pl1tnbvQt2AVCWBYz6/kj0P8=
Subject key identifier:   DC:3E:22:55:4D:5E:A1:97:44:C4:E0:CC:09:28:C3:A2:F2:93:AF:3F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D6AAA71AD64BB35A90E0BEE70
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ece8b14-9cd6-332c-8c7d-419986246fd4.roa
Signing time:             Mon 06 Apr 2026 13:00:30 +0000
ROA not before:           Mon 06 Apr 2026 13:00:30 +0000
ROA not after:            Sun 05 Jul 2026 13:00:30 +0000
asID:                     12222
IP address blocks:        23.74.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:6a:aa:71:ad:64:bb:35:a9:0e:0b:ee:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  6 13:00:30 2026 GMT
            Not After : Jul  5 13:00:30 2026 GMT
        Subject: CN=d9601748-f11f-42d1-b831-827676bd48a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1d:04:f0:3c:64:f1:70:f7:21:cc:d0:8a:fc:
                    61:c3:58:99:8f:59:d9:a6:be:fe:35:30:e4:70:fe:
                    f5:07:c2:8d:7a:87:b1:43:9b:b5:cf:2c:27:1d:35:
                    a7:61:fb:e9:21:50:b2:05:69:1d:19:b9:b3:1b:60:
                    b6:c1:ed:7d:92:2d:7e:18:22:11:1d:b0:70:c5:0c:
                    2f:71:ce:a4:19:c0:70:af:f6:1d:29:46:c6:e2:8d:
                    8e:7d:20:f5:d3:ef:b8:cf:c2:bc:8f:0e:f7:14:b0:
                    37:30:d0:42:71:a9:c1:40:c7:59:d8:bd:f3:a5:b4:
                    11:e3:d9:1e:32:7e:db:77:7f:3e:47:87:87:8e:36:
                    09:85:8a:fc:4d:47:76:3f:40:35:e4:1c:83:a4:3c:
                    eb:f6:4b:7b:9a:27:a9:1e:5f:ad:e4:c9:a6:3c:de:
                    ad:70:5f:18:95:d6:41:c9:c8:fb:c2:08:84:ea:89:
                    98:8e:a6:ac:8e:87:eb:e4:b7:e4:b7:fd:7c:a6:77:
                    a6:5a:40:aa:bc:69:a2:61:22:96:c0:94:38:96:2f:
                    a7:78:e0:eb:58:1b:b1:44:77:2c:d0:04:ea:49:c7:
                    7d:3e:aa:2e:2a:bc:21:11:7d:0f:bb:a3:a5:c7:83:
                    56:c2:2c:0e:5a:f8:c8:ac:f6:43:70:82:4e:fe:24:
                    ce:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3E:22:55:4D:5E:A1:97:44:C4:E0:CC:09:28:C3:A2:F2:93:AF:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ece8b14-9cd6-332c-8c7d-419986246fd4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.74.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:7f:8c:59:df:71:7f:30:63:9d:89:0a:0a:d6:60:52:40:b0:
         92:91:73:b7:c6:61:85:50:81:2d:65:02:79:af:f3:e0:c8:cd:
         8a:6e:ca:ff:e5:6a:75:47:da:b0:5a:08:51:b2:fc:04:39:6d:
         a4:3c:ef:4c:0e:eb:76:3f:46:e2:ff:64:75:bd:f2:6c:f4:1f:
         7d:a2:2b:65:11:99:61:67:db:51:00:a4:e1:2f:ef:5d:7c:aa:
         8d:17:25:b8:8d:52:a5:77:fc:7f:eb:e9:9d:e3:fb:e5:92:e9:
         0e:fd:17:d4:c2:0e:ea:96:75:34:c0:cf:52:81:e7:17:af:4a:
         ff:43:a8:9c:1d:3f:9a:41:e5:fa:98:0b:0e:30:de:95:1f:2a:
         bd:f7:ea:c0:71:75:46:c4:3c:c7:c0:2c:98:38:5e:8e:6a:64:
         02:4e:97:1a:15:c2:78:08:3f:57:3d:1b:4e:2b:51:f0:0f:22:
         6c:27:be:e8:b5:65:55:5d:e5:6e:6f:0d:bd:15:be:61:f2:0d:
         77:0b:13:6c:a0:41:72:80:11:bf:39:62:19:b3:0b:5b:43:58:
         89:65:83:bc:9a:f3:14:3c:93:85:e5:c0:21:5a:5f:f5:42:bf:
         0b:c9:43:72:be:f0:b9:b0:4d:13:d5:eb:ce:e9:84:81:0a:59:
         5c:9b:19:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:29:23 2026 by rpki-client