Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ac3d631-71c2-34a9-895a-d8bdb33ad037.roa
File:                     2ac3d631-71c2-34a9-895a-d8bdb33ad037.roa (raw, json)
Hash identifier:          1YtAT5fOCAIXWD1nAK7y4LllxlTY76iXGHV1vP37x1E=
Subject key identifier:   42:A1:FE:B1:B3:B3:9F:10:04:16:10:1F:41:B1:15:F4:87:E2:C6:1E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA4451B545C363350B03524C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ac3d631-71c2-34a9-895a-d8bdb33ad037.roa
Signing time:             Mon 27 Jul 2026 21:00:11 +0000
ROA not before:           Mon 27 Jul 2026 21:00:11 +0000
ROA not after:            Sun 25 Oct 2026 21:00:11 +0000
asID:                     20940
IP address blocks:        23.50.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a4:45:1b:54:5c:36:33:50:b0:35:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 27 21:00:11 2026 GMT
            Not After : Oct 25 21:00:11 2026 GMT
        Subject: CN=e1890cf9-33b0-4237-9d7a-82946e1c28e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:75:f6:58:a5:a1:d5:6a:da:bd:ff:66:97:bb:
                    07:cd:3c:a1:fe:33:20:84:5e:15:60:79:17:e1:69:
                    53:e6:6c:8a:97:51:dd:5f:37:12:14:04:28:89:77:
                    97:66:61:00:d0:18:d8:e4:6c:86:f0:93:3d:8c:71:
                    5e:41:b3:46:ea:49:45:51:13:70:51:97:24:13:2c:
                    6c:b7:8a:aa:bd:36:25:79:cf:d6:8d:59:66:4c:bf:
                    38:58:01:8c:03:2d:da:85:9c:d0:5d:62:e2:8d:f7:
                    71:5b:46:cb:b9:7f:56:e4:11:dd:b2:40:50:0c:e4:
                    81:c4:90:a1:ee:77:28:7e:ce:3c:2e:29:90:52:df:
                    96:27:90:44:75:cf:71:63:91:eb:b4:75:b3:b5:98:
                    77:1c:bd:a0:07:0c:ff:47:08:c1:38:8c:06:01:d9:
                    b6:43:4c:af:6e:8b:c5:88:8d:5d:73:de:07:d0:59:
                    1a:5e:79:ac:08:2c:b4:6c:03:47:ee:0f:17:11:b9:
                    74:8a:e8:f6:b4:9c:cc:ce:6f:de:76:48:a8:04:e6:
                    c7:b8:d0:18:bb:8e:9a:bf:81:d6:ec:9c:80:d0:3c:
                    54:e7:e5:da:0f:51:dd:a5:14:d5:10:67:d7:c3:66:
                    7e:54:6e:8f:09:96:31:3c:b7:78:33:42:18:5f:55:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A1:FE:B1:B3:B3:9F:10:04:16:10:1F:41:B1:15:F4:87:E2:C6:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/2ac3d631-71c2-34a9-895a-d8bdb33ad037.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.50.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:8d:79:73:da:51:2f:6b:e9:89:e9:d0:68:ab:55:e9:79:45:
         27:b0:a2:5f:48:f6:78:81:1c:89:02:6f:79:2b:35:f9:82:85:
         5e:15:98:2c:c5:ef:f7:93:47:6d:f4:8b:96:4b:4c:61:2d:02:
         74:ea:92:b8:bd:1c:d6:38:13:95:c0:d9:78:ef:51:db:0d:29:
         75:5d:0e:78:53:5c:00:8a:f1:d8:d8:86:93:0b:50:d2:a8:3e:
         96:07:8a:e5:a5:e9:a3:6a:01:c9:c8:08:bd:88:2b:09:00:f4:
         37:d1:46:8a:13:20:ed:85:cc:77:1b:8a:cf:37:7d:61:1d:5b:
         53:1f:11:9a:bb:52:36:72:27:96:07:7f:ec:ac:18:83:fc:22:
         50:11:b8:55:75:bc:fd:a8:ad:8d:77:e0:64:2d:2a:c0:e1:de:
         33:9a:67:6f:cf:68:48:a1:2f:c8:5b:2a:78:64:3b:22:54:d2:
         97:75:2d:3f:dd:0c:97:ac:9d:01:0a:70:96:22:cc:74:d7:5c:
         fa:14:44:dd:59:71:66:54:dc:48:d5:4b:02:2e:35:1f:c8:b0:
         16:59:41:f8:b1:89:ce:ed:2f:c6:14:23:72:65:84:5e:57:92:
         a9:6a:4b:23:05:42:9c:29:7b:f5:07:c4:9c:40:70:5c:14:ab:
         9e:50:d0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:54:05 2026 by rpki-client