Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35f945b3-d249-3efe-aea4-92b2615cf446.roa
File:                     35f945b3-d249-3efe-aea4-92b2615cf446.roa (raw, json)
Hash identifier:          bQMyyRxYiZ6lXsDHLh9mmqcrln2jWcwnbJQtojfPWNE=
Subject key identifier:   79:58:3A:DE:77:BC:0A:C4:DF:20:5C:5D:BE:15:87:0B:38:72:23:66
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA0155483BD17D588F1FEDC00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35f945b3-d249-3efe-aea4-92b2615cf446.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        23.48.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:54:83:bd:17:d5:88:f1:fe:dc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=d93f1acb-e244-4b5c-bffe-5335760b7d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e3:4b:7a:cb:f3:a3:05:93:59:bc:53:eb:97:
                    90:52:5b:76:4a:fa:19:d7:96:ec:d9:c5:f8:a4:b2:
                    dd:ca:d6:4c:ad:a8:db:93:2b:08:97:9f:75:67:41:
                    3c:81:81:30:f0:fb:2f:02:2f:96:70:ff:6d:0b:b0:
                    b0:94:b1:c9:09:a5:54:70:c0:d6:70:d6:2d:ff:cb:
                    1d:d6:17:25:a3:50:3a:71:ba:b8:28:59:b0:43:cf:
                    17:7d:60:07:50:a1:a9:50:29:ad:61:a6:6b:8e:6a:
                    66:8c:d8:9b:3f:35:bb:3e:3e:b4:a0:4c:88:e2:11:
                    88:9f:73:c9:51:78:77:fc:67:71:2f:0a:76:5b:b4:
                    7c:25:25:19:16:bf:31:da:47:a9:36:9c:12:46:7f:
                    7c:6d:79:4b:33:11:07:8a:5e:be:c2:2a:d8:ed:ff:
                    94:7e:bc:a1:bb:a6:60:02:ce:b4:92:30:49:5b:6d:
                    48:b4:15:06:49:e4:45:06:56:77:e1:91:cd:b8:d6:
                    17:8e:d6:0f:ea:12:10:31:8d:c0:47:94:e1:49:ba:
                    3d:50:75:63:db:dd:a8:83:38:87:d6:70:37:dc:9b:
                    7a:8c:e8:e8:5e:8a:bd:ec:ab:ae:a0:06:05:df:ea:
                    b3:f2:06:63:9b:4f:10:c4:68:eb:9e:ae:cc:50:4b:
                    10:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:58:3A:DE:77:BC:0A:C4:DF:20:5C:5D:BE:15:87:0B:38:72:23:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/35f945b3-d249-3efe-aea4-92b2615cf446.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f4:9f:f9:e4:1a:0a:10:03:44:87:5a:7a:56:66:7b:8a:56:
         68:7b:31:54:f8:1b:95:0c:cd:a1:89:04:65:4a:7d:a7:14:5b:
         d0:e8:7e:36:59:ba:41:71:a1:c7:0d:08:9f:73:43:12:20:04:
         54:fb:27:16:47:61:b1:4d:27:b6:6e:7a:6d:7b:b3:24:37:d7:
         48:91:ae:78:77:28:43:0c:a6:b4:17:c7:63:0e:8e:b6:a0:77:
         fe:3b:9e:01:25:ce:b3:da:0b:1b:37:58:4b:1e:d5:ac:92:6c:
         70:98:a0:c8:68:4e:9a:2e:68:dd:92:f5:35:d7:55:12:b0:83:
         6a:23:9c:7c:83:cd:d9:a6:ba:d4:89:18:ea:e3:57:a1:f6:b4:
         77:d9:31:b8:ab:43:f9:7f:d1:2e:41:cb:ce:35:9e:cb:dd:01:
         39:5a:48:76:1b:c0:f7:25:47:b9:5b:2f:0a:5b:19:43:17:8c:
         86:44:fd:36:34:c1:0f:ac:5f:e5:89:3c:67:db:6b:07:4e:6d:
         7e:d9:bf:37:8d:b9:79:90:2a:a8:58:2b:17:99:a4:94:ad:ab:
         cd:4e:42:e4:65:23:54:fb:8e:eb:ce:d5:01:0f:cd:60:73:1d:
         0c:61:7d:74:3b:dc:84:cd:7a:1d:d3:a5:1c:f5:30:79:8d:78:
         11:94:1d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:32 2026 by rpki-client