Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b58a5ed-4e6b-3261-a290-de3d33a3fe30.roa
File:                     5b58a5ed-4e6b-3261-a290-de3d33a3fe30.roa (raw, json)
Hash identifier:          K/QtoKjDx20tyjzmX/9pnlODrznX+cRGlGkJOsy/9B8=
Subject key identifier:   0D:A0:6A:23:DA:69:7F:79:39:5F:70:BF:BF:2B:45:D0:25:12:6C:25
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CCE720A52FCF58BB94C2C1400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b58a5ed-4e6b-3261-a290-de3d33a3fe30.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     20940
IP address blocks:        23.34.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:72:0a:52:fc:f5:8b:b9:4c:2c:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=044bdfff-e3a2-4a5d-8827-ec7eabb7f6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cc:c1:68:a9:60:a5:3b:38:50:98:4f:dc:65:
                    44:8f:ef:7c:8e:ce:5c:6e:2b:51:5b:99:22:3e:e6:
                    d1:c0:0c:ac:04:38:ca:29:d3:a4:fb:f6:e4:9e:2a:
                    d2:c6:1b:cf:84:42:0e:14:de:da:62:1c:02:0a:25:
                    8f:66:b0:48:79:67:43:78:eb:d6:39:f3:72:d2:5f:
                    d2:dd:57:d9:ef:2d:a0:77:76:28:94:d7:f6:51:a3:
                    23:9d:63:68:74:90:74:7b:bc:8d:6e:67:c5:e5:ba:
                    18:9d:3b:5a:25:20:89:26:28:e5:4a:ee:a4:9a:a1:
                    22:d6:71:ec:d2:ec:f5:00:bd:c2:16:93:d5:12:3e:
                    29:0e:7d:67:0f:92:57:97:ab:1e:da:dd:c2:eb:e0:
                    65:cc:a0:bc:50:3e:02:d6:91:d4:e7:31:05:9b:c9:
                    92:69:bc:68:fd:fc:7c:00:70:0c:7a:0f:e2:20:e3:
                    7a:bc:ca:7d:1c:df:24:02:f9:80:cc:e3:64:60:72:
                    db:97:04:46:d6:ec:9f:31:0b:2e:13:49:4d:c1:9f:
                    1a:4f:e7:1c:db:91:df:cc:44:92:b0:0a:ce:38:4c:
                    52:ad:cc:1f:9f:2a:d3:e4:4e:c1:51:49:97:1a:30:
                    27:5a:5e:8b:10:82:28:f9:4a:b4:1d:5d:e7:be:35:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:A0:6A:23:DA:69:7F:79:39:5F:70:BF:BF:2B:45:D0:25:12:6C:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5b58a5ed-4e6b-3261-a290-de3d33a3fe30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.34.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:bc:6c:ea:8e:30:5c:6a:11:cf:22:01:10:42:47:38:1b:53:
         18:4f:d2:1c:4c:1c:4c:63:6a:93:e0:49:f0:c8:69:e9:c6:d8:
         51:03:5b:ba:08:02:4e:da:b4:e5:6a:a6:d8:23:04:b1:12:88:
         98:4f:8e:d0:6f:60:da:48:1c:74:06:95:9a:15:9f:d7:62:0a:
         af:fd:4c:73:f9:fb:9d:6b:9d:1a:d2:3a:09:ba:25:7d:11:7c:
         64:ad:61:fc:6a:15:46:4d:2e:a5:00:1b:f8:d8:6f:4d:cf:e4:
         b2:89:5e:ef:35:21:85:1a:62:f7:04:ef:be:be:a3:d4:7c:67:
         58:24:1b:50:7f:86:a5:61:2d:38:3a:34:fe:76:dd:c7:ea:bd:
         de:38:d7:b7:be:a3:c8:38:c0:34:8d:78:ed:8e:05:de:69:86:
         f6:59:a2:93:6a:8c:1c:8e:39:4a:ab:2b:08:c4:cf:15:e2:05:
         7f:bb:e7:7c:af:97:31:87:25:7f:bd:de:e9:8d:64:eb:9f:c0:
         6e:50:79:ef:bf:10:f8:4c:1b:5c:b4:9b:23:71:0e:e2:b8:37:
         97:0f:41:d5:4f:13:50:8a:2e:87:9b:5e:dc:ee:04:e5:73:df:
         62:18:81:9b:b8:5d:7c:87:92:f2:05:c8:f9:57:57:ba:68:8f:
         bd:25:a4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:19:32 2026 by rpki-client