Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5faf6ba0-d89c-3ed3-85c6-eff039b68943.roa
File:                     5faf6ba0-d89c-3ed3-85c6-eff039b68943.roa (raw, json)
Hash identifier:          Hn9A2T+jl+3JDTrND8MIZ8ZqK0lT+kHOP4MsVCwYBBc=
Subject key identifier:   E4:5A:4C:9E:27:7D:C9:34:49:AE:A1:AB:E4:72:ED:33:20:59:B0:DA
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D60E4FF6C1220E897A4299A40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5faf6ba0-d89c-3ed3-85c6-eff039b68943.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     35994
IP address blocks:        23.212.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:ff:6c:12:20:e8:97:a4:29:9a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=56386938-2758-4ee0-9c62-1490475a2cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:cc:ad:cc:a1:7f:cc:e8:ea:11:7b:a8:ed:e5:
                    e9:6e:ed:0d:62:3f:eb:4b:81:5d:ac:40:df:84:a8:
                    fc:53:18:21:d2:5c:b3:86:74:a9:a9:67:b5:4c:10:
                    ef:c8:85:b5:37:df:97:21:21:79:89:38:d0:54:8a:
                    4a:c7:a8:c4:39:b8:30:06:ff:7e:ae:93:d3:2a:96:
                    fb:d2:ae:5f:4a:bc:0e:2c:f7:8a:0b:ff:48:7c:69:
                    c3:28:d7:fe:e9:fe:38:a5:03:90:2f:9c:68:6c:50:
                    2a:4c:33:ee:42:98:16:43:6a:0d:93:4e:49:52:8f:
                    b7:01:9d:c6:2c:55:29:90:0d:14:af:85:93:bd:e2:
                    7e:f0:ab:b6:08:52:15:d6:6d:9a:65:ff:16:84:1d:
                    78:13:09:ce:7e:12:69:21:78:29:58:d9:0d:ee:bb:
                    98:b9:49:de:94:1c:49:f0:77:47:2e:1a:11:53:05:
                    0b:ab:1b:6c:b1:d8:01:fd:1b:ed:2a:97:2b:80:8b:
                    31:32:be:07:55:19:1c:46:ec:27:d4:b0:03:4c:85:
                    7d:48:24:6c:4a:32:fd:19:c3:3f:6d:07:73:0a:78:
                    e2:b2:65:2a:01:1e:5b:18:55:e9:d9:93:c2:94:ec:
                    7f:d8:75:5e:c2:8d:2e:4b:db:0c:58:e5:86:cd:44:
                    f3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5A:4C:9E:27:7D:C9:34:49:AE:A1:AB:E4:72:ED:33:20:59:B0:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5faf6ba0-d89c-3ed3-85c6-eff039b68943.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:48:74:bb:73:69:f1:c6:3b:a2:98:de:e4:3a:a3:31:2d:c6:
         de:ef:d5:47:41:b6:69:23:27:17:bc:dd:df:07:cd:aa:b6:1f:
         00:56:9a:33:0e:f4:8a:7b:2d:d3:07:e4:87:af:8b:15:5e:5f:
         87:ae:74:fb:6f:d6:82:75:a3:d4:70:e8:fb:16:67:af:6b:b7:
         ca:c5:18:ab:8f:4d:51:30:20:b0:2f:66:1e:f5:5f:e3:14:9b:
         82:d8:93:b6:0f:72:b0:87:9b:99:fb:9c:bc:b6:d0:bf:48:68:
         d3:60:66:28:75:c4:2a:e0:a8:ba:79:46:2d:cd:e6:22:40:95:
         8a:da:9d:6e:86:f0:90:5e:0c:df:a0:c7:60:1d:b3:76:bb:b6:
         a7:aa:bf:cb:5b:89:df:21:61:f6:9b:0f:02:83:13:48:1a:a1:
         96:f4:17:25:24:b5:0e:7d:b7:fa:6b:9e:60:2a:22:af:93:d1:
         8d:77:3f:6b:bc:c1:f6:e1:5e:a6:ca:76:31:48:74:7d:5b:3e:
         af:d1:14:36:90:96:01:dc:f1:b8:63:e5:43:db:d4:6b:47:83:
         b0:18:9d:40:86:cf:e4:4e:e8:52:40:14:ec:5c:d6:83:62:4f:
         8f:bb:cc:6f:11:74:37:0e:15:4d:bf:85:1c:04:fa:89:58:66:
         f9:2e:99:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:59:10 2026 by rpki-client