Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/73cd3858-a7e0-30a2-b87c-5818cb101461.roa
File:                     73cd3858-a7e0-30a2-b87c-5818cb101461.roa (raw, json)
Hash identifier:          cD/BoXhZ+MKcJ3YKH7QPCym3OyrH9GaHvh1D8T38epo=
Subject key identifier:   7D:77:4C:14:1A:F6:BC:36:64:59:E4:0C:74:10:0B:DB:BE:8C:01:AE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA0155381244B3B4003DD9400
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/73cd3858-a7e0-30a2-b87c-5818cb101461.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        23.47.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:53:81:24:4b:3b:40:03:dd:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=afe9c5d4-86e1-4c10-a7e1-4780770ae869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:60:bc:3b:ce:4a:7d:c0:25:a3:87:f4:1e:b7:
                    07:0c:d7:93:c0:e3:0d:bb:3c:d2:0c:52:4c:b5:d8:
                    42:bf:34:94:ba:35:72:22:c0:8f:24:b5:70:94:7c:
                    db:48:c3:15:d6:39:b3:9c:cd:93:dc:0b:10:2a:da:
                    d0:c3:1f:74:70:60:0e:30:a4:dd:ae:c3:93:68:53:
                    30:ca:d4:45:08:ed:09:b2:37:43:00:3e:1c:6a:2b:
                    a6:78:b3:82:3f:8a:19:95:52:6c:e4:7e:b6:d5:92:
                    41:1c:4f:30:f4:59:48:45:85:85:d2:c1:3e:bd:2f:
                    45:11:59:51:ef:93:1e:94:cd:50:80:fb:c2:4a:19:
                    88:3d:56:5f:bc:bb:51:a3:a9:cb:29:c9:5e:ad:32:
                    34:ae:36:60:3b:00:60:d6:1b:c1:3f:cf:77:68:50:
                    ed:52:96:fa:bc:44:dc:5d:39:6a:4b:27:41:cc:d7:
                    66:a6:fb:fa:52:cf:c5:ad:14:e7:9f:83:c6:56:a9:
                    f4:3b:c3:2d:70:6a:00:6d:b1:6a:cb:64:bf:05:38:
                    69:e8:1d:53:02:3f:21:c9:fd:c9:96:37:37:d8:59:
                    04:20:50:c4:e3:fb:b1:cd:20:7d:88:86:23:e5:40:
                    ce:74:92:f0:b3:65:31:40:21:a6:ab:dc:32:0f:cd:
                    2a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:77:4C:14:1A:F6:BC:36:64:59:E4:0C:74:10:0B:DB:BE:8C:01:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/73cd3858-a7e0-30a2-b87c-5818cb101461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:c5:af:96:6e:35:bd:fa:1e:9b:2a:93:ae:69:4a:46:c4:0f:
         97:c6:c2:b8:92:19:95:25:d6:de:26:01:15:e7:b8:df:94:2e:
         1d:3a:26:71:76:37:fe:87:73:f7:eb:6c:31:4b:b9:0a:67:fd:
         44:92:28:c3:6e:62:fb:0d:e8:93:a7:1f:4e:8c:05:21:cb:76:
         1a:42:d9:01:df:fe:39:48:bf:db:27:37:a5:c5:34:e3:f4:05:
         b2:f4:81:fd:af:af:39:ed:77:5a:e0:77:a3:a0:7e:02:8b:11:
         95:4d:74:a2:bd:aa:10:23:0a:29:d6:04:a3:a5:6d:97:7f:65:
         e5:45:bf:73:64:f9:7e:34:b4:27:d6:53:33:51:03:64:50:25:
         ae:a7:0d:8e:ec:41:23:80:fe:1e:75:eb:e5:c7:15:d8:df:6e:
         c8:ca:a4:c1:f3:48:be:17:fc:a9:87:40:4a:8e:6f:ee:af:50:
         e2:28:c7:57:15:d7:e1:77:b6:8a:73:11:88:59:b3:a2:5b:b2:
         33:5b:b7:e6:e1:91:61:af:cc:5e:9f:31:66:c3:b9:c6:f8:e8:
         73:4f:4b:fd:e2:ff:3a:d0:bd:32:0a:dd:36:b5:84:4b:27:72:
         82:ac:26:ec:74:49:33:69:d9:be:34:55:6c:e4:c2:ad:4c:4f:
         c6:df:b8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:39:36 2026 by rpki-client