Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b5c7ed0-f378-330d-831a-5912baf060c7.roa
File:                     7b5c7ed0-f378-330d-831a-5912baf060c7.roa (raw, json)
Hash identifier:          3g0aA1slVXzi0cdkCV6UEvCSvwoHrJqpSobFdrh+ai8=
Subject key identifier:   F3:43:6F:68:95:A0:13:21:D9:C0:B2:87:1E:5D:26:50:A6:EE:F2:43
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CC07CCCD0C52AC78C7F5B2280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b5c7ed0-f378-330d-831a-5912baf060c7.roa
Signing time:             Wed 04 Feb 2026 14:00:39 +0000
ROA not before:           Wed 04 Feb 2026 14:00:39 +0000
ROA not after:            Tue 05 May 2026 13:00:39 +0000
asID:                     20940
IP address blocks:        23.55.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:c0:7c:cc:d0:c5:2a:c7:8c:7f:5b:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb  4 14:00:39 2026 GMT
            Not After : May  5 13:00:39 2026 GMT
        Subject: CN=40793a8e-5ff9-4c39-9ef6-bb77b7938d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5d:c1:61:6a:d7:69:c1:2a:5c:bf:10:9a:d1:
                    0e:90:c1:d1:f2:cd:08:1b:38:8d:f2:86:74:5c:16:
                    a8:ec:8d:f3:f0:fa:0f:90:1b:a1:c4:4b:0d:28:61:
                    03:73:54:33:6b:3e:ba:ae:cf:b8:bd:d9:40:43:4e:
                    3a:10:45:c9:de:95:17:00:5d:77:87:a1:71:1a:c9:
                    72:0e:03:27:23:90:b6:0f:42:33:84:3e:56:fe:a8:
                    11:78:76:04:56:51:c4:b3:d8:55:fd:cb:f4:96:af:
                    81:63:12:70:64:d8:38:5e:4a:51:12:5f:a1:70:e0:
                    1b:57:00:7f:a2:2a:8e:84:03:fa:39:76:79:16:ee:
                    91:ea:21:92:fd:15:45:b2:57:7a:7c:5f:8d:8f:3f:
                    7a:3a:06:44:5c:58:a6:8e:98:2b:22:42:a7:50:61:
                    0d:d4:36:f6:95:ce:78:cb:31:8c:c4:fc:f4:16:3d:
                    fe:97:fe:01:b7:ac:0b:43:d8:e6:58:83:04:5a:8a:
                    6d:b7:78:32:2a:b5:82:cd:51:e3:38:90:8c:e0:5d:
                    e1:cf:32:b0:bd:7e:2a:0f:54:58:eb:75:48:07:6e:
                    b1:b4:ae:45:ae:19:05:7d:27:66:e0:b8:d0:c0:e2:
                    8a:ef:eb:76:74:a8:c1:68:76:13:f4:59:59:5c:7f:
                    9d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:43:6F:68:95:A0:13:21:D9:C0:B2:87:1E:5D:26:50:A6:EE:F2:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7b5c7ed0-f378-330d-831a-5912baf060c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:24:3f:80:b4:21:3a:e3:a7:7e:09:1b:44:a8:57:0f:e8:1c:
         eb:20:cc:e1:0a:77:e0:f4:55:91:16:b5:a7:c7:a0:14:07:f7:
         a4:0b:67:0e:43:8b:12:84:06:bf:0a:7f:7b:37:40:81:50:21:
         d2:75:f8:6a:52:b2:19:f9:c9:fe:dc:c7:2e:8f:da:a5:d5:29:
         dd:32:7b:23:28:6c:8c:4c:70:d1:d9:6e:82:3e:3b:13:cc:98:
         fb:20:39:e3:74:b7:4b:9c:a5:6b:ee:ec:4e:89:df:e7:0c:67:
         5f:6d:97:82:1e:13:08:2c:24:96:36:6b:2d:40:96:4b:46:d3:
         3f:55:5e:96:04:02:b5:83:e7:fa:88:ea:55:0d:a8:2b:e8:a7:
         db:e7:79:39:7f:4b:91:2f:20:5a:39:b7:36:72:6a:66:f0:13:
         c6:3c:6a:cb:75:1c:f7:bc:89:8b:d8:86:57:4f:5c:fe:cc:5d:
         0e:b0:7f:67:ce:ac:76:cd:64:67:19:84:7a:7e:ff:17:f5:47:
         bc:74:33:29:d2:d5:a6:89:10:d3:54:b9:b7:68:cf:7d:5e:99:
         10:9b:24:91:c2:e0:53:e1:65:c8:25:e1:e9:00:55:a2:8f:3c:
         0b:73:0f:99:2f:c3:f1:ca:cb:5d:3c:1f:a0:8a:7b:3d:99:0f:
         d6:ba:17:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:42 2026 by rpki-client