Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890df6bd-b24b-34af-aeb4-0c3a30601a5e.roa
File:                     890df6bd-b24b-34af-aeb4-0c3a30601a5e.roa (raw, json)
Hash identifier:          UUz0fMb1ixbWpGEqKSJe9Iidp//CO+n88CKZil061eY=
Subject key identifier:   1A:62:38:CC:A8:65:CB:FA:B6:91:F7:E3:E0:7F:18:DD:8D:3A:D6:86
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D810051D716E34A3CA7D278A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890df6bd-b24b-34af-aeb4-0c3a30601a5e.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     3786
IP address blocks:        23.74.16.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:51:d7:16:e3:4a:3c:a7:d2:78:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=7a5fe780-d69a-4e92-99b0-2b68c594b21b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:0b:0d:0c:5c:c3:d8:63:8e:c8:08:7f:5d:8a:
                    61:dc:8b:3f:03:5d:6c:11:9a:a2:81:5c:ac:46:39:
                    7d:f9:eb:53:9e:b9:a8:e6:ce:dd:1f:1f:bc:b5:69:
                    68:ab:0e:aa:f8:36:b9:8b:2c:8c:89:21:95:fa:da:
                    e4:fc:6b:17:bd:76:7f:94:98:6f:0d:66:e9:c6:30:
                    bd:b6:bc:9a:a3:58:9a:25:d5:c9:05:b6:66:71:e1:
                    47:67:f6:33:79:37:a0:7d:68:07:64:79:34:4b:40:
                    c1:58:6b:e1:e2:2f:c4:a7:34:02:6b:be:24:5a:75:
                    3e:51:f5:a6:bf:68:c6:6f:a7:fe:0c:a8:d5:be:e8:
                    cb:13:ba:27:15:c9:8f:e1:dc:cd:8c:be:6f:53:8c:
                    64:bb:f1:19:5d:49:12:cc:6b:b4:f0:d2:c0:4a:9d:
                    d5:ce:c5:1b:22:d7:22:e6:87:fd:88:20:50:51:a2:
                    43:77:c7:74:57:96:28:03:cb:15:30:5d:cb:ef:0e:
                    73:36:84:92:76:71:e1:02:a6:42:d1:58:e6:99:39:
                    11:6a:d5:d1:68:f1:98:9b:a4:d7:89:61:3e:1c:07:
                    40:0e:e7:c7:c2:ed:0b:33:6d:d1:d4:08:66:3c:58:
                    f9:53:fb:03:db:da:32:0b:dc:14:06:79:ba:74:aa:
                    bc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:62:38:CC:A8:65:CB:FA:B6:91:F7:E3:E0:7F:18:DD:8D:3A:D6:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/890df6bd-b24b-34af-aeb4-0c3a30601a5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.74.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:a3:4c:ae:3d:1d:99:b9:a7:a3:8a:02:02:1e:1c:b8:ec:b1:
         8b:30:de:cc:03:87:09:76:26:5e:1a:10:a2:be:ac:8d:6a:68:
         ce:07:88:e6:3b:d7:d6:d0:d5:20:9b:b3:e1:2f:ae:4a:c4:04:
         13:cf:73:11:f5:20:0a:e3:73:70:39:6d:1e:be:dc:98:15:0b:
         e0:0e:72:b8:4e:39:5e:87:68:6e:62:c6:c7:82:17:a5:89:23:
         d9:a2:10:ff:18:b0:19:8d:a2:78:37:9e:13:bd:4a:e5:c0:d3:
         a3:14:5a:a8:1f:45:9f:02:65:40:bd:96:85:96:a8:8e:a1:ff:
         18:04:42:26:e1:98:5a:ec:2c:3c:1d:10:4f:2e:e7:6f:01:ae:
         fc:eb:b1:56:ac:65:92:b4:4d:1b:0a:a2:5b:3d:1a:f6:08:b7:
         ef:03:d7:0d:bc:e7:a0:fb:ab:a2:1f:2f:40:b1:9d:ed:af:82:
         7c:01:08:da:06:bf:0c:99:92:7a:94:2b:ca:7e:58:6c:df:91:
         3e:14:53:98:25:1b:89:53:a6:a5:bd:e9:14:42:07:0f:3d:fb:
         04:8b:f1:c6:80:1e:52:df:05:54:17:50:29:96:8a:3b:69:17:
         83:e8:db:07:41:88:b2:96:0a:08:07:ad:fc:74:a7:14:db:9c:
         0a:ee:cd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:14 2026 by rpki-client