Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f5d36fd-c5f8-3599-9293-76fea56cd54f.roa
File:                     9f5d36fd-c5f8-3599-9293-76fea56cd54f.roa (raw, json)
Hash identifier:          u7bWaS7+ChRu0l79PI1BLjWEswZ+ZKHlvSosdGsZRkA=
Subject key identifier:   C0:9D:4A:62:E6:F3:81:84:16:34:DA:BC:CE:1D:3E:EC:BD:A5:6E:C4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D71A511C2F67199114177ED00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f5d36fd-c5f8-3599-9293-76fea56cd54f.roa
Signing time:             Thu 09 Apr 2026 01:00:23 +0000
ROA not before:           Thu 09 Apr 2026 01:00:23 +0000
ROA not after:            Wed 08 Jul 2026 01:00:23 +0000
asID:                     35994
IP address blocks:        23.67.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:71:a5:11:c2:f6:71:99:11:41:77:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr  9 01:00:23 2026 GMT
            Not After : Jul  8 01:00:23 2026 GMT
        Subject: CN=dbf9e9de-637e-4483-acb1-bfde5980f42e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:7f:6d:10:ee:c1:fe:eb:c8:cc:f6:7d:7a:
                    50:ad:a4:0f:e2:e2:46:10:03:a2:01:98:b6:76:2f:
                    d0:e8:f7:39:f4:db:70:33:1f:33:58:d1:27:3f:97:
                    1b:3b:2e:33:35:5b:15:67:50:95:2b:a9:b2:d0:65:
                    22:4b:26:2c:00:02:da:ce:4c:01:86:f5:99:59:e4:
                    99:e5:89:ce:dd:83:4f:20:19:29:7c:72:0c:73:13:
                    12:5e:0c:31:30:0e:9a:45:2f:bc:5e:14:76:12:3d:
                    51:7d:05:4c:5b:df:e6:43:6b:89:4f:2a:50:e5:0e:
                    4b:88:b6:d8:44:d1:4c:0f:ee:c3:5c:91:04:4a:9e:
                    64:db:1d:10:06:58:dd:65:3a:1d:04:89:f1:77:5f:
                    8e:a4:70:d4:f0:90:4c:64:84:01:50:b9:13:e0:2e:
                    00:63:d5:5f:56:84:a5:33:a4:85:fb:34:b0:5e:6d:
                    09:65:4f:cf:b7:c6:c1:53:de:3b:df:a5:10:77:b0:
                    29:51:ee:48:66:9e:c3:e3:97:ff:24:09:a8:69:45:
                    55:3d:ba:39:ee:da:ef:9b:ef:1c:10:80:65:2e:5f:
                    62:91:44:cd:99:19:2d:3d:c8:8f:39:c9:b7:f4:58:
                    54:ea:33:42:5c:91:52:a1:0b:79:6f:bb:d5:c3:e1:
                    c4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:9D:4A:62:E6:F3:81:84:16:34:DA:BC:CE:1D:3E:EC:BD:A5:6E:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9f5d36fd-c5f8-3599-9293-76fea56cd54f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.67.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:7a:00:80:e3:fc:08:87:6e:2f:65:1b:95:88:71:cf:ce:0e:
         c9:8e:95:67:5e:2a:ef:74:e5:76:47:89:2f:2e:5c:0a:b4:09:
         e3:33:40:53:69:4f:88:60:94:4f:84:c5:c8:47:e4:2f:fb:6c:
         d8:e8:c8:b4:dd:68:a2:5c:7a:f0:ac:82:07:cf:55:76:ef:a1:
         4f:2f:42:04:de:f7:41:2c:e2:bf:e9:d1:a7:b7:33:7b:da:9d:
         8b:4f:ab:19:b0:77:9c:31:7d:ea:ce:30:4a:b3:39:7a:7c:11:
         7f:42:71:11:8e:f6:10:83:0f:51:1f:03:7d:53:a7:0c:cd:dc:
         7b:a1:fc:72:c3:ca:d8:92:e5:4b:81:59:76:7e:88:2f:96:ca:
         97:21:bb:30:c7:f9:8f:2b:d2:1e:96:b1:42:7c:04:8f:d6:5c:
         3d:58:24:da:22:bf:7d:a6:03:2c:dc:e2:6a:40:b7:3d:74:b2:
         98:49:e4:08:11:95:bb:5e:d4:f4:af:2c:76:a6:46:db:ae:1b:
         98:d4:ab:a2:55:17:61:56:f4:44:0b:da:79:94:67:98:c0:b7:
         4d:0c:7c:00:d4:21:5a:4f:f0:4d:13:cc:fe:46:40:43:0b:1f:
         74:a0:29:a4:82:65:3a:bc:29:01:05:62:02:73:53:cf:57:a6:
         9d:5f:a2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:00 2026 by rpki-client