Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7ce44da-c70a-3af3-b63f-098bed79953e.roa
File:                     a7ce44da-c70a-3af3-b63f-098bed79953e.roa (raw, json)
Hash identifier:          oOycKTLhXQRK8DBOHBmhJGa77tifYGD0hGz3Af9HU9c=
Subject key identifier:   CA:5C:BE:9F:BD:BE:B5:0E:36:45:B6:89:6D:A3:41:20:B5:0F:CF:4E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D75D54953C7A6788799AA8380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7ce44da-c70a-3af3-b63f-098bed79953e.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     20940
IP address blocks:        23.67.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:49:53:c7:a6:78:87:99:aa:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=e92ff417-1217-44ad-9509-4f98ea9c3d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:c8:40:17:3a:7f:57:af:3a:a9:04:e6:77:
                    b3:25:86:e3:a9:77:ce:ae:35:9e:f8:29:d9:41:33:
                    d5:8d:82:c1:7c:96:db:05:7d:4b:ae:79:9b:65:11:
                    2c:c1:bc:c4:74:3f:11:35:db:58:c7:ff:8f:9c:fe:
                    1f:38:61:a3:b0:ad:3d:55:a2:89:63:00:88:37:83:
                    ff:f6:a2:f6:e3:42:e9:03:60:79:cb:85:c7:55:03:
                    d0:ed:f5:59:1b:50:64:b2:f2:af:6c:11:40:92:36:
                    8f:5c:ef:12:18:0b:3d:ab:fd:07:0c:ca:27:33:09:
                    a5:16:8b:3a:91:2b:86:e1:8b:bb:5e:8c:bf:a8:e9:
                    86:2c:6d:34:9f:71:22:34:66:ed:6a:e9:24:de:f7:
                    cf:bd:aa:69:dc:40:68:ee:fd:74:18:ff:49:f8:da:
                    df:df:40:bf:70:4a:c1:5e:aa:d1:85:7d:80:f3:09:
                    49:cc:7c:e7:55:ab:94:fc:92:6c:ce:21:9e:a1:ad:
                    2f:64:b0:e2:b9:43:21:24:ae:9a:d9:d4:90:2c:3b:
                    25:38:22:26:32:e6:f2:7f:46:63:cb:6a:45:12:78:
                    7a:ee:fe:7e:92:62:65:f1:09:f3:a3:8d:3f:e3:d1:
                    52:90:30:29:1e:75:39:b5:6b:f0:bb:c3:67:32:49:
                    17:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:5C:BE:9F:BD:BE:B5:0E:36:45:B6:89:6D:A3:41:20:B5:0F:CF:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a7ce44da-c70a-3af3-b63f-098bed79953e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.67.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:35:5f:e1:7f:a8:19:b3:a2:f2:3b:ae:03:53:a2:31:81:f8:
         26:4a:77:34:b3:da:f6:de:61:45:fa:ba:43:6b:9c:65:4c:9e:
         b8:e8:9d:30:13:fa:0a:9e:fa:51:cc:c0:2f:63:dd:0b:62:29:
         81:ea:a5:6b:1c:00:6e:43:41:6d:7a:6f:20:c0:29:41:87:c1:
         65:f5:b7:29:d0:9f:ba:c3:82:9b:2f:e2:a1:7f:52:4e:00:8e:
         ba:25:2b:48:6e:6f:1a:e3:7f:eb:b7:da:2e:f8:ff:68:a4:6b:
         ba:c9:37:0d:b5:4a:2f:0c:0e:b1:59:bd:7c:73:6a:db:14:2d:
         07:fe:7a:9b:80:1c:2f:18:3d:96:59:f9:a1:26:cf:00:91:07:
         e8:8a:0f:22:a6:ba:74:7c:44:ae:83:b9:8b:e6:1a:63:06:69:
         08:f3:09:30:38:46:5b:eb:ed:01:78:a1:62:4d:be:2e:c1:74:
         d2:8d:56:8a:63:45:2f:0b:b2:11:a4:ab:ca:11:55:57:ae:f1:
         9d:f7:24:56:25:91:43:1d:55:4a:9d:fe:50:68:5e:83:b1:01:
         b1:46:22:a3:bd:b0:63:4d:70:25:ec:8c:f8:46:d0:48:d5:ff:
         0d:da:6e:c6:49:d1:b2:64:ce:16:78:d1:e4:75:97:84:bd:9f:
         87:f7:19:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:44:12 2026 by rpki-client