Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/abbd0695-b67a-33fa-b089-4258e5302de8.roa
File:                     abbd0695-b67a-33fa-b089-4258e5302de8.roa (raw, json)
Hash identifier:          aS6017L2fYPjCfPQ0JHJh1iP3F8DJ26nxn/IzHPcaFs=
Subject key identifier:   95:D7:83:04:9F:21:26:6C:36:B6:3C:40:30:D7:58:6F:B2:8E:87:5C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584CDF327D989368A71B66FF6700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/abbd0695-b67a-33fa-b089-4258e5302de8.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        23.47.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:7d:98:93:68:a7:1b:66:ff:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=0025113e-5aaa-4949-bbdb-b9022190b9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e9:9f:2f:02:09:21:cf:29:42:7d:8c:13:ac:
                    e8:ab:12:68:f5:56:41:d2:d7:a9:c0:27:0f:c5:8e:
                    5a:73:82:9e:97:9e:85:2a:78:67:cc:4b:28:fc:35:
                    7c:ee:d6:8e:3c:c3:e9:0e:42:df:e2:61:df:fe:54:
                    42:6e:ec:65:69:c2:19:55:d6:fa:84:44:98:49:f0:
                    d9:82:03:53:26:16:21:85:7a:71:a5:6c:37:01:68:
                    a0:57:30:5b:86:d2:ff:23:c9:3f:00:4f:92:df:70:
                    94:da:94:be:25:e4:0e:77:2d:9d:cc:17:8b:ef:37:
                    22:d6:56:1d:a3:0b:3e:ef:cc:a4:48:ab:8d:50:8e:
                    c9:ef:78:a0:84:e2:6f:33:ee:61:8b:71:c8:fb:86:
                    5e:50:2f:d8:6d:9b:67:6d:20:fa:a7:ff:17:d7:c8:
                    3b:52:cd:79:3e:3a:8c:af:5f:0e:67:b0:3e:6f:bd:
                    69:be:fb:a9:59:ec:56:e9:a9:34:e1:35:dc:4f:aa:
                    9e:ca:4e:3c:7e:67:55:d5:b9:0e:4c:70:5e:c3:e4:
                    35:23:bc:a1:f5:33:a5:e2:d5:7d:22:60:86:32:27:
                    80:5b:8f:f2:26:01:b1:6e:c0:b8:74:76:3b:18:34:
                    6e:b8:fd:8d:de:2e:8a:1d:7c:95:a6:4e:0d:c9:1d:
                    2e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D7:83:04:9F:21:26:6C:36:B6:3C:40:30:D7:58:6F:B2:8E:87:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/abbd0695-b67a-33fa-b089-4258e5302de8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:dd:89:37:31:ab:1e:1a:05:d3:7b:dc:a3:3d:4e:de:84:72:
         9d:2c:a9:47:ad:81:7d:5f:72:32:bb:1b:71:7e:36:43:c7:cb:
         49:c0:b8:2c:94:9d:30:d2:b8:92:b1:80:72:8c:ad:81:e1:43:
         e5:2c:be:52:4e:1d:a7:5f:96:88:16:55:fd:93:3a:d6:a6:22:
         53:3d:b0:b7:16:b1:ea:b9:a7:1f:97:8d:0a:92:6e:20:f3:3b:
         c3:1c:29:a9:38:b2:0b:ed:27:f9:8c:44:f6:7d:9d:6d:b4:fe:
         21:f5:33:aa:ee:8d:1c:ea:e7:c2:3c:8f:4b:9c:b5:41:37:e1:
         37:5d:f4:02:ce:f4:0f:8c:b8:80:65:b7:9b:43:18:3d:76:aa:
         9e:cf:f4:ab:16:5b:41:7e:5e:8d:82:da:5d:eb:92:14:49:4a:
         c4:27:4d:d0:e2:66:14:39:59:2b:e5:96:09:7e:f6:a0:96:83:
         94:03:51:f1:56:e5:0e:13:f0:6a:e9:a8:20:23:d4:68:a2:de:
         08:d5:9e:71:51:f0:5b:a3:50:ff:bf:45:58:31:78:ad:cf:bf:
         7a:20:58:58:ee:d4:00:62:23:38:9c:2c:9b:31:70:cd:c0:5f:
         4e:d6:17:fd:db:4f:9d:0b:ae:1d:bd:99:44:be:bf:f7:3a:8e:
         e9:c9:cb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:33:16 2026 by rpki-client