Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b55cbfd3-d9bb-3908-a8c8-9b7c682edf3a.roa
File:                     b55cbfd3-d9bb-3908-a8c8-9b7c682edf3a.roa (raw, json)
Hash identifier:          9E8VR8JtFAsX8yH7mwotq3+/8+dWLLQY1mLwcPM8TnA=
Subject key identifier:   E7:0D:A5:25:42:5B:64:6F:6C:A9:07:93:ED:66:52:25:C9:4E:17:31
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D75D5495F27D9FB80A9381340
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b55cbfd3-d9bb-3908-a8c8-9b7c682edf3a.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     20940
IP address blocks:        23.67.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:49:5f:27:d9:fb:80:a9:38:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=8e8d74aa-f629-4515-8cfa-515c8938d11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:fc:d1:4e:93:04:3a:cf:59:a4:dc:df:63:
                    2e:59:eb:32:5f:48:90:ee:82:b1:76:50:20:f9:5d:
                    bf:3d:43:c1:7b:62:39:97:13:0d:3e:10:57:02:8a:
                    29:c9:db:e9:70:e3:c1:e7:92:ff:77:fa:3b:b1:62:
                    b3:8e:3d:37:95:7f:5f:03:d9:4a:d4:59:d8:32:4a:
                    b7:43:fa:1f:bf:52:78:26:8d:74:1e:e6:63:db:e2:
                    11:d2:76:4b:dd:96:11:9f:be:ec:0b:11:17:d9:a3:
                    66:0d:32:71:dc:bf:5c:9b:a9:88:ed:86:b3:6c:4b:
                    43:dd:6a:7a:5d:aa:64:de:29:03:3a:9e:fc:4d:5c:
                    a5:56:10:e4:ea:a4:26:84:cb:4f:64:ed:07:08:42:
                    50:aa:00:c4:54:d1:fc:9c:44:40:5b:22:26:76:bf:
                    ff:3d:7e:de:f7:8e:4c:ed:d3:b4:66:5f:c2:a8:09:
                    6a:8e:b7:26:35:bb:11:bc:d4:71:9f:27:bd:f0:40:
                    c8:81:f2:69:e4:18:b8:34:e3:47:5c:b3:38:c4:a2:
                    f9:2b:97:a4:f6:01:85:0c:73:f3:72:5d:8a:b2:07:
                    ff:9f:eb:49:d6:25:7b:ae:5d:7d:d4:59:94:b6:c7:
                    d3:45:a2:a3:27:37:d3:45:9a:d9:2a:16:fe:cc:d3:
                    ac:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0D:A5:25:42:5B:64:6F:6C:A9:07:93:ED:66:52:25:C9:4E:17:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b55cbfd3-d9bb-3908-a8c8-9b7c682edf3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.67.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:7e:a5:cc:32:68:f5:1e:9c:98:30:28:99:42:37:c9:40:00:
         4c:6f:d4:4f:51:7f:94:78:a8:57:83:36:97:71:4e:ba:9b:1b:
         a6:d3:60:3f:61:db:7a:f7:c5:12:15:33:35:fc:27:a4:a9:c6:
         fd:55:35:42:e0:53:4c:73:9f:b1:c6:ac:16:3b:f2:b3:62:79:
         a8:1c:fc:fc:64:21:1f:86:06:68:c9:33:18:d7:b5:a0:c0:18:
         ca:11:fb:85:e1:18:95:88:e8:30:32:c0:6a:03:ea:0d:fe:f2:
         66:66:a1:b7:34:c2:a8:c4:47:15:9e:95:d8:8c:5c:68:68:9c:
         07:4b:54:1f:5b:9c:dd:c3:dd:6c:7f:dd:82:5c:6b:c2:0c:bc:
         3a:13:ac:11:16:b9:03:07:b2:8c:88:73:5a:78:91:f8:cf:09:
         1c:16:07:2e:0a:06:90:1c:3e:14:92:3a:91:5f:79:74:73:cd:
         35:14:1d:e9:a3:87:dc:75:ec:63:0f:9a:8c:c9:dc:51:2a:5e:
         96:68:a3:5b:ff:d1:60:bb:6c:d3:fd:d9:07:79:55:14:aa:0c:
         7c:71:21:98:c8:7b:21:d1:e5:6f:d2:56:35:21:95:ca:ea:14:
         3c:94:f9:36:82:f5:90:ca:27:d8:e8:78:9e:0b:34:b1:8c:95:
         46:c2:69:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:15:12 2026 by rpki-client