Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d55d0e03-852c-3b73-a877-60f9af0902c2.roa
File:                     d55d0e03-852c-3b73-a877-60f9af0902c2.roa (raw, json)
Hash identifier:          cDmDf6qcfgIB062T8x+3h0omsqnSzER2S1egh9pdDaI=
Subject key identifier:   BA:00:9F:87:88:17:E2:7D:DA:39:28:1D:B6:DC:4C:EE:C0:BE:7E:9A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D4F15A96807EAE4F6280A7D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d55d0e03-852c-3b73-a877-60f9af0902c2.roa
Signing time:             Fri 27 Mar 2026 15:54:05 +0000
ROA not before:           Fri 27 Mar 2026 15:54:05 +0000
ROA not after:            Thu 25 Jun 2026 15:54:05 +0000
asID:                     20940
IP address blocks:        23.45.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:4f:15:a9:68:07:ea:e4:f6:28:0a:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 27 15:54:05 2026 GMT
            Not After : Jun 25 15:54:05 2026 GMT
        Subject: CN=cf1c8dca-b344-4ceb-b0f1-03f02612eb6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:27:00:dc:3c:98:e0:60:b3:14:9d:b8:32:
                    1d:c6:fd:fe:c7:56:3d:c9:33:af:62:0c:e8:d0:0f:
                    e1:ea:24:3a:b2:53:96:f3:80:46:a0:52:6c:b8:89:
                    d7:c6:06:f1:d7:88:36:2f:d4:c0:fe:29:36:46:a2:
                    8d:7f:23:b5:a9:1d:4a:c4:18:51:07:01:56:fe:67:
                    42:72:94:3d:a2:68:ac:ff:04:9d:d7:91:78:2a:9d:
                    65:3e:5f:39:ce:50:0a:4d:3e:0e:ba:a3:8f:ec:0d:
                    11:09:80:8d:45:cf:26:91:2f:3b:dd:fc:4f:53:c7:
                    ae:ad:c1:53:2b:7b:bd:6a:57:1f:ab:a4:87:7c:c3:
                    b3:ae:f5:57:eb:6a:5d:4a:c5:5a:48:cc:59:8f:89:
                    5b:a3:cc:af:8e:6e:91:11:9d:8a:3d:61:90:57:80:
                    e9:af:76:54:b4:95:af:40:8d:f4:68:7e:df:fb:7e:
                    6f:9b:15:79:3e:1a:80:f4:fc:1f:36:96:d2:47:c9:
                    aa:fe:c1:98:83:ee:bc:94:e0:e5:41:49:d2:76:6d:
                    fb:f4:f0:28:7b:df:bb:fe:ae:85:18:a6:85:71:21:
                    a6:a5:2d:1c:ae:ad:6a:3a:31:28:fb:93:d0:f5:ed:
                    c7:ff:a0:b0:66:6c:f6:f2:54:53:df:b6:8d:59:3a:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:00:9F:87:88:17:E2:7D:DA:39:28:1D:B6:DC:4C:EE:C0:BE:7E:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d55d0e03-852c-3b73-a877-60f9af0902c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:77:43:cf:d9:ef:33:c9:12:e1:8d:1d:3c:49:f1:5e:24:10:
         f1:b0:91:51:7e:dd:49:42:06:01:b7:87:ba:93:ec:73:8c:49:
         43:82:8b:f0:70:d1:00:81:c0:f2:0e:89:ee:5f:06:94:79:7a:
         b7:0e:07:bc:40:75:e9:c5:4e:ef:ea:d1:83:5e:fa:a7:dc:a5:
         f3:d6:49:7e:c2:1d:17:40:30:e3:a7:e6:ef:6f:be:3a:6a:f6:
         f1:0f:c0:4c:56:79:5f:c0:8b:85:b2:db:c5:13:e6:16:a2:9c:
         7d:ce:b2:26:d7:21:d1:ca:29:75:ae:14:d4:fa:1c:0c:51:f4:
         d7:16:82:a7:50:d8:6e:8b:cc:d8:85:bc:1d:71:ba:f9:b5:68:
         b9:6c:6b:0b:d8:25:51:d9:b6:1f:a1:cf:3e:5a:e9:1e:9f:e7:
         79:a8:21:24:5a:68:95:67:10:03:1e:00:86:d7:6d:ac:7a:95:
         94:79:75:8d:99:36:52:c7:b8:df:a7:cb:f7:a5:f5:25:f7:9c:
         81:fb:fc:a7:4b:c4:ad:86:f1:69:07:ff:94:c7:5f:d0:01:7f:
         44:b2:9e:37:2b:fc:1d:ff:25:3f:70:ff:ea:96:ed:4e:c1:51:
         40:da:ce:64:55:92:0e:ac:96:88:98:44:1c:b8:0e:38:96:79:
         7e:e4:10:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:44:30 2026 by rpki-client