Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52aa194-2d2b-309b-bc55-d65b649e02ad.roa
File:                     e52aa194-2d2b-309b-bc55-d65b649e02ad.roa (raw, json)
Hash identifier:          Igs4MxVqXRUsLnNdfVFo7J0iLSjJ5sBSSg5rofzTLEQ=
Subject key identifier:   C0:B0:1A:F1:26:A5:67:89:91:22:C8:AB:52:7A:10:43:F0:B2:CC:BC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D869571C0C849306249616080
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52aa194-2d2b-309b-bc55-d65b649e02ad.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     20940
IP address blocks:        23.12.147.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:71:c0:c8:49:30:62:49:61:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=124ec0a7-7d30-4964-bfe9-35548e5f3e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ef:a0:fa:1e:39:a7:d5:cd:32:6d:13:88:20:
                    d8:b8:77:05:04:90:9c:b7:1c:bc:40:73:f6:5f:a4:
                    8b:43:d5:45:65:e3:57:1d:87:4f:07:04:74:1d:eb:
                    74:1e:fa:19:c1:5c:5a:f4:fe:35:5e:8e:59:7f:99:
                    7a:6a:f7:5c:2e:a1:c9:d9:e9:92:91:1c:48:b7:9e:
                    f0:44:86:85:08:aa:05:d8:ab:5f:61:ce:eb:5f:d6:
                    77:98:16:54:0d:8f:2a:43:97:02:24:56:1f:20:43:
                    e3:80:73:42:47:a3:c9:41:d6:91:6a:f4:6b:87:d4:
                    31:60:fc:b8:39:d6:9b:c4:94:4d:fd:5e:ec:1e:cd:
                    84:bc:c7:23:4f:b0:60:7a:e7:b9:02:46:c5:68:49:
                    a3:18:14:4d:0d:25:3f:0b:36:a7:14:b3:67:27:26:
                    a9:cf:2d:48:a5:f4:a3:a1:c8:f2:70:05:fb:60:10:
                    f2:07:45:51:8c:73:00:14:6b:27:aa:79:f5:47:83:
                    86:20:65:42:35:44:d4:92:6b:ba:05:9b:ac:11:b7:
                    86:41:06:31:39:c4:73:3d:74:35:e4:fa:9d:1f:a3:
                    5d:fa:85:50:8f:17:ff:e2:e9:1d:02:3c:25:8e:d0:
                    d7:55:1b:65:ef:b8:78:75:13:28:b9:a3:6e:0f:d2:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B0:1A:F1:26:A5:67:89:91:22:C8:AB:52:7A:10:43:F0:B2:CC:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e52aa194-2d2b-309b-bc55-d65b649e02ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.12.147.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:8c:19:e9:51:bb:9e:76:62:97:b2:86:ac:ad:00:b5:94:db:
         a5:15:e8:39:75:7d:46:5e:b8:c4:7c:96:53:71:24:6a:86:e7:
         47:d2:8a:65:92:75:80:22:eb:59:3a:da:72:d4:a0:d8:81:78:
         30:4d:5e:68:59:40:7a:10:a2:2f:53:56:35:0e:8d:ed:fe:16:
         9a:c3:c4:c3:9f:c2:35:cd:ce:e8:4e:2e:24:f8:8b:95:46:ea:
         3e:72:ff:13:71:32:c7:e1:f6:c2:7b:3b:10:c0:29:23:7d:e7:
         ae:68:79:ec:57:1a:af:dc:23:cb:d0:55:dc:60:56:1d:07:5f:
         c3:6a:27:c1:fd:28:05:a8:e9:ca:ba:1f:f2:4f:97:24:04:25:
         14:94:97:a8:ba:d8:3a:d2:f7:39:ca:a6:87:47:73:5c:1d:7b:
         76:26:63:7e:33:46:b3:df:8c:e1:13:0f:06:a6:eb:6d:3c:2a:
         50:a1:27:ad:c3:1b:45:2f:91:13:df:1c:9c:55:dc:9c:b9:79:
         75:7a:24:1c:a0:26:d5:56:82:50:3a:1a:7b:41:e3:37:77:8a:
         8f:25:a6:db:8a:9f:4c:38:06:57:87:27:6f:6e:57:a1:cd:10:
         4d:6a:b8:70:7c:5b:fa:5c:41:30:bb:cf:16:33:27:7b:09:71:
         db:d2:5a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:25:46 2026 by rpki-client