Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7757984-5180-3738-8ed5-e123aedb50b9.roa
File:                     e7757984-5180-3738-8ed5-e123aedb50b9.roa (raw, json)
Hash identifier:          d8q5WOq8GgsfObOnK3YS3jsyYpyZhdXaC9ngZNddYuU=
Subject key identifier:   80:25:0A:AD:40:F5:C6:4A:1F:BD:C6:0F:28:D9:AC:A8:97:D2:35:F1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D7F9A921593E956F0A6772880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7757984-5180-3738-8ed5-e123aedb50b9.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     7713
IP address blocks:        23.38.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:92:15:93:e9:56:f0:a6:77:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=fc899c15-75bc-4393-9e1c-22d1f9a5acfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:19:1c:68:5f:45:98:bd:0e:27:78:4f:f8:89:
                    67:98:32:ba:25:d6:30:5a:29:86:d9:c3:c0:c4:18:
                    22:b2:7f:73:0a:72:ed:57:75:1b:ea:c5:77:07:bc:
                    5f:0d:11:61:2e:7e:48:1b:9c:99:3d:a5:73:90:6f:
                    0b:f0:32:13:d2:23:3b:06:40:ea:f7:7a:a9:1e:68:
                    e5:ff:47:05:82:4c:3e:30:ed:9f:f5:71:e5:cb:28:
                    24:56:fa:cf:69:b7:ee:48:30:d3:96:67:03:a0:4f:
                    09:8f:12:8b:8e:9e:96:51:0e:17:b7:4d:fc:02:b7:
                    36:53:01:3e:f7:5c:8e:64:7e:9f:1f:1b:fc:ad:43:
                    1c:6a:61:ef:b2:fe:60:10:50:93:12:4a:90:5d:91:
                    4c:55:5b:08:88:da:25:1c:8f:cc:c2:0e:0a:a9:f0:
                    45:1e:f2:12:fa:b3:cf:cd:a7:f8:02:55:ea:e8:3e:
                    30:ef:c5:e8:e2:f2:c0:7a:b5:b5:20:a6:de:09:68:
                    1b:cd:cd:2d:f8:02:33:2d:af:cc:e1:7d:05:94:59:
                    19:58:de:af:7b:13:09:34:c6:e4:c1:1f:c9:ca:34:
                    df:92:e9:85:c5:ad:23:bc:9f:7c:27:25:ce:5e:78:
                    24:03:9f:5c:76:e3:17:f6:09:eb:56:64:d6:85:3f:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:25:0A:AD:40:F5:C6:4A:1F:BD:C6:0F:28:D9:AC:A8:97:D2:35:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e7757984-5180-3738-8ed5-e123aedb50b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:98:f9:14:0b:01:8c:4e:9c:b2:22:5f:15:f6:f0:11:cf:29:
         3e:b0:04:24:9e:0f:f7:90:04:99:5c:b4:fb:47:88:31:45:15:
         00:b8:be:e1:77:5f:a2:b5:54:8f:a0:f1:40:19:ee:47:6c:78:
         08:07:86:7c:4d:24:bb:60:aa:a3:aa:4e:3a:4e:a3:a8:2c:1d:
         6d:d5:35:82:af:5b:fb:83:ba:6b:0c:d4:e4:c0:dc:e4:83:b7:
         41:6d:a5:e8:d3:34:7e:fd:4c:7c:0c:62:e4:87:cd:c9:a5:7d:
         28:54:d2:e6:09:9b:bb:2c:eb:19:d4:a3:10:15:6c:14:8a:a0:
         83:c4:e0:53:d2:e4:29:f1:87:64:8a:1f:15:58:ab:b8:91:26:
         98:b7:59:c7:20:9a:4c:9a:e1:45:84:a3:ce:eb:a4:77:c6:04:
         c2:65:77:85:06:cf:c3:d5:e9:fa:37:db:e6:16:aa:dd:82:0f:
         38:d2:9f:fe:63:8e:8a:41:3e:e7:e3:fb:86:53:85:32:bd:29:
         37:06:d7:9e:5f:db:32:0d:62:20:5e:68:6a:17:41:d0:f9:99:
         00:fb:6b:91:fa:0b:91:ce:77:41:8e:46:16:de:52:e0:60:87:
         d7:f2:b8:7a:d0:a7:d1:ef:24:e3:bc:cf:b0:9b:7a:8e:97:9b:
         ac:bc:00:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:31:15 2026 by rpki-client