Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/b976fad6-a995-3d50-ae71-3b224af8745a.roa
File:                     b976fad6-a995-3d50-ae71-3b224af8745a.roa (raw, json)
Hash identifier:          RSSZ+ThLlkSzQQN/HS4cwMEfRjlia+rsMuo8Djvu2+Q=
Subject key identifier:   FC:6C:12:D2:BC:FC:EC:E6:80:CC:1F:E8:9F:43:E6:F1:88:95:72:5E
Certificate issuer:       /CN=1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0
Certificate serial:       010D0C9F4328584DBBA894BB27AFEA350AF60880
Authority key identifier: 4C:9B:7D:C5:A5:41:46:A5:D8:C3:DF:CD:AB:68:10:70:3F:3E:E0:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/b976fad6-a995-3d50-ae71-3b224af8745a.roa
Signing time:             Tue 05 May 2026 13:17:24 +0000
ROA not before:           Tue 05 May 2026 13:17:24 +0000
ROA not after:            Mon 03 Aug 2026 13:17:24 +0000
asID:                     979
IP address blocks:        23.149.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a8:94:bb:27:af:ea:35:0a:f6:08:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0
        Validity
            Not Before: May  5 13:17:24 2026 GMT
            Not After : Aug  3 13:17:24 2026 GMT
        Subject: CN=f633372a-5fff-434c-9b87-59d2597e9efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a2:8d:3d:98:b8:86:b5:a4:f5:0b:89:99:0b:
                    ee:fc:3f:a2:67:28:45:22:c7:50:a2:c0:8f:e4:76:
                    26:70:98:16:f3:39:04:1a:eb:92:24:80:fa:3d:0c:
                    f7:97:b3:e8:2b:94:64:e3:c1:88:62:88:10:fe:c8:
                    ac:66:67:f5:13:34:39:d9:f3:b5:ff:1e:dd:0e:ea:
                    07:53:12:7a:80:db:b4:44:39:a1:78:0d:29:06:ec:
                    ba:17:59:c4:04:0b:95:ec:f9:9c:fe:fd:27:b6:a6:
                    f5:a8:af:85:52:0d:9b:0a:30:3c:1b:50:75:33:68:
                    57:5a:0f:7e:7a:f4:00:de:dc:3d:16:0f:fa:f3:55:
                    3d:ee:93:42:31:22:72:e0:f1:b9:97:fd:f4:73:05:
                    cb:ea:a6:81:f7:8c:84:ea:14:85:ba:46:15:3f:e0:
                    25:4c:57:30:eb:76:3b:2c:b8:0b:98:1c:ec:cc:45:
                    8b:08:e3:6c:b3:0e:33:91:eb:64:d0:da:9e:b3:ec:
                    a9:6a:b1:13:de:c2:f1:3a:68:65:33:da:18:c1:ae:
                    a2:4b:cb:2c:96:eb:a1:3c:3b:45:03:0c:38:ae:64:
                    c4:90:fb:21:d7:47:ee:1b:b2:71:15:b2:51:50:59:
                    eb:23:b1:23:06:37:6c:08:6b:a8:d2:11:57:1c:b0:
                    0f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:6C:12:D2:BC:FC:EC:E6:80:CC:1F:E8:9F:43:E6:F1:88:95:72:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/b976fad6-a995-3d50-ae71-3b224af8745a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.crl

            X509v3 Authority Key Identifier:
                keyid:4C:9B:7D:C5:A5:41:46:A5:D8:C3:DF:CD:AB:68:10:70:3F:3E:E0:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1f9f5cb5-a7bb-43e0-90d1-9477d7de1ab0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e0:75:6d:44:5b:00:e6:3b:f8:a1:3c:d4:6b:f2:27:52:c4:
         cf:da:a7:66:62:24:b7:c4:21:f6:b6:d2:dd:4f:1c:17:df:82:
         1f:1b:ba:23:c9:43:03:cf:d2:68:07:80:4f:71:20:42:2c:28:
         56:99:49:47:32:3a:59:7e:36:3a:32:3f:49:35:fb:76:5f:29:
         16:b2:bb:e5:1c:ba:ae:df:b3:be:9b:f4:66:8f:67:98:5b:dc:
         d9:6b:16:cc:0c:74:a9:53:10:e0:1e:82:bc:00:db:ef:57:f5:
         67:55:e3:a5:a3:df:e8:6f:cc:e0:f6:03:a7:42:be:7b:0e:f5:
         41:f1:a3:94:4e:68:25:e3:2a:e1:e1:ca:2a:52:9b:d2:87:6e:
         a6:f0:c2:13:59:7e:dd:aa:6d:f3:15:76:8e:1e:30:bb:1a:66:
         40:a4:3e:c6:77:e7:54:85:19:5f:ee:eb:b7:79:25:ca:94:87:
         00:27:b1:80:b3:ae:55:74:ee:61:88:dd:bf:03:bf:b8:6b:bb:
         79:e7:64:73:7c:e3:12:10:e3:f4:cd:84:11:28:da:7a:a1:17:
         e6:77:64:32:e4:7b:5d:9a:b9:b1:2c:7f:ed:db:ee:0e:bf:5d:
         7f:5e:2f:91:1f:25:05:77:e9:4e:9f:9e:fd:56:0c:aa:3b:3d:
         1a:05:80:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:16:21 2026 by rpki-client