Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/6f81ad8c-4cc5-35d1-b472-c048522b016c.roa
File:                     6f81ad8c-4cc5-35d1-b472-c048522b016c.roa (raw, json)
Hash identifier:          tK3GngJ8jx9aZd1lPQbi3uN9QTaSdF6VGQFcCXBDK4Y=
Subject key identifier:   9D:CA:50:5E:8C:FC:89:5F:9A:7E:C1:2B:80:0E:95:86:73:77:AA:D3
Certificate issuer:       /CN=5e8f0254-f046-4c03-9c92-b57af2e5e3bf
Certificate serial:       010D0C9F4328584DD0906EC0B984421FBBBE7BE8
Authority key identifier: 9C:D9:56:21:0B:16:31:49:E9:D0:52:B8:E4:C5:71:98:3D:8A:DF:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/6f81ad8c-4cc5-35d1-b472-c048522b016c.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     8095
IP address blocks:        23.179.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:6e:c0:b9:84:42:1f:bb:be:7b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8f0254-f046-4c03-9c92-b57af2e5e3bf
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=a9a19839-1682-4c38-a3f0-ebe56d6071c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:78:76:2c:21:cc:f5:a1:7f:fd:28:33:03:
                    11:30:dc:b4:98:b5:be:f2:8c:16:63:09:6d:c4:b3:
                    ff:97:9e:53:bc:35:d3:b2:dc:5b:e3:40:ae:52:ae:
                    4b:a0:ee:38:c3:18:e8:64:3a:11:27:ca:e3:e5:f1:
                    da:4d:fe:a7:37:80:3b:06:30:00:56:68:05:3f:99:
                    07:ac:18:af:97:c3:ac:45:b2:63:66:6c:4b:f2:e5:
                    62:d0:93:42:95:f2:f6:3d:30:3b:cb:f1:f3:93:8f:
                    fb:98:75:22:43:6c:4c:88:d6:8f:81:8f:d6:b3:58:
                    3a:62:8d:be:b1:ab:2e:df:3d:50:d7:52:93:85:db:
                    7a:4a:2c:87:5a:ca:c9:75:c7:95:b6:bb:33:1f:90:
                    ff:ec:a6:32:6c:36:05:71:dd:98:62:d3:8b:e7:d5:
                    d6:60:8c:96:b9:5d:09:c5:50:38:13:dc:ab:c5:c0:
                    42:30:35:9d:ff:6e:61:e4:71:52:81:67:be:63:98:
                    0c:13:47:51:d5:32:bf:3d:98:e8:c7:d6:d2:5b:2f:
                    77:86:40:35:60:7e:f2:c3:e6:4f:7a:ae:cc:b5:9a:
                    ef:b1:47:ea:cb:0f:fd:90:b8:3b:26:23:03:21:21:
                    e0:fb:4a:47:85:df:5a:0b:da:90:b2:43:af:9f:09:
                    57:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:CA:50:5E:8C:FC:89:5F:9A:7E:C1:2B:80:0E:95:86:73:77:AA:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/6f81ad8c-4cc5-35d1-b472-c048522b016c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.crl

            X509v3 Authority Key Identifier:
                keyid:9C:D9:56:21:0B:16:31:49:E9:D0:52:B8:E4:C5:71:98:3D:8A:DF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5e8f0254-f046-4c03-9c92-b57af2e5e3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:4a:16:eb:3c:1b:e5:90:ed:04:ca:df:e7:74:07:3c:2f:15:
         ca:45:f9:74:40:c6:b7:1a:1f:18:f9:28:ce:9e:38:5e:02:ed:
         4b:93:11:54:8d:a8:ca:af:2d:ff:6b:3e:34:1b:d9:07:1b:0c:
         80:84:ab:41:bf:2e:ad:4e:c0:ec:c2:4c:de:6a:70:78:09:c1:
         0f:45:0a:8f:bf:77:3b:2a:f8:3a:d7:a0:f2:58:ff:26:af:50:
         dc:dd:41:c1:77:d1:ff:38:06:9d:88:bb:1b:e0:e3:6b:2d:93:
         a3:95:c8:c8:21:ac:ef:69:b7:a3:2b:25:1c:d2:d2:d3:0c:9a:
         fc:aa:35:17:7e:31:8a:c8:e6:7f:ee:5a:a8:a5:15:c7:f3:12:
         f3:7d:b0:79:93:09:c0:c7:8e:8b:4f:0d:06:4a:b8:19:a5:4c:
         2e:0a:a0:af:27:ed:7e:e2:32:bf:6f:29:86:71:5d:7b:4f:79:
         81:f5:1f:8a:b1:90:db:4b:da:9e:b6:44:f9:04:cc:ac:52:f0:
         c0:4a:8a:d0:1a:d0:4e:dc:db:dd:f2:8e:85:52:37:5a:ba:e2:
         18:2f:77:8e:2e:a7:9a:1d:eb:04:50:66:0d:55:04:48:9d:e2:
         2a:38:99:2f:93:13:ff:06:83:1b:8e:ff:77:9d:87:a1:4c:47:
         ec:18:d6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:50 2026 by rpki-client