Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bf91cfb-a4c4-3c00-a182-a7ca0a214f4a.roa
File:                     0bf91cfb-a4c4-3c00-a182-a7ca0a214f4a.roa (raw, json)
Hash identifier:          1IQL7g+QKMdWO/yJde/WibJdta5SOntKQOEy1+tG/68=
Subject key identifier:   7B:5B:02:5F:E4:9C:C8:AE:AA:86:66:72:1F:61:EF:4F:9B:4A:F0:37
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DAF10227BDB2704F6B3738100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bf91cfb-a4c4-3c00-a182-a7ca0a214f4a.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        23.33.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:22:7b:db:27:04:f6:b3:73:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=13a0ad25-72bd-46f8-9a1d-97b95f203f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:a5:6d:2a:75:9f:f2:e1:e2:c1:ba:72:3e:
                    c8:19:c9:ae:6b:d9:5b:00:d7:d9:b3:e9:75:15:b0:
                    82:4a:af:dd:63:e1:98:5f:6b:aa:a9:2f:08:ef:55:
                    c5:e3:a2:cf:d5:67:01:14:04:c1:48:51:a8:e1:77:
                    c9:b6:ed:d8:22:b0:d8:b5:65:31:06:2e:77:1e:89:
                    ef:67:b1:f5:15:80:04:13:9d:d2:e9:ce:4b:1a:69:
                    bf:b3:14:21:aa:85:7b:37:d0:7b:61:31:17:f3:38:
                    aa:3c:1b:fb:1c:81:d3:f5:a5:98:63:82:25:ea:70:
                    11:a0:a2:a2:0b:79:c5:e6:61:0c:66:8e:bb:ae:07:
                    e9:ec:fd:25:c3:27:26:4e:06:6e:9b:74:c1:06:72:
                    32:6e:a8:bb:b4:90:5c:4c:06:e9:18:8a:a2:d9:b5:
                    f0:05:cb:24:37:df:dc:95:4d:51:40:0e:0f:2e:b5:
                    b1:51:e5:b5:65:39:ab:ba:07:5b:20:ba:a1:b3:a2:
                    c1:f9:58:6d:21:ca:dd:7c:c8:fd:b8:2f:e4:40:e9:
                    36:91:c9:12:01:89:aa:39:4b:18:22:28:14:71:e0:
                    cb:8b:44:ab:cb:67:99:da:29:d9:b4:f5:8b:b9:f8:
                    7c:01:8e:92:94:50:d0:af:2a:b4:9f:4e:ff:ea:64:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5B:02:5F:E4:9C:C8:AE:AA:86:66:72:1F:61:EF:4F:9B:4A:F0:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0bf91cfb-a4c4-3c00-a182-a7ca0a214f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.33.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:89:47:42:e8:51:87:4b:69:5e:61:ca:32:e8:e3:56:c6:d7:
         e6:64:35:9a:5e:d2:21:37:77:7a:ab:24:7d:f5:df:52:51:73:
         e1:fd:a2:a1:60:02:ea:ef:17:f2:e8:2b:8d:1f:b9:6c:e3:a4:
         f2:d8:64:e1:b1:f1:30:74:7a:75:2c:bb:96:34:30:ab:1d:57:
         4b:3f:be:82:72:9b:9a:62:c5:77:8e:50:fa:84:9a:a0:8f:7d:
         18:29:16:a3:bd:2e:11:49:dd:ac:f3:35:ec:3d:60:7f:de:18:
         c7:a4:8e:35:26:49:d1:de:e1:e3:48:75:e3:d7:4e:44:ca:2c:
         97:c8:63:d4:4d:bc:32:b8:27:6c:28:1a:2e:ab:b3:69:40:a3:
         ed:11:62:82:5c:c8:5d:20:53:92:8c:8e:0c:06:4d:c7:0f:53:
         b4:90:3f:be:cb:b8:53:bb:77:b9:16:1f:17:44:0e:51:97:20:
         b4:0e:0a:1f:ac:e1:bc:3f:5a:8e:4a:e2:3c:c3:13:94:19:6f:
         72:88:cf:18:8b:59:a2:16:b5:d6:fc:4c:5d:22:e2:9f:af:db:
         79:43:4e:09:1e:cd:f5:48:67:24:9e:4f:b9:f4:30:32:c6:ce:
         fb:ad:e2:19:fb:a7:5e:da:09:b7:d1:13:f0:2d:b5:3e:cd:51:
         4b:f5:eb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:32 2026 by rpki-client