Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14f8a9fc-4440-3021-b8fa-f84d933d9220.roa
File:                     14f8a9fc-4440-3021-b8fa-f84d933d9220.roa (raw, json)
Hash identifier:          gBSnCwoolDCqJS9OcP0OKfJwGsPlCwWddQjxOrqfG0Y=
Subject key identifier:   E6:CD:E5:41:8A:8A:A7:A8:07:70:12:EF:E1:C3:21:63:F1:6C:5A:85
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DBD05D198263D3FEB10EC2EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14f8a9fc-4440-3021-b8fa-f84d933d9220.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     24319
IP address blocks:        23.45.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:d1:98:26:3d:3f:eb:10:ec:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=f8950676-dacd-4e14-a9c8-86ab1e9373c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:eb:98:fe:aa:a8:f9:aa:97:93:73:0d:59:5f:
                    e6:82:05:c4:f0:46:71:22:1e:ea:4e:bd:10:14:2f:
                    4f:d3:03:4a:d3:69:0a:22:b4:d5:93:75:6d:2e:b8:
                    80:6f:12:8a:79:e4:56:2e:e6:c6:7a:ff:a2:dd:2d:
                    68:90:93:fd:f6:da:29:9b:42:e7:37:7a:0f:de:d2:
                    55:28:4c:c4:79:28:29:c5:aa:2c:42:f3:a4:2c:16:
                    ef:3c:2f:4a:96:13:b0:e0:7a:1d:26:28:a9:ce:7c:
                    fe:fb:a0:79:a3:a4:3d:e8:71:b6:1b:53:46:ab:b8:
                    c0:18:71:38:e2:0e:68:af:fe:31:c5:16:22:f0:27:
                    8d:dc:19:74:de:7e:64:16:25:1a:da:ba:d0:34:2d:
                    6e:08:1b:2e:ba:2f:26:32:4c:e1:90:89:d5:73:2d:
                    4c:00:9e:37:1d:35:ee:9e:cf:ef:98:fb:bb:65:cd:
                    4b:37:3a:88:57:2f:e5:a1:64:25:2d:c9:35:8c:17:
                    19:0d:14:6e:ab:16:8f:8b:d5:f3:a0:9a:fb:7d:b8:
                    91:22:2c:c9:66:d7:09:27:97:a9:32:73:4c:ea:cf:
                    7a:fc:d4:fc:58:02:72:a3:61:0e:8e:32:22:16:38:
                    c3:0c:37:c0:c2:b0:b5:d8:67:c1:c0:e5:0b:38:84:
                    37:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CD:E5:41:8A:8A:A7:A8:07:70:12:EF:E1:C3:21:63:F1:6C:5A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14f8a9fc-4440-3021-b8fa-f84d933d9220.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:a7:c8:5f:45:30:d3:f9:e7:f8:b9:70:ed:e6:16:6d:82:01:
         f8:39:28:77:89:52:54:8b:a0:7f:f3:5d:6c:51:d1:37:bc:54:
         e3:ca:5d:3b:21:5a:95:a4:4e:f4:8c:56:6a:3f:e3:54:ff:0d:
         b0:74:2e:bd:2c:2b:a2:c7:9b:e1:86:7e:ee:98:6d:6b:08:0a:
         d3:7d:b6:e1:86:1a:64:b7:f8:ed:32:f0:aa:a3:08:d7:8c:bd:
         75:da:b6:54:82:59:23:b6:2c:30:08:73:f0:e9:47:ea:58:38:
         8f:60:30:f6:16:2f:5f:68:be:87:bc:aa:c6:1b:d1:0d:3c:c4:
         cf:0b:55:36:0c:7e:86:96:f3:69:94:c0:48:ca:5e:56:1c:e8:
         73:78:e3:07:3f:57:ea:91:0f:91:b8:8f:ab:28:2e:91:45:9b:
         e5:e2:07:4f:7a:60:d9:d5:bd:79:9d:23:b1:60:95:15:d7:8a:
         aa:65:fd:34:f3:97:76:f8:a0:3f:08:90:c9:46:85:35:24:48:
         52:0f:7d:bb:27:57:b0:2a:b4:e9:8e:b1:de:92:c7:7d:74:33:
         ec:b1:14:93:f1:1f:5f:8b:01:a9:1c:21:a7:97:47:74:82:eb:
         f8:7c:16:6a:d5:8d:fc:5b:96:37:49:c9:75:47:26:27:60:61:
         e7:ac:ba:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:00:49 2026 by rpki-client