Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/234df8a4-9bde-3692-a791-60219b86b746.roa
File:                     234df8a4-9bde-3692-a791-60219b86b746.roa (raw, json)
Hash identifier:          UAA320v7nkR6pTTxAFGtuI2Q0nBgKe18XAk4oZkYqhc=
Subject key identifier:   8E:EB:AB:30:56:B9:AF:7D:2A:74:FB:BC:44:F4:E8:1F:CF:34:4C:F3
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DCDC5BA6E6CBD51D9D9633800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/234df8a4-9bde-3692-a791-60219b86b746.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        23.61.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:ba:6e:6c:bd:51:d9:d9:63:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=726e322d-547a-4c4d-a26f-4bef0daef65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bf:93:8a:89:3b:f6:9a:ec:09:09:96:97:71:
                    42:d1:4d:b8:f2:81:1f:cd:f4:b4:3d:d9:ee:f4:cc:
                    3c:aa:38:de:dd:2a:f2:dd:db:33:49:45:a5:c1:f8:
                    62:4b:b1:f0:d2:cd:de:06:f8:91:4b:49:3d:44:82:
                    b2:23:48:45:b4:ba:c1:19:c6:f7:cc:bc:89:88:c3:
                    42:1e:04:fa:0f:39:f7:2f:fb:e8:72:83:15:51:7a:
                    3c:92:66:dd:e9:c0:58:84:59:45:79:76:19:f0:89:
                    91:3c:a8:76:df:42:71:01:88:69:54:1c:4b:eb:06:
                    5d:a9:c8:7d:24:46:e2:09:36:1b:f5:3a:e2:9f:5c:
                    b7:76:db:d3:f9:f1:6f:b1:6f:41:f6:a5:6f:4a:72:
                    96:2a:e5:a1:c8:bc:a3:39:3d:64:7f:8e:66:d3:b1:
                    d9:7f:46:71:e4:07:f1:a8:bc:fb:68:68:6d:a3:c2:
                    ed:d7:fd:e0:e1:99:43:b6:9c:32:3f:97:dd:f7:01:
                    d2:4e:df:e8:6e:79:f8:f3:2f:20:e7:a5:71:3f:49:
                    45:0b:51:65:07:84:bd:13:9e:f4:8a:c0:c7:9b:c9:
                    dd:71:04:84:5d:34:f6:d5:a2:70:45:96:cd:55:03:
                    a3:18:6f:1d:06:9c:1c:29:74:a5:00:65:1d:5e:7f:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:EB:AB:30:56:B9:AF:7D:2A:74:FB:BC:44:F4:E8:1F:CF:34:4C:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/234df8a4-9bde-3692-a791-60219b86b746.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.61.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:71:73:b6:56:07:7c:df:90:7e:4d:24:3f:da:f2:21:10:c2:
         ca:f1:9c:56:ae:80:4c:58:e6:8a:89:42:12:24:49:ff:49:6d:
         1d:45:ba:65:d6:b1:08:f2:18:ea:54:b4:ed:c7:98:88:8d:b9:
         c2:0d:12:96:e1:b3:ff:a2:4f:ff:a0:f8:58:16:bd:a9:1f:d9:
         a9:54:94:14:ab:de:b9:02:92:e6:0f:a2:20:e0:87:09:16:4c:
         04:b0:82:03:af:d6:d2:26:89:d9:72:1b:f9:a2:d8:bc:c2:e2:
         ee:6c:2e:63:a4:53:1a:86:fe:e8:f1:8a:3b:e4:06:e1:16:58:
         53:f2:6e:1d:77:c8:80:87:d1:cd:d2:bd:cc:50:a8:68:c8:23:
         ee:74:c6:59:0e:43:33:94:0e:9f:7f:16:6d:83:9d:ff:90:db:
         07:03:7c:9f:a0:00:aa:31:c5:41:3a:5a:14:85:ba:bf:05:49:
         37:02:28:29:3a:25:cc:00:69:6f:96:ed:82:ea:4e:56:a3:30:
         f8:e0:6f:5d:57:ee:bc:2f:ff:7a:3a:7c:2c:5d:3a:ad:53:79:
         43:39:57:56:d2:d7:54:04:2b:94:43:e5:67:63:7b:95:d8:ec:
         08:a3:74:e2:07:70:c4:56:c5:4d:ed:cf:05:a7:b1:86:ff:a6:
         b6:ca:1c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:32:56 2026 by rpki-client