Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28bae512-c3ec-3877-b49c-4b07c966cc3a.roa
File:                     28bae512-c3ec-3877-b49c-4b07c966cc3a.roa (raw, json)
Hash identifier:          UwQjIvhZ51WUuAgkcxJSQg3TEyA3iNYL+JaG3SqXh/A=
Subject key identifier:   1C:3E:97:19:73:C8:4E:1A:39:49:E1:F6:A3:E0:0E:6E:23:4D:43:71
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D1707E4493CB20CE487BC4A00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28bae512-c3ec-3877-b49c-4b07c966cc3a.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     20940
IP address blocks:        23.38.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:e4:49:3c:b2:0c:e4:87:bc:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=79171bf1-969f-4c3d-964d-0af9ec855861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b0:55:f3:1e:ec:a3:2a:fc:ba:74:44:6c:37:
                    95:b2:f6:f6:a9:37:62:7e:b0:4e:1b:9d:15:32:6d:
                    06:f6:ae:99:bd:cf:cd:55:9b:ce:9c:ad:77:72:c8:
                    0a:28:06:52:71:f1:5c:da:bb:e9:cb:18:f9:b9:04:
                    a9:4f:b0:77:d0:e4:16:a2:de:96:1d:39:bf:60:50:
                    62:db:94:ec:25:4f:43:9d:6a:3f:22:c0:d7:8b:be:
                    ab:4c:8d:25:93:6c:f5:3b:b3:ca:84:2d:bf:02:46:
                    bc:ee:aa:da:cc:ad:f7:6b:4f:e8:87:f0:1b:09:e4:
                    1a:37:ce:a9:74:f5:94:4e:1b:2b:f8:be:fb:3c:8e:
                    f9:37:16:bd:83:df:c4:09:cb:9c:76:28:24:90:56:
                    67:6e:9a:74:01:7f:73:55:f5:7a:c6:31:b7:5c:17:
                    03:ba:f0:74:1a:84:74:e5:e4:56:bd:a4:1a:5b:d4:
                    68:ad:ac:0e:1a:53:75:63:8d:0a:ce:6b:1a:ec:9f:
                    6a:03:3e:96:9e:9f:42:27:98:e5:dd:a5:5e:b2:b0:
                    cf:e4:ed:b1:ff:4b:ba:ff:52:b1:9a:33:17:c8:b0:
                    ba:c0:81:34:45:c0:01:62:24:2a:f0:cf:20:a4:ac:
                    2a:2c:bb:86:03:ee:3c:4e:31:91:12:ae:e0:96:c0:
                    81:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3E:97:19:73:C8:4E:1A:39:49:E1:F6:A3:E0:0E:6E:23:4D:43:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28bae512-c3ec-3877-b49c-4b07c966cc3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.110.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:b6:8b:5b:46:38:bc:b7:e6:58:d6:0a:dc:9e:43:01:d8:74:
         30:67:b5:92:fd:4b:02:87:a1:53:ec:e3:58:f6:00:78:d6:e2:
         ff:ca:f5:8c:18:a7:1b:99:37:84:36:69:79:c0:fb:f3:f4:f8:
         d8:2a:b2:d6:e8:ee:70:f0:d8:2a:46:39:4a:97:d1:2a:9d:6b:
         be:ac:bc:f8:cc:23:44:65:ce:4f:6c:97:7c:0d:ac:ac:49:be:
         e4:7f:42:3f:83:cb:db:d3:70:8d:47:be:9b:4f:93:3e:22:7f:
         87:87:4c:ad:c8:b2:3b:9b:80:01:45:0b:a9:02:24:2e:33:d1:
         4c:64:bc:1b:99:7f:fa:64:19:31:6d:05:5e:59:6a:21:25:3f:
         16:32:f7:51:68:71:a6:51:e1:22:ca:d4:55:bb:4c:d3:51:13:
         e8:3f:23:d1:08:f0:7f:03:98:3e:17:40:24:c1:4e:d8:f4:db:
         5f:26:6b:80:f0:76:d6:cc:1f:b0:7f:c4:9f:c8:72:df:65:db:
         4c:d0:42:41:24:48:a7:99:95:13:d2:92:18:20:3b:b0:07:a7:
         78:b5:51:16:2a:a9:73:ca:55:ab:7c:d8:ae:f1:09:a1:06:42:
         c4:84:a5:09:dc:f8:50:07:be:51:2e:b9:ba:9e:1b:3c:95:cc:
         29:e5:56:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:42:53 2026 by rpki-client