Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/364b189e-086f-3aa1-bf32-a7f86110838e.roa
File:                     364b189e-086f-3aa1-bf32-a7f86110838e.roa (raw, json)
Hash identifier:          LAcKOjz4pL5LZh7JpQqU4CRFokA3ZD3KL1+tuepC60Y=
Subject key identifier:   5F:53:96:88:9C:F8:57:52:C2:B4:5D:ED:88:64:19:38:43:D7:9E:DC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DC565AA330B1B417578C18460
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/364b189e-086f-3aa1-bf32-a7f86110838e.roa
Signing time:             Sat 09 May 2026 01:00:25 +0000
ROA not before:           Sat 09 May 2026 01:00:25 +0000
ROA not after:            Fri 07 Aug 2026 01:00:25 +0000
asID:                     35994
IP address blocks:        23.53.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c5:65:aa:33:0b:1b:41:75:78:c1:84:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  9 01:00:25 2026 GMT
            Not After : Aug  7 01:00:25 2026 GMT
        Subject: CN=9fce1f48-cc1f-4b8a-9fef-56aa0dc60ae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fc:7f:ff:32:bc:92:97:1c:b9:87:34:1c:10:
                    3a:b7:c3:73:c0:4b:70:0e:cc:7b:5e:2e:71:df:9f:
                    83:b2:74:32:df:08:60:77:47:32:b9:84:8d:48:af:
                    5c:46:40:f4:d4:65:16:33:2a:34:f7:95:b3:b0:d8:
                    d0:7e:32:0b:57:c1:13:4b:ad:0c:d2:5a:90:20:45:
                    c1:b1:94:f9:70:6c:2b:f7:7a:ba:f9:e3:36:93:f1:
                    2a:e0:3c:a6:71:9c:cc:77:ce:89:ef:eb:97:0d:87:
                    63:49:2b:bb:ea:69:ea:06:eb:8e:b8:ba:2d:50:30:
                    61:3a:36:8f:5a:8b:68:12:f5:57:b5:a6:35:79:88:
                    b6:63:d5:b3:04:9b:bc:b1:4f:ac:c0:b4:84:87:f7:
                    81:a5:5a:d0:03:c3:97:0e:58:63:61:9b:4b:ca:7d:
                    0f:f1:0c:14:3b:bd:87:b3:8e:b7:77:c9:13:2b:40:
                    20:1a:12:68:b3:74:a0:2c:79:0f:8c:c8:6d:df:35:
                    6a:8d:41:19:6a:93:c9:29:7c:84:e2:d8:39:58:e8:
                    49:f8:18:42:57:46:52:ce:aa:eb:b5:21:4f:d0:a7:
                    91:ac:eb:16:f7:f0:93:6f:f7:5c:4a:43:79:48:1f:
                    44:3c:1f:b8:05:f9:9b:a7:90:a5:d0:6b:eb:a5:5e:
                    d7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:53:96:88:9C:F8:57:52:C2:B4:5D:ED:88:64:19:38:43:D7:9E:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/364b189e-086f-3aa1-bf32-a7f86110838e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.53.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:e9:40:f3:fa:79:0f:1d:40:39:30:bc:db:71:17:01:44:f5:
         08:5e:77:84:eb:44:e9:4a:60:79:43:84:7c:14:aa:71:67:da:
         04:06:e2:2b:26:72:d7:a8:a6:02:83:ab:21:3d:18:27:d1:05:
         87:fd:9e:28:ba:71:f4:a8:2b:4d:9f:89:b2:d5:6f:e8:72:15:
         4c:27:3a:45:8a:38:d1:e1:99:5a:ee:98:7e:10:ee:90:ee:a5:
         80:26:2b:39:7c:d7:be:1e:5c:cf:ac:33:65:46:57:d3:fd:4b:
         41:f3:c6:75:ef:92:ea:30:10:a3:cd:bc:52:6b:26:58:93:6d:
         cc:bb:11:63:c7:8f:55:24:18:a0:ae:74:32:e7:9d:c1:c3:21:
         10:20:c2:4f:4a:85:1d:a8:c8:9f:57:18:d6:4b:2c:96:e7:ee:
         cb:ad:01:59:d6:18:de:7c:ac:fe:06:14:27:a9:4f:f7:de:c9:
         31:91:ad:86:1e:88:80:20:62:b9:fb:fa:e7:0c:aa:ce:70:a6:
         51:33:57:1f:ca:64:7a:27:d4:bb:bd:f2:f8:a9:e3:b9:8e:57:
         01:a9:09:db:ad:b0:5e:7f:4b:51:28:eb:5d:3d:76:48:a5:70:
         6d:5b:89:15:4f:f9:39:c4:fc:44:70:99:66:7a:9b:98:d2:9a:
         96:80:ff:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:50:34 2026 by rpki-client