Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5194a576-ce7e-30df-b154-2d209ba76257.roa
File:                     5194a576-ce7e-30df-b154-2d209ba76257.roa (raw, json)
Hash identifier:          d5f6F89dhdA4qK0XHkQDvLeJek75yKJTQ1P3FReu/5A=
Subject key identifier:   0F:31:B8:7F:DB:1E:09:4D:28:E7:AA:F4:45:FA:39:5A:F7:25:0A:C9
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D9E5024D88207CAD89C8EB3A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5194a576-ce7e-30df-b154-2d209ba76257.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        23.44.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:24:d8:82:07:ca:d8:9c:8e:b3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=ea938f71-5f81-4d41-acdd-6932843a50a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fc:e3:cc:71:5d:8d:76:71:80:ce:e4:02:db:
                    88:27:22:07:20:14:de:49:24:28:44:0b:c6:9d:d6:
                    a2:9d:36:b6:5d:bf:27:0a:d4:59:72:3f:67:49:db:
                    b1:43:c2:8c:51:f1:78:46:48:af:3c:66:14:00:ab:
                    a8:96:11:ea:4e:77:db:95:6f:21:63:81:97:29:a4:
                    3f:d3:f3:23:06:65:12:bf:73:ad:13:41:a7:d7:49:
                    8e:52:24:57:6e:9f:b5:5b:f8:99:04:e3:bd:e5:e6:
                    af:dd:20:25:ca:6f:4d:07:e1:10:1b:9a:08:16:c1:
                    52:5c:ac:56:c3:b7:57:29:a0:be:84:8a:d9:8a:a2:
                    f1:28:8e:83:18:a0:08:4c:ad:c4:6b:3d:98:11:2a:
                    af:c3:0f:4c:83:a6:80:f1:bc:0d:d4:44:ff:42:87:
                    fd:9b:2a:57:58:3d:fc:ba:a3:5f:fa:c5:26:33:84:
                    fd:28:09:06:50:39:79:94:b5:06:73:20:d8:a9:40:
                    9a:11:4a:c2:ae:a8:3b:5e:e3:3d:09:90:14:32:03:
                    34:52:c1:30:d0:1d:09:33:da:6d:06:f1:2a:06:05:
                    0d:14:0c:92:42:62:3b:46:88:bb:a3:ef:cd:e8:32:
                    dd:0a:79:35:3d:94:4a:a9:40:23:1d:05:29:85:e5:
                    49:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:31:B8:7F:DB:1E:09:4D:28:E7:AA:F4:45:FA:39:5A:F7:25:0A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5194a576-ce7e-30df-b154-2d209ba76257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:0f:6d:6e:0e:24:d8:06:58:28:40:be:a0:55:52:94:4b:3f:
         87:85:4b:ad:00:2b:d4:79:d2:2b:30:f6:ea:c0:61:62:60:e2:
         52:3f:3a:ca:01:ed:31:06:b9:6e:17:1a:25:0c:18:00:3e:76:
         9a:72:17:c4:dc:6a:cc:f4:af:21:9c:15:92:9c:e2:50:ef:a4:
         7d:d3:7d:b0:84:f7:35:0c:c2:83:95:82:96:d2:de:ca:de:f6:
         84:0d:9f:0e:31:a5:a1:3f:ef:8d:56:1c:6a:8b:75:c3:cb:32:
         47:b0:eb:e9:f9:65:8d:e4:fa:26:9b:9e:df:37:20:5d:93:59:
         d8:ea:c8:40:4f:56:47:fa:de:99:5d:01:9d:05:a7:cf:5e:ac:
         87:0f:3c:04:22:f3:26:f6:77:2a:7c:36:bf:8c:be:eb:4f:33:
         1a:b5:d7:c4:78:c3:78:f2:e4:95:1c:58:5f:61:c9:69:29:15:
         74:b5:15:21:b8:eb:7f:2f:53:6e:42:33:1c:d9:22:4c:83:66:
         22:83:dd:74:88:98:5a:d2:03:26:50:6c:9d:9e:65:cc:a2:99:
         ec:43:20:40:ad:f2:6f:b0:bb:93:ee:49:56:cf:9b:59:e0:e2:
         0d:04:cb:24:c6:2c:8c:bf:a7:ff:85:2f:2b:6b:e0:82:8b:c1:
         7a:72:a6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:26:50 2026 by rpki-client