Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cc95c5b-c406-3cef-b627-fccbdb4d9a45.roa
File:                     6cc95c5b-c406-3cef-b627-fccbdb4d9a45.roa (raw, json)
Hash identifier:          8N62qaE7b9ulRw3iDh5RDtYRw3kgP1SvHBiMbMRdysI=
Subject key identifier:   9B:0A:7B:21:C5:D8:CB:89:77:97:AB:A7:9B:9F:EF:F4:79:5F:A7:4D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D9E5022ED5ECC7CE3AF423840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cc95c5b-c406-3cef-b627-fccbdb4d9a45.roa
Signing time:             Sat 25 Apr 2026 01:00:24 +0000
ROA not before:           Sat 25 Apr 2026 01:00:24 +0000
ROA not after:            Fri 24 Jul 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        23.38.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9e:50:22:ed:5e:cc:7c:e3:af:42:38:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 25 01:00:24 2026 GMT
            Not After : Jul 24 01:00:24 2026 GMT
        Subject: CN=fbff7443-4322-4e7e-8b85-8c4f00c61c43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:91:ea:16:b3:b9:86:7a:9e:a8:4b:85:7c:a1:
                    fb:6f:95:d2:72:bd:98:06:04:6e:a8:37:2f:e5:da:
                    c2:58:53:0e:b9:79:e6:d8:51:d1:95:72:19:bd:e8:
                    2f:20:45:05:c2:47:ee:e8:ab:57:a9:d8:16:db:55:
                    a3:b3:08:9e:e1:48:82:11:3b:35:49:ff:0a:39:65:
                    2e:d1:c4:00:c3:4a:e1:a8:79:72:c7:77:42:93:77:
                    d2:da:b6:23:8a:19:34:5d:ea:dc:c3:f8:69:da:2a:
                    60:8a:cc:35:21:e5:a8:8c:bc:bd:fc:2c:48:2d:67:
                    6f:e7:c8:f4:25:97:eb:ae:ea:67:ce:18:5b:2e:12:
                    61:a3:23:83:40:8f:7f:e0:a3:7b:5e:b9:e9:0b:ca:
                    5b:36:77:72:fe:62:05:29:3b:40:f4:9e:4c:b3:a7:
                    c9:0a:9b:4c:6d:0f:3c:da:0e:49:6c:89:bf:5a:7a:
                    5a:4b:9f:d2:65:39:57:6f:16:ec:dd:88:18:5a:0b:
                    7e:c6:a9:55:08:3e:92:7b:bd:de:55:42:f3:8b:bc:
                    a4:cd:ac:49:43:d8:68:11:cf:b3:80:ab:4a:5c:1b:
                    c1:95:28:66:cc:d8:28:1a:d6:17:85:e7:70:1f:3a:
                    51:5c:fa:ba:f7:f1:df:4d:de:ef:0e:7a:64:e0:19:
                    ea:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0A:7B:21:C5:D8:CB:89:77:97:AB:A7:9B:9F:EF:F4:79:5F:A7:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6cc95c5b-c406-3cef-b627-fccbdb4d9a45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:1c:79:8d:98:23:aa:38:6d:61:1d:70:97:5d:e4:ed:de:41:
         98:8b:bd:9c:25:d9:b5:b6:48:99:2d:a4:5a:c2:9f:51:b6:2a:
         a7:cc:f1:b9:8a:e9:54:fb:ae:c6:ff:e9:2a:eb:7a:2b:3f:09:
         88:32:5f:36:ca:7e:6c:c2:1d:28:20:83:fe:da:0d:6f:39:4e:
         8f:97:02:17:39:cd:e9:8b:ea:97:b6:e9:c6:a1:4d:ce:32:58:
         72:f7:d1:5d:da:a9:1e:22:fb:45:53:5e:38:aa:5d:1e:90:54:
         1e:ab:8d:13:1a:15:e9:75:08:df:7e:2e:43:d4:77:6c:69:9b:
         a5:da:97:6f:c3:f5:18:4b:3e:6e:b5:82:99:0a:13:bd:56:78:
         09:cc:ac:50:09:34:66:51:36:6b:53:42:ad:58:55:16:a1:d0:
         3e:d2:51:99:17:53:40:24:7a:42:50:9e:ec:c8:5f:fe:03:1c:
         fc:8d:52:17:af:fa:0f:05:f3:b8:e9:10:a2:c7:b9:ca:4e:d0:
         77:18:83:6d:26:7e:fd:5f:1b:2e:bc:25:ee:c6:aa:1c:ee:88:
         8d:63:5e:9f:83:bf:2f:22:e4:9d:9d:95:8a:e4:82:7f:7b:9e:
         06:3a:ba:b8:10:4e:8a:d3:3a:56:8e:32:f5:d7:40:9d:9e:72:
         c8:18:37:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:29:54 2026 by rpki-client