Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75d8c6f2-a718-390d-a00b-f629b43e3954.roa
File:                     75d8c6f2-a718-390d-a00b-f629b43e3954.roa (raw, json)
Hash identifier:          Do70N8e6FgNN57550F+5jhCyVvfwWzrnt53FMIIhkmQ=
Subject key identifier:   52:31:0C:26:F3:EE:4B:C0:34:85:DE:BC:01:FF:5A:3E:B0:7A:8A:BF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DAF1029CA9CECF7B70815D900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75d8c6f2-a718-390d-a00b-f629b43e3954.roa
Signing time:             Fri 01 May 2026 01:00:24 +0000
ROA not before:           Fri 01 May 2026 01:00:24 +0000
ROA not after:            Thu 30 Jul 2026 01:00:24 +0000
asID:                     20940
IP address blocks:        23.35.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:af:10:29:ca:9c:ec:f7:b7:08:15:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  1 01:00:24 2026 GMT
            Not After : Jul 30 01:00:24 2026 GMT
        Subject: CN=094e27a2-d092-47b4-8ce6-d90245649825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6a:af:cf:a4:df:23:41:16:43:c4:99:91:14:
                    9f:cf:08:0a:ae:31:a5:05:96:28:e7:64:e6:d5:63:
                    8c:10:ed:a3:a0:f8:d9:e0:b8:5d:11:94:b0:f1:c1:
                    52:ab:a8:1e:06:08:cf:25:f4:ed:c9:f4:7f:c6:32:
                    bd:4c:42:cb:e1:b8:0e:d2:d6:40:ef:bb:fd:65:53:
                    f4:c6:97:f2:ab:6e:27:c2:9e:05:42:48:5d:b4:da:
                    85:d9:d3:98:a9:0d:6a:7d:69:90:31:f0:2a:06:98:
                    84:5f:83:bb:06:a6:23:5a:97:ae:83:92:94:73:05:
                    6a:bc:0a:94:f3:ed:8d:e7:48:06:99:f7:24:39:a6:
                    92:cc:03:1e:c5:98:08:cd:69:33:e4:7c:f3:6c:de:
                    30:c3:da:eb:d0:b0:96:f9:f5:90:f5:b0:f6:09:22:
                    08:9d:33:28:77:4e:c0:ce:68:f3:6d:3d:a6:6d:b7:
                    a0:c1:76:67:38:88:67:18:e5:f3:36:c9:75:43:5d:
                    2d:85:44:19:ff:97:38:05:9b:cf:7c:82:ef:c8:d8:
                    3e:4f:6f:8f:87:4e:23:e7:57:e5:8d:61:ff:60:5c:
                    3b:32:ac:37:b8:b5:49:a6:02:4f:38:65:74:d3:09:
                    e0:e6:e6:b0:3e:23:78:77:20:73:d2:a0:90:da:85:
                    e4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:31:0C:26:F3:EE:4B:C0:34:85:DE:BC:01:FF:5A:3E:B0:7A:8A:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/75d8c6f2-a718-390d-a00b-f629b43e3954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.35.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:c8:14:cc:ef:c9:b0:66:d0:50:1b:8b:60:ae:c0:80:02:7a:
         73:94:11:ea:d2:98:1d:e8:3c:47:15:09:22:fa:0c:df:92:bf:
         b7:98:94:c6:c6:1a:91:b7:b9:b1:34:be:f5:ea:6e:8f:85:2b:
         1c:05:a2:32:92:8e:01:96:60:15:4b:4a:06:ef:bd:d0:4e:68:
         06:e2:ce:cb:b8:c9:39:f1:6d:bb:85:75:f2:ae:b2:53:d0:3e:
         2b:6e:69:c9:24:ef:ae:dc:9e:7b:58:ac:78:9d:22:bb:fb:70:
         b5:5c:00:e1:7d:5a:e7:d9:b4:4a:34:10:5b:f9:84:e6:07:3e:
         66:43:23:48:a3:54:13:bd:85:a0:42:ff:7c:bb:a9:b2:a6:68:
         7a:5a:75:79:9f:28:f1:e2:24:7e:8e:9b:88:86:7b:a4:1e:bb:
         dc:68:7a:e0:3c:d1:07:56:5a:a8:fb:7b:ba:0b:ad:42:bb:8f:
         f8:85:c8:a8:dd:3e:96:d1:89:9e:45:9c:65:04:d1:85:5e:8b:
         b9:bc:4b:4f:27:4b:15:d1:8b:b3:90:fb:a6:7d:e7:93:42:77:
         a0:f1:16:27:af:5d:22:e8:6d:0c:12:d4:7e:99:89:af:f4:f3:
         b5:0d:20:6f:60:6f:7a:48:4c:cd:59:d3:27:c2:41:bc:a0:e0:
         3a:17:4e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:04:50 2026 by rpki-client