Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ebb9091-25d9-3251-8058-bf85b410f236.roa
File:                     8ebb9091-25d9-3251-8058-bf85b410f236.roa (raw, json)
Hash identifier:          anQI9UU71FqkA2WtvO+rws37e9BKhKoiAC1iBHR4mDk=
Subject key identifier:   1D:F4:4B:B3:DE:9E:FB:BA:A3:39:49:D9:05:54:94:E3:3C:1F:D3:DB
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DCDC5BD0C71564103359EA640
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ebb9091-25d9-3251-8058-bf85b410f236.roa
Signing time:             Tue 12 May 2026 01:00:24 +0000
ROA not before:           Tue 12 May 2026 01:00:24 +0000
ROA not after:            Mon 10 Aug 2026 01:00:24 +0000
asID:                     16625
IP address blocks:        23.54.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:cd:c5:bd:0c:71:56:41:03:35:9e:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 12 01:00:24 2026 GMT
            Not After : Aug 10 01:00:24 2026 GMT
        Subject: CN=06c0c868-7884-4831-8922-dce557984d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:65:92:13:97:9e:3b:af:06:43:bc:f2:49:e4:
                    b3:84:e4:ed:d7:66:c4:b2:da:13:9c:6d:49:e6:e5:
                    3a:94:21:18:5e:35:9a:31:41:16:85:20:17:7d:90:
                    ad:d1:b9:4e:18:48:98:86:5e:d8:4b:40:99:5e:29:
                    de:41:fd:3f:98:d5:23:f2:2d:1b:7a:23:0e:38:af:
                    fd:1a:de:c0:8d:65:fe:76:65:06:b7:a4:bd:bb:2a:
                    2d:34:7d:19:df:cc:b7:e6:05:c9:af:58:e9:6b:f4:
                    28:93:81:c2:94:f1:74:0c:8c:ce:f4:0e:9e:dd:17:
                    2a:cb:dd:0b:2e:9c:07:31:91:db:0b:59:ad:46:7b:
                    97:58:3b:46:14:e3:f2:7f:b1:40:39:1f:5c:dc:c1:
                    6d:0d:4a:fb:85:8f:66:e3:e4:76:ee:2c:67:68:7f:
                    14:97:18:de:dc:e0:47:25:c1:62:bc:de:fe:a2:89:
                    9b:f8:6b:e4:52:7c:a3:96:1b:0c:70:08:03:af:4d:
                    f5:7e:e0:22:14:25:97:4f:82:33:fb:36:24:9f:d1:
                    d2:61:19:ec:8f:88:d6:a6:45:73:ad:49:7f:a0:91:
                    f0:28:3c:d3:f6:f4:8c:d0:c7:22:32:4c:05:d6:63:
                    36:59:1d:65:c9:cb:b1:27:83:5e:22:6e:a7:16:df:
                    3b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F4:4B:B3:DE:9E:FB:BA:A3:39:49:D9:05:54:94:E3:3C:1F:D3:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8ebb9091-25d9-3251-8058-bf85b410f236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b6:1f:c3:2d:aa:b3:90:3a:be:c1:36:33:ab:d2:ba:9c:ca:
         d4:5d:69:95:0e:56:5b:ac:ed:99:6c:7e:2f:89:f5:45:0f:1b:
         b5:0b:59:e4:6b:8a:87:18:b6:3b:80:49:54:5b:ed:db:4b:29:
         9e:89:21:05:e0:88:95:9e:f4:0c:61:13:b3:02:2f:4b:5e:8d:
         7d:3d:48:54:3a:90:2b:88:91:35:f1:2f:fd:2e:c9:51:50:92:
         39:a5:af:81:ba:36:5c:d2:f4:fb:c2:83:e6:cb:35:96:91:3f:
         b5:78:b9:2a:45:11:ac:e6:e8:23:e6:40:c0:dd:9e:b4:b9:f0:
         6f:4f:18:0b:64:40:8f:2c:ff:2c:e8:51:a9:48:82:5b:ab:ac:
         f6:30:b7:b2:bb:c4:57:c2:91:bd:83:5d:d1:a4:d1:91:28:b0:
         57:19:fb:8a:d6:45:9d:fe:a4:91:78:b0:c1:ac:42:b5:69:69:
         fa:e6:6b:0b:95:c5:ae:fa:41:91:27:1d:29:fb:37:4b:9e:d8:
         07:6e:0c:16:82:54:2a:46:76:43:aa:21:6e:67:a7:ba:ac:43:
         26:5e:4e:b8:d1:9a:6e:91:5a:70:44:84:ad:90:72:e3:d0:18:
         ef:66:b4:c4:2e:91:95:6b:c7:66:61:a5:aa:04:20:15:6b:d0:
         30:28:29:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:44 2026 by rpki-client