Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94c331c5-6d90-3c6f-8325-f27ec5616ae9.roa
File:                     94c331c5-6d90-3c6f-8325-f27ec5616ae9.roa (raw, json)
Hash identifier:          VuGvOD2rrF8jgZSTiPPB7C6Qw3eqDBLpGB+KyLbzLUk=
Subject key identifier:   8D:4F:20:42:9E:91:AC:F3:CB:39:AC:D1:E8:D9:71:1D:B1:9D:8E:29
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DBD05ABC6C51275C1656ABFC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94c331c5-6d90-3c6f-8325-f27ec5616ae9.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     35994
IP address blocks:        23.44.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:ab:c6:c5:12:75:c1:65:6a:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=a80af91e-6524-4afc-8d5e-369dffbf0d88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5e:e4:a4:fe:6c:cb:ad:c2:1e:dd:e9:e6:39:
                    f3:87:90:ef:58:1e:2c:fe:6f:09:f3:d7:ec:68:16:
                    5f:00:4d:28:1a:55:b3:59:48:71:39:13:76:66:25:
                    78:fe:f6:a6:ce:6b:3e:b4:54:ca:1d:83:e6:9b:38:
                    72:a6:80:46:ba:ff:bf:41:29:f9:76:60:31:1b:bc:
                    c5:bc:07:e7:53:1e:86:cc:a7:11:c9:5a:63:b2:7a:
                    c3:c5:45:50:3a:a4:ce:7e:d2:39:66:b2:10:1b:79:
                    16:c3:14:49:fb:d3:63:33:56:c1:e6:88:01:64:ec:
                    cc:cb:d5:e8:65:fc:44:25:09:e7:34:7e:ee:48:70:
                    a7:91:01:95:f3:2b:d0:be:68:7e:b7:2a:2b:e3:dd:
                    2d:3f:65:6a:3f:6d:fa:a4:86:79:73:15:69:f3:a0:
                    34:9c:7a:29:0a:27:bd:65:37:9d:7b:86:af:c8:ca:
                    0a:8b:8b:a1:0e:5b:3d:cd:0c:b4:97:5d:65:54:26:
                    5e:29:ce:da:71:8c:d4:12:23:5b:71:f4:c2:4b:b2:
                    91:76:09:ce:1d:72:40:5c:b9:0b:86:ff:b7:4c:39:
                    a1:34:1e:30:67:3f:2d:f8:e2:7c:ee:7a:48:1b:59:
                    53:b0:99:5f:d1:cd:32:c6:5a:dc:d0:ce:2a:3e:29:
                    52:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4F:20:42:9E:91:AC:F3:CB:39:AC:D1:E8:D9:71:1D:B1:9D:8E:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/94c331c5-6d90-3c6f-8325-f27ec5616ae9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.44.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b8:dc:6d:de:b4:88:b2:06:28:68:53:cc:57:98:77:3b:ef:
         09:59:9b:bc:33:e7:07:27:13:81:a3:28:e4:3f:60:be:d8:5e:
         60:30:6f:ee:93:6c:a6:16:2e:72:ed:b3:b1:66:1c:dc:d6:f2:
         88:c1:7b:ce:8e:0f:e6:b2:00:dd:e9:26:4b:1e:45:df:a7:83:
         b0:25:a5:e5:6d:95:69:fd:11:7f:dd:f2:55:f4:e8:15:a0:d4:
         80:20:6d:5d:33:5c:38:5d:4e:bf:16:8e:7a:27:84:9f:44:b6:
         08:15:b7:0a:67:1f:b2:ad:ed:35:fe:8d:8d:a4:7a:39:57:5c:
         4e:ff:ae:40:06:28:d3:a1:08:bd:97:4b:95:84:59:9e:b3:c2:
         88:30:f2:39:07:86:51:70:87:4e:35:ed:bc:0f:e0:93:ac:57:
         e0:a1:cc:98:00:e3:51:b5:c7:5c:28:ad:db:b0:c9:40:5d:4b:
         8a:26:02:11:38:da:53:cb:3d:87:78:87:d1:0f:f3:53:b7:b3:
         08:88:94:a0:9f:2e:4a:52:54:b6:56:6f:9f:36:b9:c9:3b:03:
         26:f3:ec:85:3b:a7:ca:d7:d3:83:20:95:7b:00:8f:17:e6:f5:
         db:e3:06:fc:80:1c:93:0c:21:cf:d2:3e:41:43:a1:3a:a9:8f:
         55:fa:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:53:52 2026 by rpki-client