Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b156937-6266-3f15-9dec-389ae5892091.roa
File:                     9b156937-6266-3f15-9dec-389ae5892091.roa (raw, json)
Hash identifier:          +6gd2tyQMZKNGs8+X3CwlnwC9aky+qNAZrxOjyHNm2k=
Subject key identifier:   1E:EA:04:2A:C9:E7:7D:18:6A:4B:B8:01:B2:9E:F7:00:C4:36:C7:A0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DBE6B287C53D4337212D18580
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b156937-6266-3f15-9dec-389ae5892091.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     16625
IP address blocks:        23.46.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:28:7c:53:d4:33:72:12:d1:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=1e1ffd4a-d85d-4671-88a3-65d00070b35e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:38:cf:b6:86:83:51:01:5e:46:14:16:ca:36:
                    9d:89:7f:f8:ee:22:22:39:5e:5c:9b:6d:a9:13:80:
                    3a:5c:08:c8:65:ca:3a:1d:4b:3d:7f:34:ab:64:ea:
                    f8:94:c5:2e:d9:88:3e:11:f3:9f:4f:b4:8d:47:5c:
                    17:ee:2e:41:01:c6:a0:5a:85:18:65:9f:64:38:83:
                    21:89:70:ad:68:18:43:e4:11:d6:3c:5c:e7:5d:a9:
                    08:f6:d2:78:64:93:2e:74:bc:47:ee:9b:15:ea:b7:
                    3a:2b:58:ce:8b:67:9f:4f:66:17:45:00:d8:8a:d0:
                    e1:39:dd:dd:0c:15:f5:2a:dd:8b:58:da:34:78:d5:
                    5c:4a:28:1a:eb:5d:12:14:5b:34:28:c6:64:66:ea:
                    c7:5f:a0:da:0a:23:17:41:9e:62:bb:b4:93:6c:e7:
                    38:54:d0:c9:21:68:17:db:56:3e:ba:46:74:69:57:
                    e7:0e:e3:5f:05:7a:35:8b:32:de:70:bb:74:d4:d0:
                    dc:61:03:c8:66:1b:d9:83:6a:4c:20:b5:28:ac:6c:
                    01:5c:b2:17:7e:7e:87:90:ca:c6:c0:c6:df:fd:62:
                    34:07:f7:54:cf:be:38:17:58:23:30:fb:1a:b0:66:
                    ec:6b:28:b9:86:58:0f:d1:09:43:2e:6c:d1:30:e0:
                    6d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EA:04:2A:C9:E7:7D:18:6A:4B:B8:01:B2:9E:F7:00:C4:36:C7:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9b156937-6266-3f15-9dec-389ae5892091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.46.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:e3:50:98:d8:2b:6f:45:f9:5f:a6:cd:a0:85:d3:d8:e9:cf:
         9f:f0:f6:c7:e8:14:f2:94:5a:da:82:f9:08:dc:5c:98:72:1d:
         61:b3:00:b7:6e:89:91:67:a3:8f:88:85:37:17:fe:7f:2c:b0:
         cc:52:1b:79:1e:a6:5f:52:26:2a:a4:da:21:6f:83:3c:d2:89:
         3f:0e:64:6c:44:35:aa:e4:08:35:f3:9f:bd:a7:53:4e:c7:fe:
         af:e7:4e:56:22:37:b5:35:24:ca:70:59:76:5e:bc:08:97:8e:
         9e:d6:10:99:47:88:c2:ad:61:8c:8e:d9:ee:b3:16:37:37:b2:
         b6:9f:40:9a:02:16:dd:60:a9:39:e7:3e:9e:1e:38:ff:15:b6:
         12:73:f4:ee:63:72:d2:df:03:48:46:fd:66:88:56:e6:2a:74:
         a7:a7:eb:6b:e4:76:57:fd:b6:c8:70:53:06:a5:7b:cd:65:24:
         6e:b9:86:6e:69:0e:a9:50:c4:27:d3:6a:6c:95:db:f7:e9:40:
         dc:a9:b1:85:74:30:9a:32:2a:66:1e:57:b4:d2:e4:b1:fb:33:
         1b:95:e1:c9:80:4c:99:d1:cd:b0:7e:e1:d8:6a:70:a0:96:0b:
         ce:e2:ad:34:16:8a:d0:a5:ae:0b:c5:cd:e0:4f:1c:7a:52:11:
         d0:41:ae:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:04:44 2026 by rpki-client