Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ec130ce-4d06-3f25-adf1-032f7fc1bdad.roa
File:                     9ec130ce-4d06-3f25-adf1-032f7fc1bdad.roa (raw, json)
Hash identifier:          rcYixooXaJ0J8eHJ+fMYRlRYjIcAztAbxc8UHg8vUGM=
Subject key identifier:   BB:8B:2A:FF:56:D4:DE:0E:EE:B3:BA:DD:A1:17:51:70:FD:0D:37:C0
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DA11AC3601969B0601CF85440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ec130ce-4d06-3f25-adf1-032f7fc1bdad.roa
Signing time:             Sun 26 Apr 2026 01:00:25 +0000
ROA not before:           Sun 26 Apr 2026 01:00:25 +0000
ROA not after:            Sat 25 Jul 2026 01:00:25 +0000
asID:                     20940
IP address blocks:        23.58.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:a1:1a:c3:60:19:69:b0:60:1c:f8:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 26 01:00:25 2026 GMT
            Not After : Jul 25 01:00:25 2026 GMT
        Subject: CN=f3e82661-8872-4b3f-91b8-0c0141f8091c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:7b:c7:28:2b:28:de:56:cd:1c:29:eb:ba:
                    3b:90:64:bc:33:40:cd:63:85:56:f3:19:db:a7:18:
                    7d:ab:b1:a6:44:e7:78:22:20:e2:9d:bb:e4:22:40:
                    a0:ce:8a:86:7c:18:45:9c:1b:1e:3b:3e:60:6e:18:
                    03:de:66:6a:e0:d0:c0:ce:31:a7:ab:e5:67:9c:bd:
                    45:e5:34:44:82:1f:02:53:bf:9c:39:38:12:e9:93:
                    f1:12:57:84:f3:0c:3a:3e:3c:63:f8:9e:18:16:9b:
                    66:e9:43:c0:f4:20:5d:91:23:fa:c5:be:41:d4:7f:
                    a2:86:25:a5:20:50:88:60:22:5a:1f:80:ec:b2:6f:
                    28:a7:21:d2:5a:2e:fb:94:a8:83:b2:e5:64:68:9f:
                    a0:6c:ac:27:11:cb:18:23:b1:b7:d7:fc:41:7b:8e:
                    eb:c3:b3:9b:36:6a:6b:b8:c4:a0:87:43:fc:20:dc:
                    de:1c:96:a7:16:f1:9e:aa:5a:ef:61:9a:44:45:27:
                    2f:16:5a:fc:aa:ba:2d:d8:b6:84:3e:74:22:38:fd:
                    50:b0:63:45:50:df:bb:87:c1:1d:cf:a0:18:62:5f:
                    9f:79:41:0e:4b:a8:5d:12:88:e3:99:e6:50:4f:d9:
                    55:1e:da:d3:95:bb:44:14:7c:04:58:03:a6:26:88:
                    96:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:8B:2A:FF:56:D4:DE:0E:EE:B3:BA:DD:A1:17:51:70:FD:0D:37:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9ec130ce-4d06-3f25-adf1-032f7fc1bdad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.58.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:85:07:5f:57:76:30:32:75:d5:62:ed:cb:4e:d8:c7:15:ac:
         39:f3:61:9e:06:90:84:37:79:24:d9:07:a4:c6:fe:99:91:17:
         e7:fc:bd:f2:28:fa:4e:ae:06:c8:d7:d7:94:7c:10:8e:68:b8:
         e1:e5:b9:54:a2:1d:a2:f7:ce:b9:3b:47:96:f4:02:c6:ad:3f:
         4d:4c:32:ce:6f:6b:a7:da:f1:50:e0:62:eb:22:88:fb:c1:c4:
         3f:8b:93:6b:72:c6:c2:fc:6a:b6:c9:3d:b8:3c:ba:5d:c2:11:
         f0:68:71:46:0f:25:72:13:57:3e:9e:4e:58:79:17:72:42:85:
         2c:11:4f:be:a1:62:05:20:37:bc:ea:80:1d:81:83:23:40:34:
         c6:35:42:67:c1:b9:d4:63:93:da:9b:84:e9:a1:c0:4e:3c:75:
         d8:a6:f8:a2:24:f4:2f:be:5f:4e:aa:a8:d6:e0:3b:f5:14:cc:
         77:12:04:c4:1c:e7:5b:de:ae:17:96:e6:8a:69:ef:c0:9a:a2:
         ae:62:fd:c8:c5:79:4f:ee:42:c0:59:da:bf:8c:af:d7:5e:b1:
         08:cc:35:6f:96:c8:8d:4f:9c:ea:b3:f6:03:7d:10:09:31:78:
         a1:30:63:4b:c7:5a:41:98:8d:87:a4:6f:77:bf:9e:c1:51:09:
         ec:2f:57:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:35:19 2026 by rpki-client