Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3a4254c-0c2e-31d6-8b92-f68caca61e13.roa
File:                     a3a4254c-0c2e-31d6-8b92-f68caca61e13.roa (raw, json)
Hash identifier:          4zeaojLHO2eI5pKgWOhXEvdiTIsA2zLvMm/a/qFsIN8=
Subject key identifier:   C0:25:81:E8:95:10:4B:D9:98:41:D8:FC:27:00:50:38:2A:BE:07:4C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DBBA05A74E3BEDD5D00F7F200
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3a4254c-0c2e-31d6-8b92-f68caca61e13.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     35994
IP address blocks:        23.36.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:5a:74:e3:be:dd:5d:00:f7:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=75f61ea4-2635-4205-90c1-bb2ad382cae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b7:d4:24:e7:21:2d:2c:f6:62:66:48:a2:1e:
                    87:65:c0:50:05:d4:82:2e:87:3d:6b:e4:a3:67:3e:
                    38:2a:08:fa:66:4e:c6:e4:e6:5c:9d:98:5e:bd:88:
                    93:ca:7f:23:3f:36:ef:d9:9d:ef:4d:5e:02:1a:60:
                    b9:a9:3f:29:d2:51:42:97:59:fc:84:4c:cd:1f:d1:
                    66:91:6f:f1:97:f8:eb:8f:f5:8e:45:a8:98:2c:3a:
                    57:c6:13:26:92:fb:bf:34:18:0e:dd:92:d6:ed:fe:
                    db:5e:81:34:e7:cd:96:4a:7b:39:22:c1:8d:04:a1:
                    d1:36:64:74:5a:a5:1e:3d:7b:d1:e6:49:ad:ca:97:
                    ad:b7:b4:fc:61:dc:ae:1a:a5:e2:9d:1e:d2:5b:ec:
                    7d:3e:a8:8e:54:42:36:f7:3f:27:d2:b0:fa:52:46:
                    47:e9:97:97:d0:54:a7:9c:1f:a2:1a:4b:9b:ed:e7:
                    53:dd:85:3e:e2:af:71:c3:7b:d7:bc:41:27:e6:07:
                    c3:06:8f:86:2e:1b:92:78:bc:6e:48:4b:de:de:29:
                    91:4d:22:d9:b2:2c:2b:75:73:fa:c4:f1:51:cb:ac:
                    01:de:de:9d:29:1e:24:75:50:f3:1b:b1:03:9c:56:
                    20:71:33:98:5d:56:80:ca:b2:8d:8d:25:35:25:9e:
                    af:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:25:81:E8:95:10:4B:D9:98:41:D8:FC:27:00:50:38:2A:BE:07:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a3a4254c-0c2e-31d6-8b92-f68caca61e13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.36.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:86:86:16:a3:bd:c4:19:44:bc:67:e2:4e:ab:70:8e:13:ce:
         37:65:7b:92:aa:59:a9:24:71:c8:a9:07:f3:0a:23:8f:a9:42:
         f0:f9:e2:26:a6:f0:f3:a8:19:5b:7a:21:67:96:0e:e8:f0:2f:
         15:91:b2:fd:80:85:7f:7d:19:80:b1:1c:3d:56:68:ba:ab:21:
         5f:7c:64:53:7f:0d:64:4a:ac:bc:91:c6:a2:6f:4e:87:9f:4d:
         4a:fc:3b:69:c2:5a:bf:a6:cb:80:67:00:bf:ea:80:77:c6:e5:
         90:fc:1f:31:94:9d:1b:29:b2:02:dd:a9:6c:7d:d9:6c:17:c8:
         d9:8f:98:a4:ca:cd:4e:93:e1:87:fc:e8:92:11:69:b2:1a:3b:
         98:69:f5:61:19:5e:31:23:13:13:ad:43:3e:ef:8a:7c:35:a8:
         cc:83:9c:29:71:b6:de:b2:75:9d:92:7b:28:ec:32:50:3f:a9:
         03:90:d6:04:95:88:3f:ba:a8:6b:3c:92:03:29:bd:3c:69:cb:
         eb:81:43:5c:ea:f8:d5:1d:fd:5a:34:05:57:bb:ab:18:99:ac:
         9a:1d:a5:53:35:7b:d1:1a:7d:b9:d5:93:3c:63:99:43:57:bc:
         dd:47:e4:a1:f3:96:35:b5:07:e9:36:a8:8c:5b:c1:a2:00:31:
         54:16:f3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:51:47 2026 by rpki-client