Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b059569a-2485-32db-a39f-fcb6e7253658.roa
File:                     b059569a-2485-32db-a39f-fcb6e7253658.roa (raw, json)
Hash identifier:          wxxOaEJKQiRnCYt/YOKhnVFER6HFBOe4LJu7vkUAhzM=
Subject key identifier:   8F:65:3B:04:6E:02:6D:47:6A:AC:B6:7D:48:70:A5:80:A8:E6:0E:55
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D19B4CC6F32E88AD51424B880
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b059569a-2485-32db-a39f-fcb6e7253658.roa
Signing time:             Sun 08 Mar 2026 13:00:40 +0000
ROA not before:           Sun 08 Mar 2026 13:00:40 +0000
ROA not after:            Sat 06 Jun 2026 13:00:40 +0000
asID:                     20940
IP address blocks:        23.206.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:19:b4:cc:6f:32:e8:8a:d5:14:24:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar  8 13:00:40 2026 GMT
            Not After : Jun  6 13:00:40 2026 GMT
        Subject: CN=18e3f442-bc2d-47b7-a0d9-1a1bfffc8929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:38:4a:70:39:74:65:28:c9:17:10:59:2d:07:
                    bc:00:cf:43:f7:9a:aa:55:c1:73:8f:b2:09:1c:57:
                    4a:09:a2:c8:e0:0f:11:79:32:3b:45:d3:14:8b:9f:
                    36:28:c9:7d:0f:28:9f:2a:92:21:40:e0:54:fa:61:
                    ae:c2:27:38:a2:1b:c4:cd:93:24:12:75:60:3c:fe:
                    68:b8:c4:f1:7b:0d:74:8b:22:ea:46:3d:c9:80:d9:
                    f7:6e:0d:2b:4d:b1:d7:cd:33:1d:c1:e3:21:ad:f2:
                    22:92:ff:17:c1:71:d4:be:79:32:d6:ae:cc:72:3e:
                    36:1d:33:f9:0d:ff:3b:92:66:d1:aa:78:6e:52:70:
                    78:20:28:ce:e2:87:c1:12:2b:7b:f5:f4:d2:68:71:
                    3b:76:24:8a:62:cf:46:11:a1:91:b3:52:da:eb:e9:
                    3c:2e:71:fa:0a:bc:6b:80:37:15:81:96:19:b4:a3:
                    0a:58:6a:3b:ca:af:59:07:41:6f:38:e6:f1:98:af:
                    a9:bb:28:4c:4c:1f:65:27:d8:5b:8c:58:84:46:28:
                    5a:0b:01:77:30:1b:9f:36:0f:94:b7:c4:58:ec:ba:
                    fb:04:9c:f8:64:44:15:9c:6c:8d:76:fd:c8:40:d7:
                    0f:58:66:ed:8b:4a:cb:fc:9d:71:2c:5a:ef:09:8b:
                    31:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:65:3B:04:6E:02:6D:47:6A:AC:B6:7D:48:70:A5:80:A8:E6:0E:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b059569a-2485-32db-a39f-fcb6e7253658.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.206.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:02:7a:80:68:93:4f:85:8b:8d:68:68:fc:53:46:70:4a:01:
         c1:b5:c2:83:89:03:60:1f:75:be:4a:35:82:20:e3:1d:77:e9:
         ee:59:90:ea:39:cf:63:e4:f4:49:04:8f:14:c0:e0:eb:5c:c6:
         38:09:4d:6a:60:74:d7:23:30:4d:1c:20:3b:41:3f:d8:cf:90:
         e9:c6:9a:88:08:ea:16:08:66:f4:d7:a2:0c:86:03:77:52:93:
         b0:6a:0f:2e:56:d6:ee:fa:c9:96:06:89:fb:8d:4c:28:81:bc:
         4b:a1:e8:f0:9d:db:f5:74:66:2a:a1:33:8e:14:0a:bd:49:54:
         a8:ee:6a:70:fb:93:f0:c8:5c:61:df:07:58:f3:77:39:bf:d0:
         03:df:5d:d3:74:79:26:c6:2b:a5:0b:05:dc:06:a7:80:ef:ce:
         d1:a0:91:7c:03:6f:97:d8:c9:3f:88:48:2f:4d:08:70:0d:11:
         55:31:fe:8c:c4:1b:1e:f1:af:b9:5b:10:51:97:5a:f9:c6:bd:
         53:0c:9c:5a:e5:c1:0b:14:60:6c:ed:4a:39:e5:51:31:6f:11:
         2f:34:36:1b:3c:a6:8b:6d:95:e1:aa:ea:42:ea:d4:af:92:f2:
         05:55:e5:4a:cc:96:0c:fa:72:c2:3c:98:cb:30:94:af:74:07:
         2f:3d:7a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 07:02:54 2026 by rpki-client