Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcb48035-f38a-3ac9-8916-4b46e6bc9112.roa
File:                     dcb48035-f38a-3ac9-8916-4b46e6bc9112.roa (raw, json)
Hash identifier:          UjRWDI7i7+SfJDzhDXazTzz7dcX9fU5tH8iBTzmbSkM=
Subject key identifier:   61:5A:5F:A8:33:58:5E:55:5D:35:4D:C6:37:2D:0F:F5:EE:33:C2:D4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D9FB58322CF9813716CA74D80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcb48035-f38a-3ac9-8916-4b46e6bc9112.roa
Signing time:             Sat 25 Apr 2026 13:00:30 +0000
ROA not before:           Sat 25 Apr 2026 13:00:30 +0000
ROA not after:            Fri 24 Jul 2026 13:00:30 +0000
asID:                     35994
IP address blocks:        23.53.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9f:b5:83:22:cf:98:13:71:6c:a7:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Apr 25 13:00:30 2026 GMT
            Not After : Jul 24 13:00:30 2026 GMT
        Subject: CN=c1933138-d2c2-4cd1-9a70-215437e20f03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:e2:0f:03:e7:b9:9b:e5:62:0d:26:e7:0b:
                    1a:49:c8:62:f9:41:95:f3:5b:24:93:a3:b5:8e:8d:
                    d9:37:c1:20:9f:e0:20:f8:a5:0e:59:32:7e:98:6c:
                    1e:35:af:ff:dd:4e:61:90:0f:11:d8:95:1a:95:89:
                    44:21:7b:15:ee:69:56:38:be:96:0b:96:63:73:5e:
                    02:6d:96:7f:ba:64:b7:20:b5:69:d8:16:70:67:ef:
                    68:04:15:b3:36:e2:30:a8:fe:3a:12:cd:65:bf:32:
                    95:eb:3f:b6:b3:8c:0f:84:13:d2:d8:01:57:2b:e4:
                    fe:8e:1d:8a:58:fc:c8:08:5e:d7:6d:52:a7:1e:77:
                    f4:65:f0:e6:5b:72:4a:a3:8e:42:29:6d:95:53:f8:
                    78:ec:a1:61:b0:dd:77:b8:fe:6e:d3:a4:ff:5a:21:
                    a9:5a:38:87:50:79:39:aa:62:b7:fc:05:6c:51:b9:
                    98:c4:31:dc:8d:c8:4f:41:81:a7:cb:63:30:41:75:
                    e8:cc:06:d0:8c:7b:e7:1b:22:fa:6b:ed:3a:1e:e1:
                    f6:a5:a6:02:5c:1f:ea:7e:63:29:30:02:74:ac:91:
                    71:1c:a6:e5:b5:30:96:b2:c9:62:1a:7f:90:73:72:
                    e6:1a:34:2c:f5:11:be:fc:e4:d7:93:c4:58:6c:52:
                    7e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:5A:5F:A8:33:58:5E:55:5D:35:4D:C6:37:2D:0F:F5:EE:33:C2:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dcb48035-f38a-3ac9-8916-4b46e6bc9112.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.53.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:5c:bc:0e:49:fa:31:0f:f6:9a:b7:36:7c:74:25:82:c6:eb:
         c8:ba:76:cf:07:bb:44:c6:53:57:47:df:cd:73:8c:15:23:67:
         3f:7d:68:12:5d:73:f1:bd:6a:ff:a3:f7:80:62:13:4a:35:4a:
         d8:87:62:ef:39:45:d0:6f:43:42:e1:66:67:a4:f7:10:af:92:
         ab:40:3d:45:6b:fc:cb:ad:15:eb:14:49:6d:c3:f0:a0:dc:c6:
         42:3a:17:22:cf:0e:f5:fb:5b:90:54:c0:0f:73:ee:67:21:0d:
         de:81:14:47:45:04:23:b6:8e:14:de:a0:59:93:0d:10:d2:5c:
         98:f0:ee:95:c2:26:d2:1c:57:7e:2e:d3:b8:57:e4:4f:55:f5:
         e4:93:e4:07:c7:c0:92:ab:72:01:d3:aa:dd:ff:0a:f6:34:62:
         32:32:c7:25:cb:86:23:02:88:f5:7f:64:29:37:a8:e4:b6:9e:
         63:0a:0c:4b:0d:80:c8:d1:25:aa:1c:c5:31:be:ff:87:bb:fb:
         d0:09:4a:9f:8b:2e:34:b9:13:18:db:1c:8e:d9:00:48:b9:73:
         75:54:86:41:87:b6:b7:2e:63:f9:18:85:f5:eb:20:6d:46:ee:
         1b:a2:b4:f8:68:28:a2:e1:a5:6c:0e:5f:bb:0e:ee:73:1c:7c:
         53:f9:66:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:29:56 2026 by rpki-client