Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2d8447f-e22e-3da5-b5ae-7304194c5941.roa
File:                     e2d8447f-e22e-3da5-b5ae-7304194c5941.roa (raw, json)
Hash identifier:          7ivMDj4QIT+G9fIuziqNMficPQNSykeFiLdWumDUUbc=
Subject key identifier:   4D:27:1F:A5:BA:27:8F:66:53:EB:66:3D:64:C1:F1:3E:79:9E:B1:BE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584DBE6B29AACB283D18A2482440
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2d8447f-e22e-3da5-b5ae-7304194c5941.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     20940
IP address blocks:        23.46.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:29:aa:cb:28:3d:18:a2:48:24:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=dda10eca-ce17-4253-ba0c-630cd3302700
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5a:72:64:66:6e:08:38:c4:e6:29:99:30:fd:
                    e9:20:94:a4:fb:49:5b:51:01:38:b0:e7:70:2d:1a:
                    02:52:c0:5c:cb:94:f6:f7:2c:af:ea:97:f6:09:53:
                    39:b6:c1:8c:d8:1c:16:69:70:7b:97:07:9c:e2:e1:
                    41:19:9f:40:87:56:22:47:20:f3:24:9d:f9:cd:0c:
                    ae:fb:6d:ef:7e:f0:e2:71:8c:d3:4e:ef:b7:b7:fb:
                    47:21:53:94:d9:88:bf:cb:5f:2e:dc:cd:b5:3d:4b:
                    19:38:5b:3d:ee:a8:13:8c:db:5e:c4:09:19:67:c3:
                    b8:22:29:b1:34:64:fc:12:0d:03:e6:f6:fd:7a:19:
                    4e:3a:21:74:69:9f:19:68:0e:e5:17:30:4a:05:07:
                    b9:f5:97:04:71:69:6c:e5:a8:96:01:8d:a5:e3:d0:
                    c6:38:b2:e6:93:7d:4f:1c:93:36:6e:ce:86:f6:88:
                    67:cb:ef:26:c3:0b:bb:e8:a6:a9:59:45:9f:2f:68:
                    e5:60:ea:26:7d:aa:58:dc:68:34:db:0c:57:6a:41:
                    c9:e4:22:8a:1b:8c:09:c5:9f:e2:70:e1:12:4c:bc:
                    4a:99:32:c6:d7:4d:95:89:59:30:b0:c0:23:75:1d:
                    62:c5:0e:18:a7:d1:9a:af:19:aa:bd:d2:89:8c:4a:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:27:1F:A5:BA:27:8F:66:53:EB:66:3D:64:C1:F1:3E:79:9E:B1:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e2d8447f-e22e-3da5-b5ae-7304194c5941.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.46.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:08:c5:94:da:ca:5a:ae:64:ae:51:92:da:e4:b2:f1:a5:52:
         08:21:b5:96:78:59:c4:48:97:5f:f0:29:1d:74:c7:a1:c3:a5:
         c9:6e:50:3c:11:1c:ba:90:3a:d5:c3:6e:43:c0:ba:d8:c8:ce:
         5a:13:48:c3:3f:6f:6c:39:40:8f:ff:44:70:d2:92:0f:6e:ae:
         d4:c3:25:dd:55:1a:ca:21:a7:10:da:35:88:34:6c:11:00:24:
         6b:14:c7:a3:6e:c5:fe:44:f4:96:6b:85:bb:28:10:c4:71:3f:
         50:08:c4:9b:9c:8e:86:5c:ad:59:ce:c6:f4:12:31:3f:3a:d0:
         50:0c:1b:4c:41:2f:96:70:4c:ca:24:72:1f:cc:00:dd:e2:c4:
         cd:ac:89:74:f1:db:59:07:ee:c8:41:1f:d8:fc:93:06:8a:ef:
         f8:10:04:d8:d3:55:f0:eb:3e:25:55:03:b6:8f:4c:e9:29:9a:
         e7:05:65:55:0a:d5:bc:78:e0:dc:38:2e:6e:48:85:b6:1f:c0:
         c8:bd:d5:00:b3:b7:39:21:49:2a:b7:ce:a5:e6:99:62:9e:e2:
         93:ee:fb:f7:1c:c8:7c:7b:9a:41:1d:e0:83:10:3a:eb:ce:9f:
         64:eb:4a:36:a2:84:54:ad:0e:6d:4c:7a:c2:5b:49:91:32:34:
         e0:56:bb:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:11:59 2026 by rpki-client