Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01713301-95bd-3c3d-9c8c-29ee3dcbee8b.roa
File:                     01713301-95bd-3c3d-9c8c-29ee3dcbee8b.roa (raw, json)
Hash identifier:          p/6FgL+VAgToP6XUnL8MFTvQ5TavqiZFHuPFbUXRX58=
Subject key identifier:   57:A9:2C:68:DD:02:DC:EC:F2:70:0F:2C:F6:35:F4:2C:D2:FA:33:39
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F0AA23439B158DB0862F7E7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01713301-95bd-3c3d-9c8c-29ee3dcbee8b.roa
Signing time:             Wed 02 Sep 2026 13:00:12 +0000
ROA not before:           Wed 02 Sep 2026 13:00:12 +0000
ROA not after:            Tue 01 Dec 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        23.212.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0a:a2:34:39:b1:58:db:08:62:f7:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  2 13:00:12 2026 GMT
            Not After : Dec  1 14:00:12 2026 GMT
        Subject: CN=f916d2f3-ba1a-47ee-ac9b-42be31dfc027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:01:06:89:8a:e0:00:f3:ba:0f:66:c8:b7:b7:
                    9b:b3:af:d0:65:cd:4f:f8:75:9f:8a:d5:3e:85:9b:
                    e9:96:01:6a:25:74:80:1e:0d:31:3b:42:7c:63:c9:
                    67:2b:22:a3:7e:59:77:4f:72:ad:b6:8f:b5:9b:d8:
                    41:38:11:04:a5:40:27:9b:e4:a8:8a:0a:8f:fc:ba:
                    f9:cd:11:c3:7a:43:a7:7d:54:88:19:b4:2d:c2:0b:
                    03:72:d7:50:8a:d5:e0:42:0f:f3:da:b0:77:16:91:
                    f4:39:5a:40:3c:f9:90:36:3e:e4:e1:e0:2e:42:bd:
                    57:9e:5a:0c:c6:78:a4:99:02:d9:8d:e2:fa:00:a4:
                    2c:90:ce:c2:3b:ea:b3:d7:04:ea:7c:c1:a3:34:73:
                    f5:d1:24:be:57:66:ac:75:da:41:3d:94:44:44:3b:
                    b7:8c:ec:4b:b9:b2:04:cb:f3:18:59:d1:12:3e:2c:
                    88:80:7c:31:bd:dd:dc:93:c9:ed:19:0a:8e:1d:fd:
                    b8:82:4f:17:04:05:db:6f:36:77:2e:d0:92:75:2b:
                    43:cc:7e:5b:c6:70:01:3a:1e:3e:c8:08:37:b2:28:
                    56:4b:4b:c7:d7:3d:26:66:79:ae:de:41:33:60:ea:
                    01:ff:1c:29:38:35:01:84:ab:c6:23:c4:1f:e5:b0:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A9:2C:68:DD:02:DC:EC:F2:70:0F:2C:F6:35:F4:2C:D2:FA:33:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/01713301-95bd-3c3d-9c8c-29ee3dcbee8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.212.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e8:57:9f:11:83:77:d8:cd:eb:6f:02:05:32:96:d5:e0:ea:
         dc:01:cf:42:0a:6d:1d:81:9e:99:d0:e5:14:7a:2c:61:1f:ea:
         3b:c7:db:eb:47:1b:27:49:1b:50:b8:35:ef:71:35:e4:12:e1:
         1e:44:87:bb:eb:6f:d5:fd:64:25:d8:0a:4c:e3:46:f0:b4:60:
         5c:44:e6:34:e9:4b:76:26:87:61:a2:45:d0:28:a2:d5:c7:79:
         e4:18:5f:97:da:8b:31:f7:f0:36:91:11:33:2c:f9:c8:f8:52:
         56:45:fc:68:a0:54:1d:0c:94:a9:b6:91:1e:f6:10:41:19:d9:
         a9:02:1d:34:9a:3f:a0:f4:63:43:3f:e4:c0:95:44:39:4e:91:
         1f:0f:f6:48:3c:62:3d:4b:d8:ee:25:c6:93:23:c8:f3:f8:e0:
         94:97:f5:d2:9b:55:c9:af:16:28:a7:d5:e6:a1:6b:a6:0f:7c:
         03:24:f6:e5:d4:58:1a:fd:a5:77:6d:61:7a:c5:82:14:4b:eb:
         37:40:c9:be:43:78:59:17:d9:0a:a9:93:51:81:3c:97:25:db:
         7a:df:11:f3:88:32:38:ed:63:f5:e0:04:49:e9:7a:c4:45:81:
         ab:33:81:5a:1d:db:be:65:2a:a1:e0:51:b7:66:8d:73:51:a5:
         9e:67:81:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:28:09 2026 by rpki-client