Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15ff57ec-9211-37cd-a9be-c7f0cfacba02.roa
File:                     15ff57ec-9211-37cd-a9be-c7f0cfacba02.roa (raw, json)
Hash identifier:          QhZsKIPfJYNqh8UimhFhfUlOkDBwjz11fw1p94cNi3w=
Subject key identifier:   40:5B:F9:20:42:8E:D1:F9:F8:61:0A:54:F1:FE:99:D2:E8:BA:10:AE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA78F1C67C104270D4CC95CC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15ff57ec-9211-37cd-a9be-c7f0cfacba02.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        184.27.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:8f:1c:67:c1:04:27:0d:4c:c9:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=90f19707-71ed-498a-b4fc-c808288481f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:22:18:3b:ba:21:d7:6c:ac:b7:9d:8d:d1:6d:
                    27:f7:87:06:3b:55:a4:53:aa:d7:c0:94:f5:41:64:
                    cf:3f:82:95:24:7d:9f:90:7e:75:16:84:4e:e4:97:
                    9d:2e:14:8e:3d:fd:c9:89:1e:bf:d3:e1:54:30:a0:
                    ed:78:fe:b8:25:6d:18:a5:54:51:cf:08:10:d1:51:
                    3b:35:7b:59:47:80:81:1f:bb:d2:93:0c:aa:e6:85:
                    d1:85:6e:2b:33:82:37:bf:bc:cb:0b:ef:31:2e:43:
                    42:be:4d:da:11:10:92:f6:8c:dc:08:14:44:54:dd:
                    19:c4:07:d1:9d:39:8c:69:26:0f:76:2a:68:69:93:
                    d6:01:05:d3:38:3b:f4:d5:35:c5:18:fe:9a:5e:61:
                    9c:1f:7b:73:7a:35:82:23:07:5d:13:4e:71:bb:43:
                    8a:5f:4a:fe:57:cf:98:f1:40:4c:0a:73:f9:18:08:
                    70:9d:d7:12:96:77:d7:a6:1e:af:1a:db:7d:dc:6b:
                    c4:4e:e4:5c:6f:4a:25:85:70:ee:b4:e1:0f:eb:3f:
                    05:ce:f3:8d:b2:db:96:eb:a6:70:a6:d8:4d:94:0a:
                    cc:be:0c:df:e7:a2:0f:59:61:b8:3f:3a:df:31:db:
                    c6:66:a5:9f:f0:d5:3b:11:0e:96:e6:85:79:a0:70:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:5B:F9:20:42:8E:D1:F9:F8:61:0A:54:F1:FE:99:D2:E8:BA:10:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/15ff57ec-9211-37cd-a9be-c7f0cfacba02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.27.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e3:08:26:56:cd:4b:84:1d:42:36:f7:96:1b:05:a2:e1:3e:
         95:3e:63:e4:d4:ac:cb:53:8f:7d:a9:f5:45:20:3f:6b:f5:28:
         f3:0c:bc:65:09:50:b5:b9:cf:d4:a2:e7:e7:6a:92:8e:e3:01:
         b3:dd:62:18:da:b9:66:24:43:81:2a:a1:94:fe:9b:ec:3b:ed:
         d2:76:08:6a:19:9a:f2:35:4f:0d:ec:f4:c9:d4:6a:b5:7c:cc:
         7e:4d:0f:f7:9c:76:ce:e4:49:84:e2:6d:48:cd:34:60:de:ae:
         4b:1a:3d:fc:bf:ef:8d:fd:6b:37:0d:22:59:90:b4:ee:c9:6a:
         2c:4d:06:c0:b7:fa:99:d5:dc:11:c4:c5:06:9e:69:53:35:aa:
         7f:f9:3d:1e:6c:e3:92:87:8e:a7:76:dc:6e:88:2b:85:6e:72:
         47:e2:7b:ec:12:f6:5c:a7:13:f3:43:4d:09:2a:8f:64:16:ab:
         e5:db:c1:5b:59:38:a9:fc:6a:44:e4:1c:7f:20:f7:56:6d:dc:
         44:74:42:d3:0e:d0:64:c3:b8:b3:22:42:d4:65:f9:bc:d8:c9:
         0a:34:5a:0e:89:1e:bb:25:7a:78:d7:5d:89:1c:0e:9c:16:ec:
         34:83:41:91:18:61:9e:21:54:80:10:c7:6f:0f:99:16:95:c7:
         ab:d7:83:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:30:15 2026 by rpki-client