Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23963b0e-3613-3e78-8347-712a0f14cd74.roa
File:                     23963b0e-3613-3e78-8347-712a0f14cd74.roa (raw, json)
Hash identifier:          hFUu7hMuWhGGiV0fKVoklSB/Kn+aX7PUhXiVc4hTp+c=
Subject key identifier:   E9:3C:51:5C:17:9D:62:C6:33:9C:BC:18:F0:04:C3:8A:45:98:C6:65
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA79B0E53DF34704DDDAD8B00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23963b0e-3613-3e78-8347-712a0f14cd74.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.215.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9b:0e:53:df:34:70:4d:dd:ad:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c01c4860-94e2-4b65-964e-703c8fb71d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:a8:e8:17:ac:92:80:a8:b8:d7:75:a9:ef:
                    4a:bf:d4:9e:79:a1:9e:13:af:06:2a:fa:b3:90:a1:
                    5a:60:cb:c8:b3:0c:6b:cd:28:7d:e7:11:6c:ee:2f:
                    7d:9b:06:d3:fc:80:5b:98:98:ac:09:e5:56:4f:a3:
                    c7:b5:98:50:54:b5:ef:cd:ba:41:f3:9e:01:0a:2f:
                    f5:34:29:aa:d1:bf:96:f4:05:85:f1:88:d2:b6:98:
                    22:86:0f:c6:02:1b:0d:c1:ec:1f:b5:54:4a:d1:ca:
                    37:cd:65:47:1c:a4:58:58:02:73:1e:3f:a8:d4:f9:
                    2a:93:13:55:be:cd:60:8a:71:7a:88:56:4e:ae:12:
                    6c:af:ec:b6:21:ae:f9:6c:d0:6c:2a:92:09:2c:c1:
                    3a:6d:22:6e:b1:e2:52:24:ef:ac:9c:6c:ae:e6:20:
                    da:2a:52:21:5c:48:c8:10:89:07:64:a9:62:f9:5a:
                    21:fe:61:c7:1f:a5:92:00:cc:37:23:c5:b8:40:28:
                    4c:9b:9b:6c:57:44:81:ae:7e:c0:0f:85:9e:ab:06:
                    37:f4:8e:9c:96:2e:90:9e:0f:bb:d6:f8:8d:98:3a:
                    6f:03:bc:d0:a2:d0:bd:1e:b5:16:a2:6f:fe:7f:63:
                    25:d2:57:cc:24:4f:28:95:06:39:db:fb:28:0a:79:
                    61:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:3C:51:5C:17:9D:62:C6:33:9C:BC:18:F0:04:C3:8A:45:98:C6:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/23963b0e-3613-3e78-8347-712a0f14cd74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.215.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:89:33:f3:b3:86:ac:7b:6f:47:b8:5f:6c:2d:c1:53:ec:f0:
         5d:1b:88:77:0b:b3:ab:81:63:11:0d:c7:f3:a5:53:f2:f1:99:
         9a:7f:da:0e:c4:fa:26:70:1c:1c:df:4a:14:a5:2e:27:37:06:
         a7:88:eb:7d:7f:c2:7f:67:e8:39:8d:66:c1:26:18:68:3c:00:
         c6:e6:9e:5d:8c:d5:ff:50:28:bb:ed:71:cb:be:67:de:c9:12:
         3d:35:f0:20:1a:14:72:8e:6f:d1:13:72:73:bf:1f:e6:93:0c:
         87:ae:2f:e3:e3:fd:27:ea:23:c5:7a:ac:30:f3:85:04:f2:4e:
         5d:94:99:d4:5d:fa:6d:1d:1f:97:f9:cf:d4:df:fb:c2:97:d9:
         3b:66:ba:a2:5f:22:71:fb:b0:1e:fb:85:5e:74:2e:ce:a9:75:
         16:e5:63:70:80:fb:6c:89:52:9e:ed:06:f6:d0:5a:31:e2:f0:
         e4:72:ba:7d:57:a3:aa:de:48:0e:92:14:39:3a:f5:d4:54:7e:
         b7:f2:a9:dd:65:30:7b:fd:7a:f0:b9:2a:16:ff:3b:3a:0a:4b:
         ff:28:89:5d:52:43:84:73:27:28:16:c7:99:a6:85:fa:76:e9:
         9a:3a:eb:44:79:b0:e0:70:6e:36:0e:02:d2:3e:3e:99:8f:3b:
         0a:ac:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:52:57 2026 by rpki-client