Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3715f9df-1dd6-3c2b-b03e-bb3bb2dc52d9.roa
File:                     3715f9df-1dd6-3c2b-b03e-bb3bb2dc52d9.roa (raw, json)
Hash identifier:          YWu91D4ZDQ9Hm+EmFt6NdNoEgBwCn9dNKLqAe9UKw6U=
Subject key identifier:   74:4C:1A:E8:44:D0:ED:CF:14:DC:6E:D2:C8:82:35:B0:8E:23:13:FC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EF9E217557C382840008BAEA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3715f9df-1dd6-3c2b-b03e-bb3bb2dc52d9.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        184.85.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:17:55:7c:38:28:40:00:8b:ae:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=b4a2d93e-bfc1-4893-9ec1-342ccdc607ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:bd:d2:5c:f4:5c:a6:c6:d7:02:86:d9:48:
                    e6:fa:21:9c:92:26:3e:c1:78:15:cd:79:61:01:fc:
                    31:11:ec:de:ac:1e:7e:59:45:8e:cb:0e:dd:14:0f:
                    7b:ee:6a:cf:3e:60:8e:c4:b2:ba:5f:1e:0c:21:d7:
                    7f:6d:6f:13:6b:68:97:7b:7d:35:66:bf:d3:f2:fb:
                    44:44:95:e2:af:65:38:3f:ed:21:59:d9:a7:27:4d:
                    6f:3c:60:6f:60:72:6b:42:dd:8c:6a:58:c1:7f:d2:
                    5b:02:04:3e:65:43:13:5d:06:10:e5:ba:21:be:49:
                    78:3a:3e:58:9d:41:11:80:1a:76:77:2a:2d:16:09:
                    13:3a:a1:fb:27:48:9e:52:54:b9:c6:9c:f4:d2:66:
                    ad:a2:16:ab:2a:70:9f:0c:7b:d0:6c:52:0b:f8:d8:
                    42:26:4b:1a:da:d7:66:3b:f2:d0:e2:5b:34:38:39:
                    0c:db:b7:ef:80:9f:f1:c3:78:bd:dd:27:d2:46:c3:
                    8a:9a:4c:38:6c:3d:8c:f4:a4:cc:d2:76:66:f9:42:
                    20:78:46:25:16:37:ae:53:e8:78:e0:5c:72:74:93:
                    ea:4f:7f:86:1e:6c:a8:3e:72:39:4c:26:cf:e0:03:
                    eb:f0:a0:48:b6:10:88:cb:af:e4:18:9d:92:3e:f3:
                    0d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:4C:1A:E8:44:D0:ED:CF:14:DC:6E:D2:C8:82:35:B0:8E:23:13:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3715f9df-1dd6-3c2b-b03e-bb3bb2dc52d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.85.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:61:e1:62:56:b3:b4:8a:ba:53:f4:75:02:3b:66:66:f0:fa:
         fb:29:e2:f1:4a:17:4c:47:34:88:56:bb:2f:f2:56:60:58:35:
         26:11:c0:a3:90:8e:6e:ce:f1:bf:3d:b4:1a:3c:28:53:1d:3b:
         99:2d:20:e4:37:ab:0a:f2:08:dc:1c:4d:1f:38:79:3b:68:10:
         1f:57:a5:b2:98:b6:b4:a1:9b:44:80:bf:b8:63:ce:39:2d:30:
         65:a7:93:d5:bb:fa:78:e3:41:2c:8f:dd:00:b2:68:08:cd:c2:
         bf:05:1e:08:b9:ca:af:29:18:88:33:03:fc:5d:94:a8:31:79:
         77:1d:b2:1b:e5:0a:5d:79:54:04:26:13:c9:b8:b7:58:40:f5:
         98:3c:17:d1:8c:78:bc:8c:79:f2:ae:1b:b6:34:30:81:3d:ca:
         c5:18:65:8b:be:92:13:b6:88:1b:ed:55:bb:35:9c:fe:a3:e8:
         58:92:5f:80:be:30:99:d7:7a:7a:22:73:f6:99:74:c7:06:d0:
         39:54:4e:ef:de:55:ef:4b:ab:bd:30:7a:30:8b:71:e2:8a:b3:
         23:07:56:5f:f9:0c:e0:45:b7:4b:3c:c3:6a:76:ed:9f:4d:ae:
         9b:60:47:70:78:09:2e:6a:68:98:ab:09:bc:94:36:83:bf:d4:
         79:5a:c1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:42:41 2026 by rpki-client