Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bd082a6-b69e-3779-a6c6-cd878d479060.roa
File:                     3bd082a6-b69e-3779-a6c6-cd878d479060.roa (raw, json)
Hash identifier:          37FNc4S8G+LrgLlLE7dnJZtoOoTBjLnpWUVh8yGOfec=
Subject key identifier:   AF:B8:00:16:1A:26:2E:A8:16:C0:22:66:46:65:A0:8E:AC:69:74:41
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F093D029DBC232FC3368375A0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bd082a6-b69e-3779-a6c6-cd878d479060.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        23.3.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:02:9d:bc:23:2f:c3:36:83:75:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=5b03e31c-50f1-4a61-9ba0-1a258b538ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:41:6e:43:e6:f5:16:50:15:ec:51:be:5f:7a:
                    66:29:60:02:b0:d9:b2:84:b4:11:dd:a9:87:6d:36:
                    b9:8f:1b:b4:c0:16:88:95:e4:a2:ea:c3:89:04:d8:
                    d3:ec:bb:45:f3:2f:d6:f1:0d:03:81:e6:4a:b7:79:
                    c0:06:47:0d:23:14:2a:ca:26:1d:71:c0:c6:62:19:
                    69:f6:dd:c9:28:fc:3b:af:c6:0a:e0:66:10:b7:a1:
                    e6:19:09:13:bd:33:19:91:1d:c9:ae:9b:f9:93:f1:
                    d3:27:38:73:54:b3:6c:26:93:cc:d2:6b:35:47:d6:
                    79:9e:b3:c0:62:b3:7b:84:e9:85:ec:d6:60:b3:91:
                    83:0f:45:f0:8c:66:93:7f:c4:45:97:3b:8a:1a:71:
                    f7:d7:72:7b:76:36:cd:09:a8:a9:42:02:2e:8c:ca:
                    0a:b2:dd:14:24:f6:f9:13:50:db:be:91:b4:dd:8c:
                    5f:25:f1:75:31:8e:21:c0:a5:31:cb:1b:87:16:65:
                    20:25:01:12:a7:19:77:09:4d:8d:4a:52:69:2a:c6:
                    a7:ac:94:d4:0f:bb:11:f3:b6:40:8d:a3:2f:08:ea:
                    7b:e7:60:2e:7b:c5:5d:11:7b:4c:22:a9:d3:29:fc:
                    d4:cd:67:38:da:25:91:74:7d:36:98:1a:58:24:a0:
                    80:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B8:00:16:1A:26:2E:A8:16:C0:22:66:46:65:A0:8E:AC:69:74:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3bd082a6-b69e-3779-a6c6-cd878d479060.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.3.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:41:d3:45:ec:4e:5c:75:f6:ce:08:72:fa:20:ba:65:e1:b2:
         b5:75:60:a3:e7:d4:62:3b:e9:5a:8a:a2:59:47:67:14:98:35:
         b4:5b:df:dd:12:74:11:38:12:1e:ac:39:6b:4d:19:53:90:86:
         a3:90:f1:c2:7e:9e:ed:45:f6:a0:54:ba:cd:cb:a7:d6:d4:73:
         7f:ac:8b:ab:a6:87:09:f4:cd:05:05:83:55:c2:3a:a0:54:d2:
         42:4d:68:99:4f:c6:88:89:87:b9:56:53:a2:17:ab:b3:71:54:
         97:4c:67:86:44:6b:2c:5e:61:7d:ea:78:50:73:62:28:60:0c:
         68:a0:96:4b:39:6e:9f:75:34:48:41:8a:da:f8:9a:fb:cb:4b:
         f2:6a:17:8f:6c:5f:c3:ea:5c:64:66:d8:8c:85:66:df:63:45:
         46:36:09:c6:53:f2:11:18:6d:3b:39:11:74:0a:c0:44:84:8a:
         ca:56:b4:fa:4c:b3:80:c9:ea:9c:d9:93:d2:af:6a:b6:c3:4f:
         ba:c1:40:bf:35:41:63:f7:92:b4:94:68:82:32:02:0a:13:50:
         a3:29:83:22:00:8d:89:f0:bc:81:81:4a:23:45:3c:12:66:59:
         53:e5:be:b0:e4:9f:ab:5e:fb:3f:00:b5:04:a1:6e:53:9a:d7:
         cd:3c:69:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:45:50 2026 by rpki-client