Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45cfae92-96c2-3bb0-b826-d7155419eb9a.roa
File:                     45cfae92-96c2-3bb0-b826-d7155419eb9a.roa (raw, json)
Hash identifier:          pnKv4PTpn6ysAbrGKC8FBfTqE7JkVrK7h7P0/BI0NEs=
Subject key identifier:   80:5F:60:92:BA:8F:FB:8F:5D:64:69:B8:6A:E6:33:38:1E:E6:B5:59
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EE38C97F2E93BC0F307BF8300
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45cfae92-96c2-3bb0-b826-d7155419eb9a.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     35994
IP address blocks:        23.1.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:97:f2:e9:3b:c0:f3:07:bf:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=5eeb3a45-3557-4da5-9f01-50f44a11572e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0e:fa:f5:5a:94:c7:41:cc:8b:78:d1:af:aa:
                    7c:e2:0e:7c:0a:ca:70:e9:e3:76:2d:fb:ea:d6:6c:
                    53:bc:9d:c0:db:66:87:5f:4c:43:09:fb:c0:99:27:
                    ee:f8:de:c6:fe:f1:ae:70:fb:cc:f3:68:0c:71:c2:
                    d8:8b:62:d7:d7:25:7b:ca:d8:05:92:56:66:e0:9d:
                    69:85:de:ed:07:f8:ac:65:87:59:10:2e:99:2d:e2:
                    d9:14:ba:e0:dc:06:ec:b0:64:ea:20:82:c2:6c:8b:
                    12:4f:ee:66:39:e9:d4:20:dc:a5:bb:2a:67:36:3e:
                    74:05:46:40:29:45:82:e6:33:f9:12:b2:5d:e9:fb:
                    59:7d:d1:78:d8:ad:b5:f5:fe:ce:33:cf:3b:c3:4c:
                    b3:a4:6e:7b:a9:49:0c:ec:e3:62:1e:63:a4:7c:11:
                    79:ae:31:a7:09:ce:51:a5:e3:80:04:7a:36:ed:1a:
                    29:4a:fb:ae:ed:87:b2:c1:53:48:f3:dc:0c:45:a8:
                    f7:8e:da:20:c3:26:56:45:43:86:d3:cd:c6:89:fd:
                    4a:4c:e7:74:d0:a9:07:a7:41:b3:97:ee:2a:7e:35:
                    01:05:8e:94:1b:be:5d:07:24:1b:4c:98:3b:f8:3a:
                    11:fb:fb:c7:86:50:1c:43:31:de:c3:42:ae:b4:59:
                    f5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5F:60:92:BA:8F:FB:8F:5D:64:69:B8:6A:E6:33:38:1E:E6:B5:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/45cfae92-96c2-3bb0-b826-d7155419eb9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.1.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:01:4d:6e:50:51:bc:bb:08:8f:6a:cd:76:75:fe:97:86:e4:
         a3:e2:22:dd:96:e6:2b:1e:81:84:02:ec:32:94:b0:45:12:61:
         09:c9:a8:0a:72:a0:33:dd:bf:b7:85:0e:41:d9:be:08:a4:51:
         98:a6:a1:a0:98:c0:aa:20:18:4f:2f:aa:31:3a:c4:22:b1:fa:
         b2:34:93:54:5c:93:4c:75:91:fb:00:15:6d:06:ea:f0:3a:2a:
         01:9c:a4:da:25:ac:fa:e4:ab:85:fd:ca:80:b3:4a:55:84:49:
         eb:0f:ab:97:8e:e8:13:31:43:36:ec:2a:4c:a4:c2:85:af:a3:
         e0:0e:bf:63:38:a8:3b:5c:ef:4d:97:ba:69:c1:4c:3f:80:0c:
         1e:8d:c5:22:b1:0a:dc:73:7a:f1:43:86:ee:c2:c1:69:39:37:
         0b:e6:91:1d:ea:04:90:be:d5:c4:69:ac:aa:20:4b:0f:d0:81:
         50:90:77:2c:a8:c3:ef:94:ff:b6:e5:32:2c:06:cb:59:f6:62:
         f9:08:ed:96:b9:45:a3:16:7b:31:f1:42:bf:72:f3:b5:69:86:
         69:ba:df:65:6c:3a:cf:87:d6:14:b2:5d:25:1f:be:87:25:15:
         d3:53:d2:14:73:3b:6d:26:94:7f:20:0d:71:1e:bd:ff:4a:19:
         f0:9b:97:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:28:22 2026 by rpki-client