Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49e9bee5-5a92-33ae-b1a8-ffc992d26a61.roa
File:                     49e9bee5-5a92-33ae-b1a8-ffc992d26a61.roa (raw, json)
Hash identifier:          rBQbob5CI2hVRpUYZqTHCKwEiRCxX23FnvD7Hnaold0=
Subject key identifier:   DA:47:BA:E8:8A:4F:D9:14:E8:25:1F:CE:BD:F1:26:0B:72:85:DD:B8
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EE0C2182421D73E91309AAEC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49e9bee5-5a92-33ae-b1a8-ffc992d26a61.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        23.195.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:18:24:21:d7:3e:91:30:9a:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=0f59bbc6-bb26-4409-b516-55dfdc3fbc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:02:f6:79:d8:6d:f7:bc:9e:00:0c:e7:bd:a0:
                    3d:45:82:bb:f2:7e:98:68:83:81:62:b7:16:bb:af:
                    c8:d6:01:96:3e:99:d1:56:6d:35:79:e0:a2:f1:fb:
                    a3:42:21:6e:f4:5a:3a:f6:c4:4c:70:8e:9d:e2:11:
                    88:d5:ba:30:b4:6f:7a:1a:af:ba:4f:7e:ae:da:47:
                    2f:4a:40:64:c0:54:ee:ef:06:50:87:a9:74:f4:10:
                    4b:e3:fc:4b:fb:48:b1:c5:9e:00:21:f1:c1:62:1d:
                    05:d9:5a:80:95:c8:1b:9d:02:46:d6:da:00:cd:d1:
                    08:35:86:c7:f9:80:7d:b0:8f:ee:95:84:fd:04:3b:
                    7b:94:71:69:de:41:1d:40:1c:9c:2a:09:93:d3:5b:
                    93:ed:23:4a:81:b5:f9:f0:18:87:48:b8:9a:be:5f:
                    39:dd:5d:e3:0f:43:92:fc:80:b3:c1:06:bc:8c:dc:
                    8f:22:16:fe:ed:a0:18:fd:1d:68:a6:04:36:ca:0e:
                    e4:68:ba:c0:44:42:21:01:a5:e0:5a:98:b5:56:42:
                    9b:c7:25:ee:9a:a1:bf:b7:a3:a2:11:00:78:fd:d1:
                    cc:c7:bc:ff:06:d9:35:47:ec:8e:59:77:be:1b:9d:
                    c4:d5:ac:68:41:0c:6a:f8:55:a3:98:36:2a:d4:17:
                    60:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:47:BA:E8:8A:4F:D9:14:E8:25:1F:CE:BD:F1:26:0B:72:85:DD:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/49e9bee5-5a92-33ae-b1a8-ffc992d26a61.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.195.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:be:b3:12:1d:3a:de:ff:92:ee:5c:a7:2c:e3:78:36:2c:
         40:ae:0c:12:9c:99:50:90:4f:d6:81:85:22:a9:b2:88:4d:09:
         0e:29:37:0d:35:82:b1:92:2d:06:e5:dc:37:45:f0:fb:4b:15:
         17:09:87:21:22:37:32:4e:05:60:51:90:20:ba:e3:47:24:2d:
         c4:3c:f2:cc:af:f6:9a:98:12:82:ef:e4:b7:10:b4:45:84:7e:
         7e:82:7e:fc:8e:15:99:6e:83:5c:aa:50:81:da:43:13:3d:e5:
         c8:75:64:22:05:08:3b:1c:6f:d0:4c:56:e7:3b:b8:57:2a:d9:
         e5:0f:d4:97:8d:34:d4:fc:76:17:de:a7:8d:d2:aa:1c:c5:d2:
         64:73:17:5f:37:1e:c1:77:6e:b7:d3:a3:3d:71:b6:f6:42:0b:
         29:c8:cf:b4:42:9b:08:97:8a:57:b0:d2:22:47:86:fc:84:0d:
         5f:d3:41:d9:92:35:ab:1d:21:32:83:ae:97:13:49:19:04:0a:
         d4:4d:a2:0f:e7:81:17:22:af:cb:28:51:6b:4b:a3:01:37:f2:
         be:f0:8e:13:f9:79:39:61:2f:2c:88:9d:d9:3a:19:3a:33:fc:
         cd:d1:80:d8:9e:2b:86:9a:f6:2a:f9:d9:8b:ff:dd:50:8a:7b:
         58:db:eb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:51:10 2026 by rpki-client