Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c4784fe-2741-3f14-9013-92a23d5920f1.roa
File:                     4c4784fe-2741-3f14-9013-92a23d5920f1.roa (raw, json)
Hash identifier:          IzXSSCcwryP+SP1iR4Wsky69dsKKKcmWz6dImy3qrxA=
Subject key identifier:   0B:E1:3B:24:30:9D:BF:D4:B7:4A:DD:9F:EF:7A:A8:46:95:62:E7:4A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EEEB77E04F934594F06B22540
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c4784fe-2741-3f14-9013-92a23d5920f1.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        23.215.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:7e:04:f9:34:59:4f:06:b2:25:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=99a1dbc2-6a2d-4b29-8d26-3492d76cbb83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ce:8e:c5:71:42:a7:8e:2e:8a:a3:c4:d0:41:
                    79:b5:0e:25:74:0e:20:c9:8a:2d:ea:b3:b6:74:48:
                    1c:ba:c0:c8:6f:3f:a8:0f:42:53:44:b8:c8:84:e5:
                    12:31:e6:80:94:b2:38:58:e6:48:71:b9:3a:19:32:
                    8b:52:b5:f8:67:85:a9:4a:08:72:5b:66:89:71:4e:
                    5e:4e:21:b2:4f:e1:67:a1:bc:a6:90:61:13:0a:df:
                    89:77:f3:17:ae:e5:24:c0:40:6c:c5:a5:a5:bb:eb:
                    90:eb:07:31:97:88:4a:fd:cf:1a:8f:aa:cf:bd:c3:
                    43:c3:fd:9c:7d:7e:1d:f4:52:0a:9b:95:d3:a2:3c:
                    3b:87:45:3a:a9:4f:64:c8:06:5b:49:b3:0a:bf:e4:
                    a5:b7:00:a0:9d:52:59:aa:45:24:45:dd:91:75:dc:
                    5a:09:7f:6f:30:32:0e:ef:d6:2f:45:22:22:b3:6b:
                    1b:cf:a0:67:13:77:5b:8c:25:46:3b:9b:fb:f7:8a:
                    b1:ed:15:0a:8c:4e:50:bc:5e:ac:55:6d:13:df:6b:
                    2a:14:4e:51:20:a9:1a:43:87:cc:3f:1c:66:be:3a:
                    ad:59:36:73:4f:8b:d2:58:36:21:07:f0:50:84:f1:
                    86:64:70:b1:f9:94:1d:ce:3b:02:7f:77:91:a4:7d:
                    3f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E1:3B:24:30:9D:BF:D4:B7:4A:DD:9F:EF:7A:A8:46:95:62:E7:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4c4784fe-2741-3f14-9013-92a23d5920f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.215.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:57:8d:7c:ec:23:3d:e2:57:f7:79:56:4b:c0:f6:40:3b:50:
         28:c1:53:6b:00:9c:99:2c:93:2e:c2:a8:49:09:cb:28:13:ab:
         70:0e:3b:95:a2:22:c4:f7:8e:53:6d:ac:4f:79:b6:d8:92:eb:
         0c:65:bb:62:8f:d8:10:d7:96:9e:76:58:9d:0d:6d:48:7e:cc:
         61:74:93:6a:86:9d:20:90:46:6e:36:2b:c1:55:b0:6e:ce:96:
         0c:05:51:7c:d6:7d:ca:69:22:76:a3:b2:9a:97:cb:fc:d9:c8:
         ab:69:65:80:df:14:62:f2:34:4f:02:b8:5d:62:2e:70:4c:db:
         f7:3e:71:14:74:3e:7e:4d:94:75:31:6f:1e:90:d3:d7:5f:4b:
         02:30:18:0c:87:b5:b1:6e:cd:68:00:e5:a5:c2:ae:2f:45:d8:
         78:8a:88:bf:d8:cb:d4:f0:5c:81:ca:58:ee:59:f6:17:0b:72:
         f6:90:4d:c1:d8:05:6a:40:26:d4:ff:8c:4b:6b:da:ad:a4:f9:
         2f:a5:dd:6e:ea:69:a1:75:ae:76:f1:fb:6b:60:23:2f:53:96:
         76:66:3c:d2:6c:11:4c:2f:55:ca:62:ad:ca:11:75:58:13:2b:
         c4:48:69:73:e1:a9:90:17:42:bd:87:c6:1b:6a:52:49:10:bc:
         9c:3c:ff:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:29:21 2026 by rpki-client