Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f246c80-70b2-320b-b5c3-fba77d4cf329.roa
File:                     4f246c80-70b2-320b-b5c3-fba77d4cf329.roa (raw, json)
Hash identifier:          1HUhWp3Op0AzKX/O61TO4G2/at0zPvpAbqXq/mf8C54=
Subject key identifier:   EB:6D:15:DC:31:9F:03:4E:0B:C1:DA:D1:16:D2:0A:92:BB:FA:4D:5A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA790B27908B88C78E95CDB90
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f246c80-70b2-320b-b5c3-fba77d4cf329.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.193.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:b2:79:08:b8:8c:78:e9:5c:db:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3293de0d-7ee1-4c2f-bfa0-ae77e38f3682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d7:51:e1:bb:59:2a:86:a0:32:a5:bb:6d:51:
                    84:77:97:8a:75:5b:38:ad:0f:0d:12:ba:b1:01:ae:
                    93:87:07:3e:f4:ee:0a:14:b9:1b:dc:5a:b2:e4:ab:
                    b1:c8:cf:ef:1b:dc:26:08:3d:90:c9:87:f0:14:36:
                    8c:c7:fe:c5:78:59:4a:eb:6b:4c:00:6c:fd:aa:2e:
                    ad:32:2c:59:6a:d1:29:c7:91:38:9a:1e:17:d9:63:
                    7a:2c:a1:e9:ae:de:75:4a:20:32:17:e5:ae:5d:12:
                    05:75:21:7c:cb:3e:0e:7b:f7:11:3b:81:ae:ee:81:
                    70:d0:f2:e5:47:b4:58:df:88:7c:b7:36:21:00:da:
                    de:8e:dc:98:f4:dd:58:9f:94:f0:f8:62:86:f3:4f:
                    c4:0b:66:6e:50:65:99:52:92:c3:35:3d:55:44:68:
                    d7:6f:af:97:40:eb:67:c1:6d:8d:fd:28:c2:86:ee:
                    c3:1e:4b:ab:fe:eb:4a:d1:10:02:e2:50:86:59:b0:
                    32:3a:19:c2:2f:64:bd:74:e8:84:f7:54:1b:ef:33:
                    9e:8a:aa:71:2f:00:87:41:2d:76:c1:a4:94:32:df:
                    f2:42:0b:42:99:e3:b1:61:25:24:57:48:af:77:60:
                    18:69:79:d7:68:fe:44:b9:fe:2a:62:cc:cc:de:fa:
                    bd:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:6D:15:DC:31:9F:03:4E:0B:C1:DA:D1:16:D2:0A:92:BB:FA:4D:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4f246c80-70b2-320b-b5c3-fba77d4cf329.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.193.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:67:c3:d4:93:fe:e2:7f:12:ee:2c:09:19:b4:f0:ef:17:d6:
         dd:b0:15:85:d4:0a:0f:7a:69:f3:2b:f6:4f:f0:ee:34:76:2b:
         96:e3:47:0d:45:cf:ca:dd:76:80:5d:df:c3:02:4f:f9:bd:6c:
         62:14:88:51:b3:f2:e6:12:3b:bb:8d:75:2f:a9:55:6d:7a:35:
         a2:b7:77:c0:47:1f:42:7f:ef:b3:41:d1:c9:fd:82:46:62:8b:
         17:d9:6e:6a:8b:44:4e:dd:c4:87:8e:e5:b3:01:ff:43:19:5d:
         79:77:c7:71:b8:69:d9:1f:da:5b:78:ba:40:f4:84:7d:69:d6:
         67:25:c7:51:9c:e4:d3:60:a5:e3:4c:ff:1f:4e:d9:47:cc:17:
         a6:f8:30:d1:47:e6:b0:5c:42:1a:4f:79:34:c0:f7:6c:ae:8f:
         1e:fb:91:78:87:9b:06:15:dc:35:ff:a5:13:3c:aa:02:9e:bb:
         95:5a:56:78:f9:1d:fa:1f:8f:03:2e:5a:8f:b3:08:88:bc:26:
         ac:74:1a:65:91:4f:c3:11:7b:4d:6b:fd:c4:54:e5:2a:32:a6:
         f8:c0:89:34:09:a6:ed:63:1f:25:5f:b3:69:7a:67:2d:0a:1b:
         fa:33:54:58:52:5f:00:64:d7:ac:c1:29:83:6c:32:6b:af:12:
         10:70:9e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:10:42 2026 by rpki-client