Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59bccafa-5cf1-3558-9c29-f8bf3753c688.roa
File:                     59bccafa-5cf1-3558-9c29-f8bf3753c688.roa (raw, json)
Hash identifier:          7y0VJn4ec9QBWRfWbHU3U3zwYrYtYdQgj9WSA5UKYRY=
Subject key identifier:   83:8F:9C:17:5C:A7:19:E4:EC:1A:23:EE:F0:92:E9:5A:29:82:30:40
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F093D0208ADBA88C53F11D240
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59bccafa-5cf1-3558-9c29-f8bf3753c688.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     16625
IP address blocks:        23.1.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:02:08:ad:ba:88:c5:3f:11:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=7ea1bf00-7e50-4e2b-8d77-41b1e8f6f582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e0:eb:fa:9e:f1:10:a0:bf:25:90:09:2c:f3:
                    1a:c9:12:66:c9:84:95:c0:24:86:32:4b:f7:cd:27:
                    5b:80:66:e4:2a:29:eb:91:91:bd:be:34:14:c0:82:
                    9c:d9:3a:e8:aa:db:a2:19:4c:d3:c4:3b:b5:b9:87:
                    dd:35:e6:ae:a6:37:7e:16:20:42:8e:7a:f2:76:d5:
                    a8:3e:63:bf:d4:69:fe:e7:75:5a:ce:54:52:43:0f:
                    eb:43:ee:23:5e:1a:2c:ea:e4:aa:fe:3f:8f:1f:b9:
                    b8:43:a8:4b:bb:e5:a5:75:86:31:ea:fd:90:88:ea:
                    bf:82:48:22:ec:c9:a4:ac:0a:24:97:13:29:e8:19:
                    d2:ca:e1:34:df:5d:5d:1d:90:eb:d3:7f:0b:05:bd:
                    dd:17:4f:3a:11:d1:bd:02:78:ec:8d:8c:73:10:c1:
                    40:de:42:9c:63:09:e3:39:b6:4b:32:a1:0f:d2:69:
                    6e:b9:3d:32:e7:34:2f:24:b8:93:fc:e8:72:25:ac:
                    b0:3b:3f:73:62:4f:62:a6:58:90:9b:c0:7a:bf:6c:
                    fc:1e:af:5a:79:eb:78:96:45:da:09:ee:5b:38:8a:
                    0d:b7:ea:1a:d3:44:8a:ac:35:48:fb:55:dd:6a:d6:
                    02:6f:be:84:d1:a2:f4:ee:56:e9:37:d0:90:3d:fc:
                    1b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8F:9C:17:5C:A7:19:E4:EC:1A:23:EE:F0:92:E9:5A:29:82:30:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/59bccafa-5cf1-3558-9c29-f8bf3753c688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.1.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:d7:10:64:08:40:34:ae:80:3c:27:3a:30:a3:ee:12:82:cb:
         4c:62:21:fc:78:c2:63:13:02:39:4f:7e:51:b2:59:8b:81:fe:
         4c:d6:6d:d8:b7:55:25:0d:2a:1c:3f:47:d3:5f:6a:1c:b0:f9:
         42:20:d9:86:ba:dd:f8:e7:1d:16:72:aa:cb:35:4d:32:32:26:
         5c:5b:6a:50:73:19:53:d3:ce:13:ee:39:6b:89:e2:db:37:4d:
         a6:ce:dc:03:04:7a:6e:c8:e3:97:5f:e2:ee:be:88:d8:37:d7:
         f7:e4:2a:6b:86:55:2a:7a:aa:f4:b3:45:e6:b7:22:84:e8:e8:
         fa:cb:25:79:59:c7:1c:3b:1c:16:64:6b:c8:fb:be:d3:eb:33:
         f3:fe:a8:16:f6:86:fb:0f:fb:80:0d:f8:4e:82:40:88:57:34:
         ac:08:26:29:b3:97:3a:ad:d5:a4:8f:c0:3e:34:f1:f7:4a:52:
         cd:eb:fe:de:a2:1b:55:a1:40:f2:65:94:7a:91:03:72:8b:d6:
         68:1e:03:ef:a1:c9:e4:a4:28:a4:24:ed:f6:c8:bb:3f:9d:99:
         7e:e8:3f:72:7e:fa:26:a9:38:c3:b8:a5:d5:d1:53:4b:9c:1a:
         af:a0:c3:e9:90:b3:10:0a:7c:87:c9:24:12:84:cf:bd:28:a6:
         d6:df:4f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:33:53 2026 by rpki-client