Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fa363d5-87e9-3f5a-b64b-9747debd1d1f.roa
File:                     5fa363d5-87e9-3f5a-b64b-9747debd1d1f.roa (raw, json)
Hash identifier:          TSbVjHlak306XrWRYCQa5g396ApxEHj8ky5UQFJfv8E=
Subject key identifier:   BB:38:5D:59:A2:CC:B5:64:77:10:73:62:A4:A2:8A:21:91:0A:35:28
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7997588534E850D2DFE0900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fa363d5-87e9-3f5a-b64b-9747debd1d1f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.211.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:99:75:88:53:4e:85:0d:2d:fe:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c16c0ffa-1380-4e2c-baa5-64ffb529defe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b9:34:d7:58:6e:22:2d:e0:1d:fb:72:cc:b1:
                    a6:87:da:a9:fe:23:f8:e3:5b:73:24:89:6d:0e:d3:
                    a1:e0:e4:33:b3:4b:7d:67:2c:5c:72:4d:db:20:61:
                    87:8f:02:b6:91:91:9d:73:15:af:56:44:cd:f6:9b:
                    90:59:22:65:b9:2d:6b:8e:4a:92:a9:80:95:bf:0a:
                    3e:fc:e5:65:3a:be:12:05:cf:50:80:a7:ec:8a:b7:
                    9e:d9:cd:24:36:32:7e:16:89:15:fe:c3:ec:b9:bb:
                    a2:b5:02:1f:5f:28:91:d4:c5:9a:29:5f:22:c0:d7:
                    e1:89:35:48:0b:cc:12:95:52:48:2c:85:ec:4e:1a:
                    f7:e6:ea:96:2b:38:80:67:3e:60:93:3a:87:2d:f7:
                    d8:59:ec:0e:db:90:ce:91:e8:20:c4:27:3d:55:ae:
                    26:4a:5b:9b:b7:40:41:b5:f7:b2:dd:84:76:e6:31:
                    da:5e:7a:92:d8:0b:3a:08:8f:af:71:ca:eb:a2:2c:
                    ba:6c:14:ea:00:68:26:18:e8:e4:ec:5d:35:47:b7:
                    fb:01:ff:e9:a5:95:32:90:14:90:89:0b:63:3b:4d:
                    4b:28:22:fd:91:4c:ee:95:c3:0e:37:c3:5b:0d:f5:
                    bf:7a:24:90:74:43:5a:cb:94:73:8b:9e:46:a7:1f:
                    0d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:38:5D:59:A2:CC:B5:64:77:10:73:62:A4:A2:8A:21:91:0A:35:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5fa363d5-87e9-3f5a-b64b-9747debd1d1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.211.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:d8:59:60:ba:f1:c5:b6:f1:eb:7c:c5:27:4f:e7:40:48:15:
         15:5a:44:b0:55:f9:4e:93:34:b4:a4:2a:42:70:4c:75:db:53:
         2d:38:9a:fa:1b:56:b6:4f:3a:8a:fe:54:45:61:83:59:c7:6b:
         2a:5f:39:8e:65:87:9a:c1:9d:4a:ee:01:b9:17:62:9d:df:a7:
         3a:23:36:89:70:e7:c0:43:07:a2:fc:0e:15:d9:a0:3e:e1:42:
         92:15:e5:97:03:15:3d:c3:79:3d:63:98:e8:78:47:cf:64:2c:
         49:8d:55:fb:ef:22:24:cd:d1:72:89:39:51:ea:2a:74:b9:04:
         32:00:87:df:ef:e9:94:09:b0:02:50:3b:ac:56:9b:cc:6b:0b:
         af:b4:1c:a9:53:31:b8:70:57:6a:c0:bc:80:6c:d6:3b:e1:5c:
         61:bf:4d:a2:f7:01:c2:14:82:35:7c:c6:60:fa:a6:b9:df:0b:
         8b:47:7f:48:b7:d7:2e:51:de:3c:c1:bc:17:5d:56:00:dc:fb:
         cd:cc:84:3f:48:36:8a:96:d7:3f:5e:6d:12:aa:ee:ce:13:c1:
         c8:c9:e7:44:26:aa:8d:f4:c9:a2:db:3f:d1:fa:41:2f:66:d5:
         78:af:af:2d:4c:94:37:b6:9f:31:96:ba:06:7c:39:11:a1:c3:
         6d:54:06:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:32:29 2026 by rpki-client