Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/791fa7f6-6ac6-351d-8a5b-fec98f26dfa3.roa
File:                     791fa7f6-6ac6-351d-8a5b-fec98f26dfa3.roa (raw, json)
Hash identifier:          Iy1/R/4LeKdoyfiAg7/q1mKtenJou98BOzKozEejlnQ=
Subject key identifier:   71:CD:B8:12:B1:FB:FA:EB:A4:79:12:D8:49:1D:E6:60:08:86:CD:8F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA78787B603D85AB0C75CEC80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/791fa7f6-6ac6-351d-8a5b-fec98f26dfa3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.57.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:87:b6:03:d8:5a:b0:c7:5c:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=aaee70ea-b708-45f0-8b14-2e7ed4b1e877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:c8:eb:3c:22:11:02:d3:a0:05:43:41:53:c2:
                    9b:54:a6:43:90:35:68:c7:19:6f:01:4c:92:9e:5f:
                    d4:97:43:dd:90:b4:ca:2b:9b:73:d2:da:b5:bb:33:
                    fb:1b:8a:a7:c4:5f:6d:1e:3c:18:e6:43:fb:83:08:
                    69:c1:c6:87:cd:23:2c:b1:bd:fd:bf:15:53:50:85:
                    ea:cd:ed:c2:0c:c5:1a:2e:a6:ca:9b:c1:5e:d6:6e:
                    e0:af:43:ff:66:a0:11:63:ba:d1:77:87:d3:fc:bd:
                    bf:2b:37:0c:2f:68:92:1d:fe:de:10:9b:c1:5a:bd:
                    cf:e2:ff:fc:a3:d3:1b:f4:21:0a:1d:b4:0a:63:87:
                    48:28:02:a8:df:e3:06:e2:eb:7e:48:83:5d:8f:80:
                    dc:33:eb:33:c5:59:8d:9c:79:96:96:53:05:eb:f8:
                    2b:77:12:5a:7e:97:a9:61:b3:46:d9:64:32:0c:61:
                    3c:5d:9d:a5:c7:c8:e4:ac:eb:41:30:01:e0:a2:7d:
                    1b:a6:85:08:c7:0c:5f:86:99:65:f5:8d:16:b7:3d:
                    fd:89:75:2d:60:7f:1e:75:e3:a5:61:aa:e7:6f:54:
                    ce:40:e7:1b:f4:f9:23:ee:3d:37:a1:03:d5:69:0d:
                    f0:14:74:80:ff:7f:6e:03:9d:e5:e5:5f:5c:ae:54:
                    b4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:CD:B8:12:B1:FB:FA:EB:A4:79:12:D8:49:1D:E6:60:08:86:CD:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/791fa7f6-6ac6-351d-8a5b-fec98f26dfa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.57.74.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:6a:eb:30:36:c0:e0:e9:38:10:92:de:8a:7a:cd:93:c9:3c:
         3c:69:2f:fd:ea:60:5b:c8:b3:4f:3b:ac:35:3d:2a:e6:7c:35:
         ad:dd:bd:52:58:c8:22:b9:f5:c1:2e:3a:cb:98:49:fc:f0:bc:
         d1:98:c6:f4:c4:2f:00:d1:f5:10:2a:d3:30:e3:0d:4d:2a:99:
         aa:98:0a:03:86:ef:07:12:3b:c6:58:93:1f:f8:21:be:c3:c7:
         02:2d:f7:c1:1e:1f:5f:82:f6:1b:62:68:2b:24:26:cf:90:de:
         ed:c3:61:6f:26:c8:3e:03:96:0f:87:da:bb:12:9a:2d:8a:f7:
         80:a0:f7:b8:10:9e:6c:b4:aa:60:66:6c:c8:6b:da:d6:f5:dc:
         7a:bb:87:94:ba:3e:e9:0f:ac:3e:21:41:59:e3:a6:dc:21:10:
         22:1c:a8:89:15:9b:ce:aa:be:84:a5:6d:51:e3:4b:56:43:fb:
         19:09:52:86:5e:e1:c7:41:e3:c2:76:5d:70:39:3f:65:a6:6a:
         70:ce:ce:58:98:d5:85:6a:79:18:f4:d9:c4:f3:c2:be:6c:e6:
         f8:2a:b5:32:0c:c1:e2:00:de:60:3e:7e:ec:24:c5:ea:d0:f7:
         57:96:6e:d8:29:51:85:0d:9a:7d:85:99:02:a6:24:db:28:12:
         18:5f:f9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:52:01 2026 by rpki-client