Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87e43245-dc23-3249-a491-fd8b3dfc3bc3.roa
File:                     87e43245-dc23-3249-a491-fd8b3dfc3bc3.roa (raw, json)
Hash identifier:          AOMpOH3da+7FYZbrRD60uS1G3B0KrqPw+RwwaMk9ock=
Subject key identifier:   DD:9F:FD:47:9A:22:51:81:B2:05:4A:7B:AC:7A:00:49:7B:A9:A4:8F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA7878359C909161CBC5D5A70
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87e43245-dc23-3249-a491-fd8b3dfc3bc3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.54.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:83:59:c9:09:16:1c:bc:5d:5a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=521927ff-b8ca-4acd-a3e5-da69a87dd8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bc:ee:da:1f:69:7c:4b:d5:8d:32:e7:37:7d:
                    d1:f5:01:4d:1c:05:08:df:11:24:f3:b1:af:ac:bc:
                    80:70:1e:d6:c3:d6:c9:8d:db:20:2e:cf:29:02:f6:
                    91:de:4c:27:ca:6a:9e:58:eb:af:44:b0:fb:1e:e2:
                    99:3f:f5:4a:70:de:76:32:dc:2e:1d:d3:3d:92:dc:
                    4a:55:eb:99:d6:e7:a2:7f:f1:8a:4f:f0:63:6b:c6:
                    bc:22:19:02:f4:48:1b:5e:43:be:a3:99:90:17:99:
                    41:19:f4:1b:f3:78:b7:93:04:b9:bd:aa:45:3b:d9:
                    6d:ed:0d:05:0e:7b:58:83:44:08:ff:e4:c3:b3:7d:
                    f3:fb:68:76:96:be:f2:10:57:9d:11:df:94:45:f5:
                    95:5e:cc:ae:77:e7:a6:6c:2f:22:eb:77:c1:f1:87:
                    47:fd:c9:b4:84:e6:65:99:b1:08:64:a0:0e:53:db:
                    8b:ad:88:c8:a1:c8:9f:6b:fc:72:9a:c7:fc:3a:35:
                    29:c9:ff:63:98:fd:0e:d1:81:9a:00:79:d3:45:5d:
                    86:ed:e5:bc:4c:77:f5:6b:f2:17:08:3b:cc:5e:fb:
                    bb:98:9c:f4:60:a5:59:a7:1a:ff:9a:7f:e2:f0:1b:
                    74:6c:22:64:94:f9:61:b0:24:1f:a4:09:54:6a:6c:
                    11:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:9F:FD:47:9A:22:51:81:B2:05:4A:7B:AC:7A:00:49:7B:A9:A4:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87e43245-dc23-3249-a491-fd8b3dfc3bc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.54.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:2d:6a:eb:bc:67:ef:9c:9c:ba:36:44:ed:d9:e3:72:99:cc:
         58:1f:46:2a:99:72:6b:8a:b3:78:6c:c8:db:80:48:4a:28:c8:
         c5:3c:10:e4:2f:69:5c:8c:ff:f2:b0:4a:51:bc:9d:e9:bf:36:
         35:3d:ff:04:ed:c2:24:77:d5:5a:29:ab:85:94:27:b5:f7:d6:
         01:00:5a:80:d1:aa:7f:68:f1:22:0c:db:5a:92:16:4a:c3:e4:
         96:c3:8d:99:b9:3c:d5:2f:f0:39:c3:d9:ed:a5:7c:f0:36:2f:
         a2:58:10:2d:e1:8e:70:1c:c3:d7:3b:95:ca:0d:c1:ea:4a:a3:
         e0:99:b3:9b:35:3f:c7:23:23:eb:62:b6:ad:db:35:b2:64:01:
         ca:9e:16:10:a6:3a:23:f4:32:c1:6e:d0:bc:f0:e2:10:2a:65:
         36:d8:8d:57:3d:16:5b:45:a7:fd:a1:db:05:91:d8:46:65:89:
         a4:c5:cb:1b:51:6f:7d:57:14:62:e6:7a:07:7e:18:0a:61:bc:
         58:dc:87:ab:d5:41:a2:1b:fb:6e:5b:c7:66:c7:fe:3b:c7:fc:
         af:c5:01:0c:93:58:4e:d9:3e:b9:8d:65:3f:7c:6d:a7:83:2d:
         fb:dd:2c:88:74:0b:63:ae:73:73:9f:49:24:13:7c:2b:70:60:
         59:e9:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:27:50 2026 by rpki-client