Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/881f9918-5dce-386c-8e25-94d7450b1614.roa
File:                     881f9918-5dce-386c-8e25-94d7450b1614.roa (raw, json)
Hash identifier:          Vy0fsaBYIyse0/0NEB4vQTTNgrGkpy5QI8/TAT5R5hg=
Subject key identifier:   6F:A7:D3:80:31:40:BB:B0:EC:9A:F5:CB:EC:1E:AB:79:98:C6:A4:3E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA015567E93DF3506E85C3010
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/881f9918-5dce-386c-8e25-94d7450b1614.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     24319
IP address blocks:        23.47.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:56:7e:93:df:35:06:e8:5c:30:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=d93edda8-1121-49b9-bc33-b962d1717f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9e:b2:71:59:f7:71:02:ff:b3:93:b4:70:1e:
                    87:92:6e:17:66:21:2e:53:b2:6e:74:45:7b:ff:a2:
                    52:94:90:32:5a:0e:49:b3:fa:f6:86:f6:8c:6e:47:
                    7a:cc:db:da:0a:49:68:d6:8d:04:1d:c2:35:e9:d7:
                    c5:81:01:42:19:7f:4e:e8:9f:72:4f:d1:5e:76:69:
                    5e:84:7a:be:01:bb:72:76:0a:83:1f:96:4a:c6:5a:
                    c9:22:08:e9:8b:81:2a:4c:ff:a6:a8:c6:63:7e:02:
                    12:cf:6a:f6:ee:ef:d1:72:1f:78:e9:82:ce:d6:a5:
                    a0:5d:f2:7f:b2:92:5f:cc:f9:6e:d7:87:50:94:04:
                    9c:34:b4:96:d6:e1:4c:26:b4:5e:5b:d6:09:2b:94:
                    86:c3:1b:47:7b:ba:11:f7:3e:2e:2f:dc:32:47:1f:
                    2b:77:7c:5f:e1:7a:a2:7f:1a:71:c9:17:53:c6:7c:
                    60:e2:5a:b8:8f:5e:7c:c7:40:4a:05:c1:bc:50:ad:
                    6d:e2:03:ca:6b:5a:8b:97:c4:f5:7b:ea:8f:42:fc:
                    6e:2f:46:13:13:f7:1a:ad:b5:4f:da:41:26:34:4e:
                    27:82:34:58:c5:29:cc:42:47:2c:8e:8a:ae:9c:3a:
                    62:e9:05:4e:7f:27:06:1f:e5:ce:39:56:02:29:3e:
                    5c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A7:D3:80:31:40:BB:B0:EC:9A:F5:CB:EC:1E:AB:79:98:C6:A4:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/881f9918-5dce-386c-8e25-94d7450b1614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.127.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:e0:bd:65:5b:67:6e:e1:72:6e:7f:67:e9:de:55:87:0e:9f:
         34:95:d0:eb:fc:2a:47:50:b7:e5:8b:96:5b:e7:b0:97:af:7a:
         92:64:dd:48:7b:5e:23:08:45:d2:d8:d9:2a:03:3e:b6:b8:ba:
         de:d7:cc:60:4e:0f:40:3e:a0:e5:0a:d5:35:2b:57:0e:ae:45:
         de:21:b9:26:bc:7e:17:51:0f:e6:ec:b7:a4:69:95:67:7f:1a:
         a3:83:9b:84:33:be:43:ee:dc:d8:7c:5b:5f:e4:21:18:9d:3f:
         de:1c:71:c0:9c:11:da:7d:3e:2f:8b:fc:a7:63:e8:22:1d:0b:
         fc:6b:cc:c2:b0:2a:5d:52:e6:b8:cc:28:ee:70:dd:e0:3a:6c:
         dc:85:33:fe:83:1f:18:bc:85:bf:0f:d6:fb:ba:46:f3:ca:ee:
         d1:2f:37:d1:71:66:1c:18:e3:a2:a2:b3:ea:6f:39:99:5e:41:
         f3:3c:54:e8:f3:43:a9:ab:a5:ec:15:76:92:45:61:35:2d:4f:
         bf:98:2d:1e:f5:27:32:6d:21:91:3a:9e:fe:d5:8b:25:a9:7d:
         01:46:89:39:a5:f2:e5:b4:6d:01:b9:f1:81:57:7e:eb:c9:a3:
         ea:a8:10:f7:6f:e5:99:d6:e5:92:55:e3:60:c6:ee:1c:0c:d2:
         61:ba:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:29:59 2026 by rpki-client