Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9860b3cc-a398-38e6-af20-6b4478cb3025.roa
File:                     9860b3cc-a398-38e6-af20-6b4478cb3025.roa (raw, json)
Hash identifier:          GWzhKVrhAtglv7xsu8bnDgQK0e0F0ZF2nkHDb5Bm44s=
Subject key identifier:   31:84:DD:9D:76:C0:D7:20:06:5D:D9:E4:27:3F:2E:CF:1F:F2:00:64
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E5A4A0BA347EE210492692980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9860b3cc-a398-38e6-af20-6b4478cb3025.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        184.28.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:4a:0b:a3:47:ee:21:04:92:69:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=067d465f-a79a-41ad-bc58-1098bad0a28e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:31:ec:aa:2c:65:32:d4:b4:20:47:d4:2f:31:
                    48:29:c7:c2:a3:3b:35:05:34:28:9a:ad:ff:4c:9f:
                    a2:ba:6e:98:bd:43:e3:65:e5:f5:82:b6:d3:d2:05:
                    c7:17:a6:a0:48:6e:e9:3c:b6:28:ce:f9:06:7a:46:
                    d8:c6:ca:2d:fc:5c:3d:01:d9:51:41:53:f0:0c:c6:
                    b4:7d:32:93:6a:72:f3:ce:af:d2:58:85:07:d2:df:
                    53:45:9a:cc:44:9d:64:86:c2:69:d8:00:03:37:ee:
                    29:11:7a:6b:50:a4:29:dc:31:1d:4a:15:64:f2:31:
                    8b:98:19:11:a5:54:e1:c4:f9:81:4a:ab:72:30:07:
                    b1:35:e4:bb:66:78:2c:2e:56:9b:25:b9:08:d7:35:
                    cd:d2:b3:0b:3b:ca:14:5c:cc:04:9a:e3:dd:3f:12:
                    b2:f3:6e:eb:bf:5b:b0:f9:8f:02:d5:f9:57:98:49:
                    58:2a:e8:d7:e7:67:d9:61:fe:e3:11:93:16:e8:80:
                    11:f0:0e:93:a0:17:2e:6a:a1:66:d6:fd:13:57:21:
                    8e:6c:30:7d:36:5c:ef:3f:c6:63:4c:ed:08:cf:1b:
                    27:f7:32:12:21:0b:67:63:65:9e:f6:e9:10:1b:4b:
                    b1:dc:ca:56:9c:a4:89:07:50:5d:b8:71:3c:77:f4:
                    96:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:84:DD:9D:76:C0:D7:20:06:5D:D9:E4:27:3F:2E:CF:1F:F2:00:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9860b3cc-a398-38e6-af20-6b4478cb3025.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:51:d6:41:85:ca:4b:a1:d6:a3:fc:1a:9c:08:d6:1f:35:e0:
         79:ee:2b:aa:39:9c:16:41:6b:41:26:ae:0d:e8:04:e7:aa:59:
         14:44:1a:68:6f:17:4b:52:d6:7e:5c:72:4b:70:68:00:08:2e:
         88:41:19:e2:c4:10:9b:67:71:eb:67:3e:a8:47:77:88:18:fd:
         d8:cb:6a:44:bc:0a:f8:e3:11:4d:c7:c5:83:8e:cd:e7:64:1d:
         55:9d:b1:f5:62:c6:6e:5d:33:e9:a7:0b:31:29:41:15:08:8a:
         8a:a6:80:13:64:b1:ab:c5:7b:cc:c7:48:9c:c0:2c:40:bb:50:
         06:6a:d9:8c:0d:a1:ea:b0:ed:1d:08:ef:72:36:09:6b:8d:51:
         82:85:6a:ad:de:db:d2:ce:21:6b:0e:03:73:29:41:4b:85:70:
         ab:00:03:29:23:62:99:2a:b5:91:0b:ae:4b:fd:b3:43:d9:bf:
         63:a7:fa:9c:ba:4e:4b:c7:0c:dd:f1:1e:a2:70:e1:bc:df:7a:
         66:b6:72:70:99:70:0f:be:ae:5c:a5:0c:a0:00:1f:df:77:d0:
         cd:a4:bd:ba:fc:6e:6d:0d:c8:e2:2f:72:a9:78:6a:99:98:21:
         da:38:d7:68:86:b6:b7:96:72:41:d1:63:74:b3:d7:a7:26:de:
         6f:93:7d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:54:51 2026 by rpki-client