Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4b1a839-f996-35c6-a478-2a5b2b1a90cd.roa
File:                     a4b1a839-f996-35c6-a478-2a5b2b1a90cd.roa (raw, json)
Hash identifier:          SC8ixXlgJBAHfUYw/6DBvlHdFLcJge0dE1J6eP714XI=
Subject key identifier:   C6:18:7B:53:53:BD:75:B1:22:21:D3:91:C5:26:25:2C:2E:C2:98:7E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F06726BBA1522CEA31A7C63C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4b1a839-f996-35c6-a478-2a5b2b1a90cd.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.56.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:6b:ba:15:22:ce:a3:1a:7c:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=763d9577-08b7-4305-9405-ee138806002c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7d:64:b2:b0:2d:43:f6:c1:2e:58:e6:83:85:
                    23:29:75:84:bd:be:4d:a7:1b:6e:0f:9b:33:90:58:
                    6a:84:66:98:18:31:cf:11:0b:5d:96:7e:be:80:8d:
                    c7:fd:a5:4a:2b:f1:83:dc:ac:f4:49:e0:25:06:10:
                    c6:0f:97:87:cc:99:7d:49:9b:4a:8f:0c:ac:d9:20:
                    84:e6:35:a0:d0:9a:e7:82:56:a2:af:b8:48:06:22:
                    a5:99:5a:a4:96:98:27:f6:2b:9d:66:4a:2a:8f:e3:
                    2b:3e:57:50:b2:1e:31:c0:f0:74:81:f1:78:df:62:
                    f4:1c:2e:d0:f5:b1:45:03:89:b3:af:57:b3:b1:1d:
                    97:a2:74:ee:37:a6:c9:98:0c:04:c4:d3:45:e5:84:
                    66:ec:ee:a1:a9:77:f7:10:e5:c8:20:f0:c7:10:11:
                    6c:4f:e4:06:f3:0b:9f:3f:0d:c1:24:59:ea:f4:b7:
                    f0:ac:43:ac:a2:c9:ec:c9:6b:4c:79:24:a0:d6:c1:
                    9c:4a:f3:a2:fc:e5:07:44:dd:ca:d5:05:5a:a8:2d:
                    f2:68:cc:65:8a:03:3b:ef:45:83:10:e5:e5:b6:f3:
                    87:3f:88:30:e8:22:77:91:cd:26:b1:45:99:33:64:
                    51:29:22:ed:a8:44:d0:7d:8a:83:99:de:f6:88:8e:
                    ed:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:18:7B:53:53:BD:75:B1:22:21:D3:91:C5:26:25:2C:2E:C2:98:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a4b1a839-f996-35c6-a478-2a5b2b1a90cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.56.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:b8:94:3a:bb:aa:1d:de:5b:9e:a9:2d:e3:a2:f8:83:8d:9d:
         53:37:9a:60:90:f9:89:ed:fd:68:94:fb:a7:de:c0:b8:cc:4b:
         c5:f9:4a:f2:76:af:3e:62:8d:0c:2a:1c:4a:05:1d:ff:8f:f1:
         04:0e:6f:59:70:25:d4:c5:5c:d2:01:0a:2f:8e:51:ea:28:ea:
         1a:6a:c3:01:39:6e:56:3d:05:29:e6:1b:3a:f7:99:ea:46:e4:
         07:e9:43:af:f4:d6:61:b0:b9:71:52:a0:ef:ed:b8:5e:a2:ae:
         3b:14:a6:e0:69:88:9d:14:75:68:f2:b5:61:4d:52:71:69:65:
         23:64:6b:e4:48:f4:ac:a6:0c:f8:c2:87:6c:6c:66:dd:67:db:
         f8:75:47:20:0d:05:36:ad:73:db:45:d5:0d:f2:91:82:03:33:
         6f:ca:47:88:32:9e:d3:03:72:2b:71:9a:0a:64:e4:42:82:92:
         3d:d6:4b:fc:5e:98:81:2d:82:06:36:ed:6c:2c:15:53:58:e3:
         cc:d6:e6:f6:04:b8:27:b9:e0:f0:4f:e7:38:09:ee:82:ce:37:
         8f:50:c1:35:97:f0:53:9c:8c:95:bc:d8:90:ef:ea:53:68:a9:
         d7:df:2c:66:83:33:97:a6:1f:b1:49:c0:46:d3:d4:19:3c:27:
         58:20:4f:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:10:08 2026 by rpki-client