Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8f86bba-e6b0-3579-a3b4-da154be4c263.roa
File:                     b8f86bba-e6b0-3579-a3b4-da154be4c263.roa (raw, json)
Hash identifier:          wbgbnq5TXlHWtQuRe0zDjXBO6fRyjrFZh4yJbLvbNAs=
Subject key identifier:   1F:D7:C3:B6:F1:ED:CD:95:FC:FB:A1:AF:76:8F:AB:79:4D:E8:17:4D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F03A797BA7A7847A801545B80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8f86bba-e6b0-3579-a3b4-da154be4c263.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.72.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:97:ba:7a:78:47:a8:01:54:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=888c8067-6b4b-4097-a6c0-627a7e0a8723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:3b:a2:a0:50:79:7b:8f:e6:4d:9a:9c:8c:
                    4e:55:ae:ab:d4:f1:e2:bd:83:f3:06:90:48:ad:83:
                    4f:c3:46:1a:d9:73:a4:13:32:6d:8b:63:2b:d1:0b:
                    80:ca:7d:cd:b1:ca:ec:6d:bc:1f:2b:b2:c9:d4:2b:
                    13:15:b0:5a:f0:04:22:44:ab:2f:05:00:c2:40:f8:
                    63:a2:36:a9:92:1a:29:2a:e0:7b:81:8d:e0:e2:21:
                    32:f6:7d:d0:f3:44:14:8d:62:83:cf:84:67:0a:3b:
                    42:24:91:1d:97:58:22:3b:97:8d:5d:b5:14:0f:96:
                    fa:e3:5a:76:e4:13:ad:af:90:7b:5a:b0:05:74:f0:
                    06:3c:a5:26:05:2f:2c:57:4d:2c:0e:c3:23:6e:b9:
                    45:34:c4:89:67:49:49:db:9a:5c:8b:76:0f:ed:96:
                    81:be:40:24:92:4e:aa:e3:f6:0e:2a:36:74:4e:c7:
                    66:80:91:22:f3:a3:cb:a8:2f:b5:f9:2f:84:3d:58:
                    2d:e4:0c:e3:23:67:29:69:af:26:4c:90:a4:fa:b7:
                    a2:d0:1f:d5:1a:44:e7:95:cd:d4:10:f2:e5:43:63:
                    07:aa:b8:40:88:5f:56:71:5b:7a:7d:1d:1f:d1:2e:
                    3c:92:2b:10:71:05:64:a4:3a:3b:c0:79:16:0c:9f:
                    3f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D7:C3:B6:F1:ED:CD:95:FC:FB:A1:AF:76:8F:AB:79:4D:E8:17:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b8f86bba-e6b0-3579-a3b4-da154be4c263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.72.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:33:f1:d3:1e:a6:51:17:c6:28:f4:35:2e:3e:55:4e:6e:37:
         93:d7:72:60:82:14:d1:a7:8f:8e:38:ac:98:65:8b:eb:96:12:
         92:a2:7d:23:8e:16:44:56:b0:02:a8:d3:9e:4d:7b:f5:97:10:
         5f:09:01:22:29:86:e9:c6:3d:cb:db:e0:ad:97:6e:4c:ed:e4:
         44:d3:81:2a:78:bb:b7:27:02:dc:23:ef:81:a0:d3:27:81:ec:
         7f:ae:c0:50:c2:12:71:19:1c:ce:a7:dd:71:ff:be:65:d7:21:
         1c:de:db:e3:ec:7b:69:e6:f1:18:d7:c2:57:fa:68:8c:31:f2:
         64:63:1b:13:18:37:23:10:db:48:fb:20:f4:1c:9a:c8:80:e7:
         50:95:2a:07:f5:52:6e:46:50:bc:48:cd:8f:dd:2e:05:83:ed:
         a3:8b:bf:32:99:bd:24:b4:0d:e8:3c:c5:42:f3:2e:42:a6:2c:
         80:dc:8b:18:cb:93:b5:87:e1:42:94:c3:e1:95:ff:5d:b3:2e:
         b0:64:50:27:33:f9:82:61:f0:a5:c3:8b:9e:0a:14:dd:85:c8:
         43:17:91:e0:36:53:68:06:ef:3d:61:12:f5:84:82:a7:95:67:
         a6:62:28:65:2a:6a:d6:db:a9:dc:2a:14:5a:d2:3c:13:14:c7:
         8b:05:83:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:43:03 2026 by rpki-client