Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebba86e-a1c2-3eb5-b277-eabe13095c64.roa
File:                     bebba86e-a1c2-3eb5-b277-eabe13095c64.roa (raw, json)
Hash identifier:          Xgruok8lkco9VDpNvEmCjUX/YYrG/XC5/mCBhoKmE58=
Subject key identifier:   FA:BF:87:5C:10:AD:05:6E:E1:F3:E8:00:45:9D:BF:BD:45:FE:86:9A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA79AB22F68816DF2DF447DA0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebba86e-a1c2-3eb5-b277-eabe13095c64.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.217.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:9a:b2:2f:68:81:6d:f2:df:44:7d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c2993e32-c421-4326-8409-d00aa2230c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:24:39:0d:4f:c9:5d:72:05:b9:2e:da:1d:d3:
                    e7:49:16:0a:46:5e:42:29:96:c2:f9:df:08:7e:1b:
                    cf:75:58:c2:97:07:d7:d8:f0:c0:86:13:b2:97:3d:
                    d0:fd:05:fa:69:4a:12:97:d3:1e:bd:d5:63:e2:b1:
                    64:93:96:d2:ab:27:04:ec:ce:49:f2:ca:07:98:f6:
                    08:f4:80:66:5b:27:93:d6:83:a7:92:80:ef:86:61:
                    fe:a7:e5:48:65:cb:b3:ad:1f:52:56:65:7f:10:96:
                    f3:4d:4a:76:9a:75:ac:7b:d7:34:9e:db:d5:48:15:
                    2c:e0:ae:61:55:18:9d:fe:41:f3:ba:a4:2a:81:23:
                    07:86:ed:4f:eb:29:08:f7:33:f9:c8:42:a1:5d:07:
                    72:bd:21:60:21:0a:52:6f:5f:5d:1e:05:ec:7d:ac:
                    6c:c2:bf:cb:5e:ca:2b:48:9c:bb:d0:17:28:6f:08:
                    ec:28:d7:83:d5:08:8f:42:10:ec:a6:0f:f9:8a:04:
                    1f:18:95:79:5c:1d:9a:24:85:2f:a4:f7:f7:2d:18:
                    e6:a9:f2:87:c2:f7:7e:6e:c2:18:6e:ac:af:85:08:
                    af:93:07:64:56:73:95:45:02:fa:3b:4b:96:10:94:
                    2c:22:aa:07:00:f0:83:49:64:04:e3:29:4e:2a:ec:
                    56:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:BF:87:5C:10:AD:05:6E:E1:F3:E8:00:45:9D:BF:BD:45:FE:86:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bebba86e-a1c2-3eb5-b277-eabe13095c64.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.217.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:5c:47:6b:4f:57:2d:52:65:73:67:99:f4:b0:58:29:88:76:
         12:aa:3b:16:e1:d0:84:e7:78:15:a3:be:7f:26:88:23:bc:4f:
         b9:43:51:1f:60:26:06:aa:bb:5a:be:91:7b:3d:08:3a:0e:7f:
         31:5d:31:0c:2c:fa:1d:d7:9e:4b:8d:29:e9:d0:db:e2:12:11:
         3a:e9:fe:98:cc:bb:7f:c0:ed:57:15:13:41:2f:fa:41:a1:0d:
         b5:b6:a2:79:6c:6e:fc:17:4e:5c:08:48:25:37:92:45:5e:a5:
         c2:af:6b:86:ae:9a:b7:0d:d3:f8:9b:b9:05:e2:12:15:9b:e3:
         09:0c:62:8b:a3:50:db:64:bc:74:3d:08:37:3b:06:3e:2a:9a:
         35:64:44:1f:35:8a:74:bf:ea:62:be:f2:32:d6:41:8b:6d:ad:
         e7:77:37:47:ce:54:4a:4f:f7:9f:77:e3:fa:ff:2a:d5:8d:e4:
         96:10:d9:0e:09:2a:cb:6a:44:a8:20:48:e4:ff:e0:00:ca:db:
         ae:20:aa:73:a0:6e:0c:b2:b9:48:50:f4:74:32:32:0f:1b:60:
         19:c6:52:e7:d6:c9:76:3d:62:fe:84:e9:c0:16:a9:59:0c:91:
         f8:a0:ff:6e:c0:8b:24:13:90:16:87:50:5f:a8:7c:d9:24:9f:
         47:b1:2f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:43:01 2026 by rpki-client