Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d363b00e-efd1-37bd-ad0b-ef49c65535b0.roa
File:                     d363b00e-efd1-37bd-ad0b-ef49c65535b0.roa (raw, json)
Hash identifier:          TaHLL3zKCLTDVTta11Qgd3i8/zrS2goYs8mm9DiFu3Y=
Subject key identifier:   6F:9A:EF:D0:E1:62:D1:96:B5:16:61:CC:4F:31:9A:15:04:8E:D4:4A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EEEB77151FE7ABD9E077B5940
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d363b00e-efd1-37bd-ad0b-ef49c65535b0.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        96.17.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:71:51:fe:7a:bd:9e:07:7b:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=e1f25207-c81b-402c-a043-d46d7863e32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:b6:ea:d2:4f:3c:7e:82:eb:e9:03:73:84:
                    ca:d9:eb:71:eb:aa:f2:ae:0d:d7:b4:51:49:08:4b:
                    62:f7:d7:97:05:f5:63:35:f7:58:16:5c:4e:9e:37:
                    72:f0:ae:99:4d:5e:67:56:9c:44:96:e7:33:fe:92:
                    a3:ca:34:a4:d5:3a:bd:04:6a:fd:0c:72:00:4d:d5:
                    53:68:32:ac:74:8c:a6:0e:c0:a2:bd:3d:8e:8d:3c:
                    be:66:1c:98:cd:9c:94:7c:01:fd:73:bc:31:de:cc:
                    03:a6:a9:a3:c2:5e:8a:bc:d7:ec:de:30:84:8c:90:
                    41:80:e8:dd:6b:e4:ea:81:2a:a7:fb:b0:c5:a9:11:
                    65:71:ec:1f:72:46:78:dd:2d:16:8a:0c:a6:bc:03:
                    53:f8:fd:2c:5a:b9:a0:c3:fb:37:fd:26:32:4e:1d:
                    22:59:12:87:0b:68:b3:7d:90:92:3d:5e:4f:61:37:
                    da:37:64:b3:f5:cd:90:23:f6:5b:98:f6:f2:42:e9:
                    18:4d:8f:91:b4:7a:e9:d9:0d:b7:f4:b2:86:e3:1f:
                    b9:97:6d:69:1e:13:cd:5e:d9:9d:20:ef:8b:fc:99:
                    28:70:98:e2:4c:95:53:1a:d3:b3:e6:27:db:7c:2c:
                    38:cb:81:84:4d:03:4b:3f:52:29:18:30:0e:de:5f:
                    37:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9A:EF:D0:E1:62:D1:96:B5:16:61:CC:4F:31:9A:15:04:8E:D4:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/d363b00e-efd1-37bd-ad0b-ef49c65535b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.17.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e9:ae:e3:62:29:76:d5:1d:54:99:c1:61:d0:b9:cf:c6:ff:
         98:a6:6d:32:38:7c:0d:e7:c8:5e:96:06:12:2b:7e:25:db:39:
         b4:14:43:78:1b:9b:28:54:3a:5e:db:d8:76:08:43:f3:f1:3b:
         11:9d:f5:2c:17:80:68:cd:d8:c3:94:e0:4d:61:4e:fb:f8:8e:
         59:f8:9f:f0:59:26:f6:92:5c:64:1e:3c:46:17:de:c6:e1:ad:
         1c:51:23:93:1f:a3:24:bd:9b:de:98:cb:8c:ce:6a:73:52:0d:
         ac:b8:cc:9b:63:ef:71:80:ba:51:87:d8:6d:04:cc:98:1e:b7:
         51:91:cc:4d:94:c9:ad:72:c6:5c:cc:a2:c0:03:2b:43:10:54:
         a1:3d:d9:7f:74:25:0f:de:5f:14:00:32:67:6e:61:10:6e:05:
         75:1b:33:60:72:bb:0d:e8:47:9b:66:66:01:6d:7e:06:ab:4a:
         16:ca:64:44:e0:d8:92:76:67:4c:86:0b:64:32:fb:8b:24:69:
         e7:92:d0:12:0c:77:3e:98:09:56:5a:5c:41:91:af:13:b1:d4:
         13:e1:70:f8:1c:b0:82:1d:8a:48:d8:aa:d9:2c:1c:dc:aa:ff:
         04:19:55:47:cd:54:2d:d6:84:c7:77:6c:4d:2e:b6:88:95:37:
         b8:1a:e5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:27:27 2026 by rpki-client