Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dae47f19-a452-365d-a45a-89f5e4d8b9a7.roa
File:                     dae47f19-a452-365d-a45a-89f5e4d8b9a7.roa (raw, json)
Hash identifier:          NTe/zI25JC2Ys8go9u8edU26YBU/oby68Kc2eiOb0Eo=
Subject key identifier:   83:EC:8C:6D:10:F2:BF:91:CD:83:98:C4:C3:87:84:ED:76:82:19:66
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E3E5F4AAB12FA0AF2CD696100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dae47f19-a452-365d-a45a-89f5e4d8b9a7.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        23.197.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:4a:ab:12:fa:0a:f2:cd:69:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=fbf2ee53-4293-42bf-91e0-a4fbaac67aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:70:70:3e:c1:f1:7c:9a:d3:50:fe:e0:10:c4:
                    45:ee:56:7a:ad:b9:aa:75:71:e5:66:90:61:e1:41:
                    a7:99:0f:76:4e:32:18:67:3d:e8:91:b6:cc:7c:58:
                    f0:ac:f9:90:84:1f:08:ba:d0:19:7c:05:dd:15:98:
                    d3:ed:4f:78:23:f0:28:7c:8d:2f:29:11:1e:95:53:
                    ba:1d:22:70:67:79:15:cf:6f:d6:13:23:50:4a:20:
                    40:61:ed:92:c9:c7:f6:57:86:17:e3:f5:09:04:a5:
                    86:8f:34:d8:1b:32:11:59:73:1b:a5:6f:c9:1f:51:
                    90:8a:34:c6:93:b1:58:6e:b0:bc:d0:1c:4c:b3:4a:
                    1d:ed:13:79:8c:35:a7:88:53:9f:4a:98:ce:80:b4:
                    2e:a6:46:ab:77:ef:a4:5d:fe:a4:1b:34:d7:6f:eb:
                    39:7d:6b:cb:a5:fe:61:81:79:94:ae:95:55:7e:af:
                    9d:5b:a4:99:b8:f5:1f:0e:16:af:95:7a:6d:f3:7f:
                    0c:92:d6:a8:81:df:90:5c:04:eb:18:13:8f:a4:a6:
                    59:1e:82:09:10:29:a7:34:c4:ff:6c:a0:bd:6c:61:
                    b4:67:1e:a4:b8:32:e2:fb:1e:40:c3:16:03:40:77:
                    5d:c2:39:fb:9b:56:5e:34:c7:53:c5:0c:16:7e:2a:
                    9c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:EC:8C:6D:10:F2:BF:91:CD:83:98:C4:C3:87:84:ED:76:82:19:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dae47f19-a452-365d-a45a-89f5e4d8b9a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.197.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:66:55:ea:1e:e4:43:00:a5:1e:fc:d7:86:93:d5:71:e0:16:
         49:27:22:10:90:d5:b3:0d:76:eb:0e:33:e1:ec:58:2e:6e:8e:
         af:f2:c9:37:79:6a:48:d0:c5:1b:2d:eb:fe:20:f4:95:c5:03:
         cc:93:c3:ec:54:f4:89:ec:90:93:13:47:e8:6a:76:f3:04:33:
         b4:06:93:58:f2:59:1b:68:9b:87:87:4c:0b:1e:0d:df:04:74:
         c5:b0:e0:5c:ca:e5:37:98:a3:51:e0:9a:4a:07:01:9c:73:b1:
         93:63:98:36:8f:2f:d9:ad:74:27:7e:3f:1b:36:d2:e2:b6:af:
         66:76:94:bf:c5:dd:a0:9c:8b:73:62:9c:ef:e4:23:4e:0d:87:
         b5:c7:e2:2f:6e:0b:ce:4e:4a:eb:c5:84:26:66:f0:2a:8d:28:
         d2:4d:ae:34:f9:37:f7:77:c5:19:a6:08:90:12:8d:95:8b:59:
         f4:61:f5:2e:03:23:7a:13:1e:ec:e1:8e:82:2d:0a:7f:5a:de:
         bd:d5:b8:8a:ef:a5:09:0e:be:9d:4e:74:5e:58:fe:60:27:0d:
         1c:6f:44:81:50:03:0a:b2:68:9f:12:07:90:32:84:16:fd:1f:
         d6:78:6d:ff:32:9c:71:89:39:35:b5:41:1e:49:0b:df:62:79:
         3e:3f:65:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:51:50 2026 by rpki-client