Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dba02a91-f3d7-35ff-bdef-d63769965f7f.roa
File:                     dba02a91-f3d7-35ff-bdef-d63769965f7f.roa (raw, json)
Hash identifier:          CLeHq4tCZ7t3E0vqZrL/vEb28M4liBs1lipxogbxwTU=
Subject key identifier:   44:11:B3:31:69:36:63:A3:13:33:B4:FA:D9:16:2C:AE:AC:CD:14:5D
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA790E770A0E8EE2300BA7740
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dba02a91-f3d7-35ff-bdef-d63769965f7f.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.195.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:90:e7:70:a0:e8:ee:23:00:ba:77:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=3e8c7ad7-a42e-4d88-934f-048475d37896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5e:5e:b7:a1:13:55:08:fc:8a:2f:2c:d7:03:
                    63:8f:c0:46:a5:11:bb:eb:31:55:e4:8e:f3:e9:61:
                    0e:b5:2f:56:3c:9d:51:07:87:36:4c:86:ab:9c:bc:
                    1b:72:54:44:cb:06:02:47:4d:36:ab:34:68:e2:57:
                    63:54:15:08:23:e8:f8:db:fe:6d:26:71:70:cd:40:
                    dd:08:6b:30:ec:01:4a:62:15:39:58:56:44:19:02:
                    2f:c6:c1:83:2e:4f:58:4f:3c:b6:2b:d6:82:d0:a7:
                    b2:c5:02:e5:c5:6f:bb:79:12:31:71:b6:1b:42:0c:
                    51:d2:d3:f7:45:02:6d:65:54:71:73:6e:65:2a:92:
                    d4:e0:2f:de:73:0b:9c:d1:ef:e0:89:7c:b1:60:11:
                    ea:b4:83:fc:4f:7a:c4:0a:4d:d5:44:b5:42:7c:44:
                    79:53:16:9f:b5:91:0e:f2:72:6e:a3:6c:a2:a2:62:
                    3c:87:3b:5a:31:de:1a:80:45:d7:ab:2f:33:96:4b:
                    8f:d5:63:29:dd:7e:df:b4:fe:fc:53:28:55:16:f2:
                    b9:e6:83:80:3d:b5:d3:f6:66:44:67:28:f5:a0:f7:
                    3a:d2:76:6e:a3:60:a0:dc:2e:bd:9a:6e:38:b7:4d:
                    76:50:c0:d6:a2:cb:ef:32:47:09:0a:3e:92:f8:f2:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:11:B3:31:69:36:63:A3:13:33:B4:FA:D9:16:2C:AE:AC:CD:14:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dba02a91-f3d7-35ff-bdef-d63769965f7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.195.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:22:58:82:64:63:5f:84:dc:76:e9:f7:98:41:0e:ad:75:e4:
         86:7f:02:1d:89:c0:18:2b:0a:31:f3:25:69:e5:20:b1:86:11:
         98:25:7f:a3:db:a3:b0:c4:73:eb:98:e8:8b:f7:d5:8d:0c:af:
         2f:0c:f8:58:cb:52:03:a6:f4:e4:55:a8:9a:69:f5:dc:4d:77:
         d6:c8:33:b2:7c:b9:90:b0:9f:30:9b:5d:c5:8e:e3:2f:85:e1:
         c8:dd:6d:dc:bb:3e:c9:c3:de:ed:4e:5a:13:cb:39:bb:e3:34:
         31:f9:e1:9a:a2:27:bd:13:74:2f:32:27:96:f7:56:d4:1c:2f:
         75:fe:95:41:b4:06:b5:7e:3c:1c:df:70:09:1d:00:30:c1:d9:
         2c:0d:e1:c0:17:3d:99:15:7a:53:6d:4b:61:e7:1a:cd:3b:ee:
         f8:5a:52:e6:69:85:c1:de:9a:9d:da:d0:13:45:f7:1a:51:d8:
         58:82:ec:98:75:ca:3b:58:90:a3:95:9f:bc:11:c0:7d:ac:9d:
         cc:b7:99:f3:d0:19:ed:e9:06:58:1d:5e:09:64:57:3d:7f:d6:
         96:3d:b2:5a:fc:2a:b1:cb:9c:ca:d0:55:ce:fd:4c:6a:cb:c0:
         ac:49:66:60:85:de:e0:05:be:33:a1:19:33:a8:84:c9:7d:ab:
         b6:0d:c7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:57:44 2026 by rpki-client