Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc4009fb-eaed-32bd-a7f6-641e13482182.roa
File:                     fc4009fb-eaed-32bd-a7f6-641e13482182.roa (raw, json)
Hash identifier:          AwCJryQ3vyWrC5wuIgpKb2OcBRASLpYVdSivBVZ92hQ=
Subject key identifier:   E8:F3:F6:06:BE:49:F3:86:44:D6:72:BD:DB:53:FD:2D:85:24:64:38
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F03A7EBEF2210348E62A3D700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc4009fb-eaed-32bd-a7f6-641e13482182.roa
Signing time:             Mon 31 Aug 2026 01:00:12 +0000
ROA not before:           Mon 31 Aug 2026 01:00:12 +0000
ROA not after:            Sun 29 Nov 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.73.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:03:a7:eb:ef:22:10:34:8e:62:a3:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 31 01:00:12 2026 GMT
            Not After : Nov 29 02:00:12 2026 GMT
        Subject: CN=3f865ea4-c07c-4779-9c4a-5ff7ac36d9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1e:60:19:05:e2:a2:35:c6:b5:91:a5:e5:10:
                    3c:97:b8:4c:95:ff:53:0e:b0:44:c6:6b:8d:32:6c:
                    72:7f:c8:76:f2:09:01:f3:f0:40:f6:02:2a:be:fd:
                    b9:6b:c4:87:fb:1a:ca:cf:d6:e6:11:0d:ee:c9:b8:
                    37:d1:9c:72:ec:a1:a8:68:7b:38:3f:d8:77:f8:d2:
                    37:ab:7b:a7:07:b6:3e:5e:72:24:30:23:f7:e3:6c:
                    ea:b7:27:e6:c9:0a:4a:13:d0:7a:ec:9d:55:09:2b:
                    d0:24:fc:c3:2c:b8:2d:1a:35:13:62:59:e6:d1:6a:
                    6e:71:37:39:3b:66:ed:92:76:40:f7:91:53:93:8d:
                    2f:e8:68:54:4b:da:2d:7f:ad:4a:99:43:3e:9e:1a:
                    cb:6c:80:12:e2:1a:d8:bc:da:a7:63:04:e1:b3:f1:
                    0f:d8:4e:87:90:23:34:f3:f9:8e:3b:1c:75:5f:ce:
                    5e:ee:c5:16:70:e7:0d:cd:3a:92:b5:4b:4a:8f:b1:
                    83:35:3d:93:a9:fa:f3:1b:ee:b5:09:2b:4b:db:8e:
                    6f:9f:6c:24:55:a7:68:ac:c5:b8:33:d2:7b:0a:9c:
                    6c:a1:df:9d:22:bc:2f:84:65:f7:8e:43:ce:a0:4c:
                    32:fb:b2:98:22:d0:17:1d:10:40:2a:62:52:99:37:
                    8e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F3:F6:06:BE:49:F3:86:44:D6:72:BD:DB:53:FD:2D:85:24:64:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fc4009fb-eaed-32bd-a7f6-641e13482182.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.73.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:8a:53:5c:75:cd:88:da:7f:4d:4a:7d:42:8d:df:96:82:28:
         01:a1:49:28:bc:49:07:20:05:99:9b:17:e1:db:35:9c:ea:f8:
         2c:8f:44:64:46:ba:55:16:ea:c0:5d:3f:c7:b3:fc:ed:72:10:
         d4:98:9f:cd:5b:0d:15:82:d4:a9:b5:93:85:2e:71:81:a3:7e:
         03:6b:63:4a:36:0b:f1:5b:c8:8c:74:52:02:c8:4e:5a:d6:fe:
         b3:23:b6:83:2b:1d:37:83:d2:fe:48:80:35:d7:1b:b6:31:12:
         f0:36:b6:93:c7:5c:95:52:4d:7f:c5:42:cf:5a:96:59:35:4d:
         02:bf:2c:0e:a8:b1:12:08:fd:29:ab:f0:f8:4b:bf:22:46:f6:
         52:20:14:8c:95:8c:1c:b5:b6:1c:03:03:0d:73:36:49:8d:c7:
         b3:30:44:32:ce:78:72:3d:25:97:3c:35:20:1d:eb:0d:ad:21:
         cb:fb:af:72:39:df:87:96:d2:fa:c9:d3:d6:7f:af:92:30:40:
         d1:bc:88:98:2a:7e:8c:18:1c:79:8b:1c:37:c4:36:52:4e:e5:
         93:ea:23:e7:0c:38:e4:cb:86:23:c2:f6:fa:44:22:24:bf:60:
         c5:e2:6b:26:c2:e3:2c:02:53:d2:cb:74:91:68:43:15:34:b2:
         7c:4f:14:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:46:50 2026 by rpki-client