Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa
File:                     f23e2a3a-a075-31c5-a07e-1d43dac01650.roa (raw, json)
Hash identifier:          JZ1+PICq66SCpex6mm8CBwyP7SXVi2Jmp8rxhbTCbp0=
Subject key identifier:   9D:30:FD:BC:D8:F3:46:9F:C7:D8:0B:A4:19:6A:85:E0:0B:AA:A5:53
Certificate issuer:       /CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
Certificate serial:       010D0C9F4328584EA798E29BB979E4ACC0CEA320
Authority key identifier: 31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     23528
IP address blocks:        168.203.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:e2:9b:b9:79:e4:ac:c0:ce:a3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c8c8316-08dc-4bef-99f6-a416ffa0b04a
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7af9c2ca-568b-4362-9bb3-81a434c7506f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:db:45:fe:e1:94:3d:e1:6b:a2:b2:2c:08:45:
                    f8:90:3a:ef:19:18:19:03:dd:3f:6f:16:3d:da:43:
                    fc:a2:79:1d:4c:37:14:11:08:b6:2e:f1:e5:41:8f:
                    05:77:34:7d:9a:ed:b8:f7:e2:2e:c3:c7:d8:e8:d6:
                    3e:91:67:65:11:b3:14:63:43:43:dc:f4:b7:b7:24:
                    ec:f5:28:47:76:e6:e2:ac:ba:78:72:ee:62:1e:64:
                    5d:d5:9d:d6:5b:22:79:77:1e:ee:7f:01:1b:52:86:
                    05:1b:fb:7e:ef:f7:87:24:d4:2a:78:5b:43:68:52:
                    fb:81:05:43:20:e1:d9:8b:81:d5:dc:00:46:32:f7:
                    13:35:f9:93:06:8e:37:6d:c8:e3:75:18:04:f0:02:
                    0d:88:c0:a7:a7:d9:2c:ad:c2:2d:03:47:3e:73:d6:
                    c6:0f:8d:2f:03:4d:28:1a:a9:ad:2e:17:6a:d6:f6:
                    da:4c:0e:2b:2f:a8:98:09:6b:dc:de:63:13:d4:24:
                    28:5c:bf:43:10:e6:e4:40:b5:0d:3a:c7:62:25:e5:
                    57:6b:89:51:5e:d4:db:56:ea:f8:a1:37:41:6a:89:
                    19:70:c8:a9:d7:1b:4e:f3:a4:ad:96:b5:2b:8a:05:
                    cc:71:6b:60:10:e3:b0:cd:1a:3b:7d:50:5c:db:79:
                    83:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:30:FD:BC:D8:F3:46:9F:C7:D8:0B:A4:19:6A:85:E0:0B:AA:A5:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/f23e2a3a-a075-31c5-a07e-1d43dac01650.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.crl

            X509v3 Authority Key Identifier:
                keyid:31:34:9E:08:70:2C:AB:B2:9E:2F:B4:AA:52:28:26:14:F3:1C:09:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5c8c8316-08dc-4bef-99f6-a416ffa0b04a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.203.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:28:93:4f:a4:f6:7c:60:c2:a1:21:88:46:1e:01:0d:74:43:
         70:3a:67:44:2d:82:77:fb:27:76:c4:ce:7b:e5:27:de:a1:a4:
         b3:18:2d:de:a1:8b:67:be:4e:8f:ec:a2:57:ea:70:d3:b6:f3:
         12:a8:0f:33:15:f4:5f:f0:5c:92:56:ab:30:31:d3:35:f1:02:
         3d:0f:e5:aa:24:81:05:6f:00:3d:12:54:45:7a:9d:3e:85:3e:
         8b:f7:13:de:34:ad:86:a0:73:37:11:5f:ec:f2:a8:63:c2:44:
         1d:a8:1f:f1:0b:c4:83:a6:51:01:78:83:aa:26:6a:fe:7f:0e:
         be:e4:37:76:35:91:75:8d:00:01:78:aa:57:5e:fa:05:d6:fe:
         e2:4a:4f:7a:9a:b6:d9:c4:62:b5:03:0f:58:a6:7b:19:37:96:
         1b:d3:60:4d:44:90:e5:d2:99:01:19:fc:c5:bb:90:9e:dd:15:
         31:92:0c:58:01:83:8d:5f:69:5e:5e:87:81:84:75:83:24:ff:
         ae:c9:73:85:50:02:b5:e0:de:c2:10:a0:68:e1:52:1d:ad:fa:
         83:da:06:30:76:db:a4:6c:7d:2e:b5:a7:31:61:2e:ce:16:ad:
         8c:07:50:27:c2:85:c7:80:8d:60:14:75:19:fd:2c:ba:72:f7:
         da:90:ca:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:14:34 2026 by rpki-client