Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f464d4a-50d1-3a5f-8c43-8ba2090ac256.roa
File:                     1f464d4a-50d1-3a5f-8c43-8ba2090ac256.roa (raw, json)
Hash identifier:          iqEgD7F43Blo2HLn4MREufy/wRANG5Gb1ICT5KbiPtI=
Subject key identifier:   80:08:30:D1:27:10:A3:BB:BC:E5:9E:B5:F9:70:AA:E1:7F:B4:D0:D6
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A74760553C8020FABED780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f464d4a-50d1-3a5f-8c43-8ba2090ac256.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     19157
IP address blocks:        23.86.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:47:60:55:3c:80:20:fa:be:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=9d0f0481-eac4-47da-8473-b3697953b3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:f3:28:fb:c4:68:ae:d3:dc:05:9a:2d:72:
                    71:7f:d7:81:c7:53:3d:52:00:57:8d:8b:30:f9:1e:
                    3a:e9:2c:fd:41:60:bb:ad:0d:db:a7:cd:b5:c8:ca:
                    60:c7:e8:37:7e:99:c9:a5:d5:74:e8:e6:6c:14:99:
                    98:77:7a:d5:ba:fd:af:7b:be:e9:95:bb:e0:1b:1d:
                    eb:75:65:ba:8e:c9:15:88:12:0f:5f:e9:c1:3c:cd:
                    a4:a0:77:f7:59:e7:11:5f:06:7a:31:ca:99:53:db:
                    cb:89:e4:4c:e6:4d:b3:b0:54:13:b8:b5:47:2e:aa:
                    59:52:2d:14:1f:55:a2:df:73:28:89:90:af:ed:17:
                    5d:71:30:4c:c7:6e:fc:e2:a6:69:c8:00:08:13:23:
                    bf:66:00:8a:f1:ca:26:ea:92:6b:28:c0:2c:3b:22:
                    e0:e9:10:34:3b:bb:6a:9b:8a:f8:3c:50:e6:a9:10:
                    ac:10:3a:73:53:e8:0b:57:8d:be:82:bd:f2:72:c4:
                    ba:13:a1:0e:a9:8a:a8:b3:7f:3e:19:98:bd:1f:c9:
                    79:cb:01:63:0c:d9:12:35:31:7a:68:2c:b5:61:a1:
                    44:fa:86:68:01:ef:c8:47:46:48:9e:10:48:53:74:
                    fc:8b:4c:3e:16:14:1b:11:3d:a7:4d:a4:15:c9:fd:
                    6b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:08:30:D1:27:10:A3:BB:BC:E5:9E:B5:F9:70:AA:E1:7F:B4:D0:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1f464d4a-50d1-3a5f-8c43-8ba2090ac256.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:b7:8f:48:7d:24:c5:23:8d:20:f8:8f:22:dd:8a:51:30:7f:
         d9:48:c3:08:5c:d0:a2:31:70:29:5a:40:58:d7:25:76:17:e9:
         1f:60:db:93:3c:c1:82:22:9a:8e:94:e5:e1:8d:59:b7:59:82:
         10:1c:3d:87:c9:94:3b:67:a9:c2:43:21:53:04:21:a8:1b:43:
         fd:60:14:79:6c:1c:28:b9:5d:d3:8c:37:81:d7:7c:f4:a9:26:
         53:26:80:bc:3e:89:68:e1:81:cb:f3:fd:b4:41:45:aa:d0:72:
         69:2f:a3:0e:3e:5e:9f:53:13:53:1e:a6:96:a2:da:50:a5:fe:
         64:23:7d:09:0a:18:1f:3c:9f:66:12:b7:70:05:c5:5f:86:14:
         6c:d6:8d:72:57:86:98:79:ac:3a:9b:ba:35:23:6e:04:45:e1:
         06:31:49:b3:10:15:dd:1d:14:46:d4:18:ea:83:ca:39:c7:e8:
         5c:9b:0b:fc:08:94:08:67:61:59:2f:0a:a0:52:3e:20:99:47:
         82:b1:09:5f:17:a9:5d:91:7f:41:a2:43:6d:2a:e2:d6:30:12:
         a1:cd:1a:f3:ac:42:a2:b1:e3:f5:8a:5c:fa:7a:23:eb:ee:bd:
         aa:9f:9e:2e:14:b1:9f:a5:31:f2:43:f9:f4:cc:89:ea:70:ba:
         33:b4:7c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:46:38 2026 by rpki-client