Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f8e07f23-cdab-31bf-8007-fdb75f005f60.roa
File:                     f8e07f23-cdab-31bf-8007-fdb75f005f60.roa (raw, json)
Hash identifier:          Gy9fPO1XiD0rRzQVAHCjMbCTvoOfGUAF4ntgtZ66rDQ=
Subject key identifier:   B5:0C:96:3A:3E:C7:51:E7:E7:30:3F:D2:36:CA:3F:DB:59:6E:30:0A
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584EC0A747C524F2BCD4C4B9B6E0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f8e07f23-cdab-31bf-8007-fdb75f005f60.roa
Signing time:             Fri 07 Aug 2026 01:00:12 +0000
ROA not before:           Fri 07 Aug 2026 01:00:12 +0000
ROA not after:            Thu 05 Nov 2026 02:00:12 +0000
asID:                     19157
IP address blocks:        23.86.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c0:a7:47:c5:24:f2:bc:d4:c4:b9:b6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Aug  7 01:00:12 2026 GMT
            Not After : Nov  5 02:00:12 2026 GMT
        Subject: CN=e48ff2b7-e669-4720-a402-286b717c031e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:5d:bc:ce:cd:63:2f:e8:78:12:ed:1c:f4:83:
                    05:5c:29:2a:36:5a:b0:90:2f:01:08:96:8c:cb:0c:
                    10:ea:e6:8e:b6:e2:90:15:89:bb:18:b6:7e:e8:6b:
                    a0:82:21:c5:00:6a:f4:a7:a9:db:24:ca:83:a0:86:
                    71:f0:06:9b:84:bb:84:21:7f:59:4c:88:6e:24:6c:
                    9c:a8:41:c7:d2:88:8f:c3:de:7e:96:a4:04:ff:8a:
                    5a:fb:10:9d:76:40:60:a3:a4:be:14:a0:dc:cd:5f:
                    69:5b:40:07:bb:a4:ab:f3:a1:93:33:bd:af:d3:16:
                    8a:23:dc:12:53:1b:53:a0:71:ee:2e:85:a0:f1:ce:
                    10:58:ad:f9:75:eb:a9:32:7f:d1:a3:5a:05:72:bb:
                    92:d1:d5:42:38:46:40:7b:e7:57:c8:36:e0:5b:e9:
                    e1:3b:ce:a9:43:a5:e9:90:c1:b7:46:62:9b:a1:57:
                    51:a9:28:98:a0:aa:0e:c6:f4:93:85:4e:a5:ae:56:
                    bc:9e:e6:2d:22:3f:4d:e0:0f:97:41:9b:7a:be:eb:
                    a7:52:98:0f:e0:97:e2:8d:e5:6f:5b:7b:ec:b1:d5:
                    7f:51:0e:28:a6:93:0b:1d:78:34:4f:82:7b:00:7e:
                    a0:d0:01:2a:84:3b:35:e8:49:3c:32:e7:55:64:a0:
                    9b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0C:96:3A:3E:C7:51:E7:E7:30:3F:D2:36:CA:3F:DB:59:6E:30:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/f8e07f23-cdab-31bf-8007-fdb75f005f60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.86.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:bd:37:58:96:9b:20:3f:bd:be:91:10:ba:bb:85:a4:d7:2d:
         36:ba:a7:06:40:5e:21:af:fd:4f:f2:ec:84:7e:7f:25:f9:f0:
         d4:d1:f1:a1:d7:7e:0e:a3:73:66:8d:90:4d:c4:7c:f1:f9:b4:
         b6:82:a0:b4:2b:ca:5b:26:1e:93:0a:8b:6a:df:1d:3d:3b:14:
         4b:30:0d:ca:b0:bc:35:ef:37:dc:3e:1b:a1:a0:fd:50:45:47:
         1f:57:2a:52:01:53:6f:fb:85:ea:13:6a:90:b8:a6:46:d6:fb:
         7f:e1:47:9d:61:18:c7:03:12:eb:e1:18:89:68:19:1e:16:6f:
         81:fa:31:4d:70:77:c6:8f:c1:e8:5c:f6:06:83:8a:27:87:81:
         06:59:d3:4c:2f:fb:6c:f4:0f:98:2f:a0:9f:f3:f4:79:80:c6:
         7d:49:e9:13:81:bf:c4:3e:30:61:91:2b:b4:c4:19:8d:b4:90:
         ea:20:95:ff:52:a7:d8:a6:20:4e:d9:64:d6:28:94:fd:ce:f8:
         13:a9:56:c6:a7:65:e5:71:b8:82:b0:89:90:1a:47:d5:14:15:
         85:bb:de:ec:d7:9e:85:55:1a:1a:dc:cf:75:e8:66:9e:21:fe:
         17:cf:ac:b6:c2:ac:df:e9:a6:ad:05:88:43:13:b3:d1:d6:06:
         d8:5a:47:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:22:55 2026 by rpki-client