Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b687d94-79bf-3fca-8c6d-379c36d4be28.roa
File:                     0b687d94-79bf-3fca-8c6d-379c36d4be28.roa (raw, json)
Hash identifier:          TfMNnW07T7mYAUExW8X6BPSfCeZrjqM7bN+sH3C5h2I=
Subject key identifier:   97:F2:FA:3D:78:50:6B:F1:D3:D8:37:54:3C:2A:27:57:AC:0D:78:E2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F6F22E6E7D00DF00AD933A680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b687d94-79bf-3fca-8c6d-379c36d4be28.roa
Signing time:             Thu 08 Oct 2026 13:00:12 +0000
ROA not before:           Thu 08 Oct 2026 13:00:12 +0000
ROA not after:            Wed 06 Jan 2027 14:00:12 +0000
asID:                     63949
IP address blocks:        172.233.0.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 24 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:6f:22:e6:e7:d0:0d:f0:0a:d9:33:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct  8 13:00:12 2026 GMT
            Not After : Jan  6 14:00:12 2027 GMT
        Subject: CN=b1a404c9-29c0-4570-ab3b-fbfe7add9cec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6c:79:f0:a8:2a:f7:83:a4:a8:04:c4:cc:dc:
                    a4:f3:5a:c9:f8:f5:dd:56:5b:bc:3f:f9:68:c6:f1:
                    57:4b:2b:e2:02:52:66:98:14:79:f8:0f:5a:f6:b7:
                    f2:99:09:e8:97:c1:46:53:16:a5:01:99:b8:2e:5f:
                    70:b1:4f:b1:71:ca:98:e2:fb:c2:46:2b:36:e4:fa:
                    52:25:55:bc:d9:66:ec:df:a9:32:e9:b5:ff:3f:f3:
                    7a:ed:d1:38:85:2d:0f:09:92:a2:90:86:5f:a8:f3:
                    e3:92:89:e8:f5:03:42:a8:cb:af:c3:d7:8c:e2:63:
                    05:1c:1a:e0:b1:56:0e:37:c0:44:f1:c0:41:5a:be:
                    d7:2b:e0:c4:77:05:11:32:6d:4c:4b:db:68:ad:f7:
                    31:f2:bc:c4:91:11:2f:0a:02:82:1d:2e:3e:5d:1b:
                    99:6a:81:1f:05:7e:91:f9:2e:a0:b8:b1:d8:f6:41:
                    02:67:7d:89:24:3a:80:30:2c:e2:4a:37:7d:aa:65:
                    33:e9:6c:70:51:09:e7:f6:68:8f:c5:2c:5c:a5:47:
                    ee:9d:87:e1:3f:bf:a1:f7:50:55:ca:b1:72:c7:1c:
                    c2:40:01:4a:87:6d:bf:65:67:aa:76:fb:5f:09:6c:
                    51:8c:40:8a:2e:b2:22:c6:93:d0:8a:f3:49:60:f7:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F2:FA:3D:78:50:6B:F1:D3:D8:37:54:3C:2A:27:57:AC:0D:78:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0b687d94-79bf-3fca-8c6d-379c36d4be28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.233.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:32:d6:ce:9f:06:35:60:0d:8c:ef:c0:08:59:37:54:01:99:
         bc:aa:16:3d:1d:11:c5:fc:75:55:14:23:53:ec:e2:16:84:c1:
         36:8c:e6:3f:f4:73:54:49:fe:5d:8f:1a:77:4b:08:9c:e8:63:
         31:9d:ff:c7:12:43:6a:ce:e6:4e:6a:03:be:b1:7b:24:43:51:
         89:43:f4:00:19:95:7d:38:ba:b4:82:39:b5:00:df:4a:16:7e:
         a0:7c:bc:16:51:c0:e4:96:f1:b3:af:77:24:06:79:32:98:e0:
         52:b3:dc:86:f1:b1:b8:30:db:5f:70:ee:7f:dc:b2:d3:82:df:
         1a:67:d9:43:c6:8c:1c:22:be:33:06:3a:a9:70:a4:a9:84:72:
         58:a2:51:c6:d6:f4:12:f9:73:73:10:24:05:53:0b:bb:bb:9b:
         30:65:dd:6f:76:b7:65:b1:40:e1:dc:0c:95:92:e2:f3:68:89:
         e0:69:7d:ac:9d:b8:e0:ee:29:7a:62:9e:b6:53:4c:15:b2:6e:
         3b:3b:5e:1a:a6:9e:db:c5:3a:63:89:6c:3a:df:a5:c0:8b:72:
         f7:64:bf:fa:2f:e7:ab:7d:8e:a1:22:05:87:55:42:d8:0d:d3:
         f8:c3:89:51:f1:f2:0a:d4:4b:b9:de:1b:1e:a2:f6:a7:c5:af:
         ce:14:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 12:47:15 2026 by rpki-client