Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1640a3ef-82a0-3584-8415-0cb4d0e379fb.roa
File:                     1640a3ef-82a0-3584-8415-0cb4d0e379fb.roa (raw, json)
Hash identifier:          qqE/j1GzR9DXPHr4Vof+lcHk7OzMFN4s1JHKxvH90AA=
Subject key identifier:   47:D4:95:19:E7:28:B1:ED:73:7C:47:08:CF:9F:0F:C0:9E:54:81:66
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E6144BED17EF0047562D104C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1640a3ef-82a0-3584-8415-0cb4d0e379fb.roa
Signing time:             Fri 03 Jul 2026 21:00:11 +0000
ROA not before:           Fri 03 Jul 2026 21:00:11 +0000
ROA not after:            Thu 01 Oct 2026 21:00:11 +0000
asID:                     20940
IP address blocks:        23.72.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:61:44:be:d1:7e:f0:04:75:62:d1:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  3 21:00:11 2026 GMT
            Not After : Oct  1 21:00:11 2026 GMT
        Subject: CN=03bc3363-f496-4c6b-b1ab-42c48870a955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:39:3d:0e:65:51:d0:ae:93:6d:60:23:72:
                    20:94:1d:e7:cf:ad:c7:b7:22:e4:8e:c1:6d:59:d4:
                    f8:37:8c:68:7d:b7:6e:a9:95:3a:58:8d:5d:db:e2:
                    79:c6:12:af:07:3f:54:97:8c:a0:76:70:04:ad:ee:
                    61:7e:ae:ad:14:5d:3a:53:51:21:56:02:21:a6:eb:
                    44:64:25:a7:2c:fd:06:e6:16:0c:19:be:0b:a2:3c:
                    16:47:ea:e0:3a:6c:b6:3b:48:71:ed:37:1e:42:91:
                    21:3f:95:7e:01:3a:2e:47:5e:39:fa:b4:eb:3f:c0:
                    51:87:b3:49:47:a5:11:da:9a:95:1f:d2:96:f6:0c:
                    20:41:70:81:7e:bc:da:a7:50:f8:25:9e:e6:b9:70:
                    e3:ae:b4:51:12:13:e0:4f:87:c5:e5:df:1f:48:cc:
                    2a:25:1a:4e:30:3e:57:1d:45:be:53:ef:a4:3a:7f:
                    6c:50:61:20:17:96:86:5e:64:b5:5e:ab:b2:7f:01:
                    3e:70:2e:dc:4a:ac:8b:19:7c:48:6c:27:c9:cb:fc:
                    c1:48:33:0d:a6:a1:46:c4:f7:c2:55:b2:c7:2c:db:
                    f6:7d:d3:4f:29:2a:ea:09:af:f8:87:ec:7c:ac:33:
                    6d:b5:5b:4f:63:e8:ff:4e:ac:dc:1e:30:d0:a4:b5:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D4:95:19:E7:28:B1:ED:73:7C:47:08:CF:9F:0F:C0:9E:54:81:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1640a3ef-82a0-3584-8415-0cb4d0e379fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.72.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:bc:e6:3d:9c:d9:cd:3a:c1:9d:4f:7a:23:05:d3:2e:06:f0:
         2c:9b:8b:d5:05:30:a2:7b:9a:4e:79:06:46:92:9b:7b:31:0c:
         26:e9:6a:33:11:2a:9e:d8:24:da:12:86:50:53:61:5c:98:33:
         7a:6c:2f:18:4e:16:f7:79:b6:fd:e5:3b:4d:5f:a6:15:a6:19:
         26:ed:18:31:e7:9d:de:39:a3:b6:f8:73:1b:0e:7f:1f:a9:0b:
         64:f8:df:e0:d1:08:50:1d:40:52:e3:8e:cb:52:e8:1f:67:c1:
         0e:49:a8:f5:b8:27:69:d1:83:da:24:8a:44:e9:d7:d2:ba:32:
         26:28:d3:c8:11:ab:9b:5d:69:6e:ec:5f:75:e1:fe:e1:29:cf:
         2f:52:e2:5a:9a:79:81:b7:88:c2:a8:e4:11:af:ee:02:e9:48:
         9e:5d:20:a6:38:19:21:56:7f:09:ed:63:29:77:1c:e1:3e:c2:
         ed:18:b7:38:6b:a3:47:dc:06:14:08:05:95:0f:f6:3c:2d:05:
         f5:f7:52:82:70:04:96:c1:66:1a:82:5e:8c:f4:75:f8:07:96:
         75:6c:65:2b:bc:e3:21:c9:fa:0e:bc:b4:cb:a5:ed:ec:a9:74:
         f4:23:da:eb:1f:dc:9c:fb:fb:81:d9:8c:2d:61:61:d5:9b:f5:
         2c:d1:0a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:00:55 2026 by rpki-client