Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac6dfc81-a09e-3895-acab-d6fb3ec3a242.roa
File:                     ac6dfc81-a09e-3895-acab-d6fb3ec3a242.roa (raw, json)
Hash identifier:          X8d4XM+IPqOjPjFKXGH+CI+Moq3f7ZHzzLhyH3HVA1c=
Subject key identifier:   FB:DB:FA:B2:41:14:ED:DE:E5:F1:89:04:F3:1D:99:E9:55:D4:CE:E4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4985BD2C6EBD0BB215365EF0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac6dfc81-a09e-3895-acab-d6fb3ec3a242.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.202.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:85:bd:2c:6e:bd:0b:b2:15:36:5e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=be57d2c4-ff7d-4a93-9ac4-ba3330e15e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e1:b8:1d:25:b8:85:ba:34:4e:14:17:4a:9e:
                    37:26:9f:18:ef:68:d7:cf:d9:f0:38:a6:0a:75:57:
                    31:4b:51:7d:4d:5c:9b:e7:a8:33:67:5c:95:b2:c6:
                    dc:57:6d:b0:b9:7e:34:6e:f7:66:c9:70:57:be:3b:
                    e2:8e:af:a4:46:59:9a:df:51:b7:7a:7e:15:f1:57:
                    a3:2f:7c:e6:ba:47:ec:55:1a:62:ef:00:49:79:2e:
                    9e:b1:ba:56:9e:f2:fa:c0:7b:58:df:4c:70:dc:59:
                    c0:6c:48:66:38:a5:85:5a:e7:04:83:73:32:43:f7:
                    71:4b:75:7a:07:d7:76:69:8a:1d:f4:43:08:25:07:
                    4b:8f:b3:ca:2b:48:75:17:e2:39:92:93:84:31:6c:
                    9d:84:38:b0:ec:0a:ba:48:cd:5d:c3:18:46:dd:c7:
                    e7:c9:ea:16:e0:3e:7c:1f:ac:35:36:58:d9:bb:cb:
                    a9:c4:46:12:68:f6:85:e1:49:a8:76:9b:64:17:36:
                    e4:02:4d:7a:4d:1b:32:b0:37:a8:1a:d0:df:4e:49:
                    39:9f:87:a9:f3:17:3c:8e:87:e7:96:cf:c9:d9:17:
                    52:9b:a7:0d:91:56:d1:ea:29:5e:ac:e4:32:3c:e1:
                    51:c2:d0:4f:7b:9f:d0:5a:42:8e:08:e1:44:12:8a:
                    c2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DB:FA:B2:41:14:ED:DE:E5:F1:89:04:F3:1D:99:E9:55:D4:CE:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ac6dfc81-a09e-3895-acab-d6fb3ec3a242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.202.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:9a:b5:a5:d0:78:28:32:cf:aa:26:23:d5:dc:34:f5:9c:73:
         f8:10:e2:f4:8c:10:43:84:67:75:3b:45:ac:e3:f4:c2:25:d7:
         dd:3a:bd:d2:2d:62:bf:e5:84:02:38:63:9e:df:22:c3:11:c7:
         f5:4a:a5:ff:52:a5:b6:3b:88:66:a9:5e:35:2a:33:fe:31:4e:
         cd:63:6b:31:43:2e:31:1b:10:0e:f7:ea:03:8d:78:82:89:46:
         3c:c7:fa:ea:7f:6b:9e:dc:61:7d:47:18:51:0a:b6:63:0c:d2:
         bf:5e:05:77:9f:93:9f:d5:b7:c6:a2:b2:23:24:ee:02:3d:da:
         62:7b:38:b5:5a:11:36:a4:bb:ae:16:65:de:b5:d1:af:3d:cf:
         fc:91:ba:1a:bb:3e:8b:97:1a:8b:86:39:9e:ea:75:af:60:c2:
         83:a8:6e:e0:67:5b:97:37:c3:61:68:d6:4d:bd:9f:62:c8:03:
         5b:94:ad:fc:8e:36:23:c7:4d:87:df:00:75:41:06:0a:0f:a6:
         35:b6:2e:4f:9d:99:dc:ac:37:6e:8c:e2:64:d7:1c:03:26:81:
         4d:bd:75:18:55:92:4d:d0:40:97:04:b8:77:6b:ba:1a:a0:b4:
         30:26:d7:58:3c:ff:f0:61:e3:96:51:e4:1e:dd:7d:e1:35:76:
         c3:a8:92:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:32:20 2026 by rpki-client