Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8333d62-c647-3e66-a14f-4afa288472ab.roa
File:                     f8333d62-c647-3e66-a14f-4afa288472ab.roa (raw, json)
Hash identifier:          ZnSypZDumPln/sWf1CzqfEffyqleEJuYQ9KmO1VYLS0=
Subject key identifier:   91:83:E1:4B:AD:17:33:13:1D:28:AF:48:4C:8B:E1:6C:A7:52:96:EF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F093D040F7D96AF5BB9A12800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8333d62-c647-3e66-a14f-4afa288472ab.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     1267
IP address blocks:        23.10.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3d:04:0f:7d:96:af:5b:b9:a1:28:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=b194d3fe-1d94-4a76-9ff5-b4e802fc9eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bb:be:5f:b8:c0:ca:35:5a:ce:ea:36:2d:7d:
                    72:8f:5b:f4:0e:a5:b4:6c:3a:96:62:a0:37:00:b5:
                    6a:c6:7b:8f:4f:c1:63:7d:7a:e7:42:58:04:d7:d6:
                    69:83:7f:b6:43:d6:ca:87:e8:fd:09:73:47:1a:2d:
                    cd:ad:0c:27:30:21:8b:08:1b:1a:f2:47:f6:5d:83:
                    36:55:3d:af:85:10:ff:52:0a:86:b8:84:de:b0:d5:
                    1e:54:8d:7c:70:c3:71:9a:b9:88:3c:a7:95:35:aa:
                    85:df:84:eb:a8:b8:96:29:91:43:25:1b:67:2b:a7:
                    b6:d7:72:d2:1b:a4:6d:db:e4:80:fb:7c:ce:29:ec:
                    e9:6f:94:0f:f0:6c:04:11:f8:9b:77:d3:77:74:f5:
                    1b:dc:bb:b4:1d:b0:63:15:cc:2b:5b:19:6f:ba:67:
                    08:f1:61:b1:85:1c:0d:fa:73:f5:0a:18:cf:d5:dd:
                    77:34:76:b1:33:b7:70:7a:50:5d:9d:3a:bb:8a:e1:
                    91:18:f2:45:48:1e:c8:80:10:f6:65:bb:d7:d5:94:
                    53:13:e4:21:d1:e2:4b:88:a8:55:d7:bb:a2:3f:ad:
                    68:35:60:89:80:4a:08:0f:08:62:e4:88:7a:d8:e1:
                    e1:69:ed:5b:91:b3:df:46:99:e8:48:09:18:fd:e3:
                    44:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:83:E1:4B:AD:17:33:13:1D:28:AF:48:4C:8B:E1:6C:A7:52:96:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/f8333d62-c647-3e66-a14f-4afa288472ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.10.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:a1:c9:3d:8f:50:bf:07:b6:4e:45:6e:e0:56:23:a1:16:9e:
         8d:c4:7d:23:db:a8:47:f5:91:7b:18:07:0c:a3:ec:49:de:99:
         a5:71:8c:ef:2f:a1:c3:29:f0:cf:69:da:02:6b:34:f5:c0:56:
         4a:0b:75:3c:93:60:ba:01:26:67:2e:6b:b8:c0:92:0f:67:b3:
         b2:54:45:5d:94:06:ef:a4:ac:da:99:0a:c9:aa:dc:48:49:5b:
         99:db:0a:1b:69:3e:6a:fd:33:5e:0f:eb:8a:40:22:e5:09:62:
         45:d9:1a:1d:d2:36:43:78:da:1a:ef:80:c3:2a:db:2b:fe:9d:
         74:7e:7d:fc:8b:62:02:1e:3c:da:aa:47:e0:2c:1b:17:24:57:
         03:45:c1:0c:94:93:4b:cc:07:75:04:28:99:df:2b:de:33:a8:
         ba:00:7c:c9:9e:c9:58:5d:bc:04:5e:e1:47:34:67:21:55:8d:
         f4:af:04:d8:bc:92:e6:5a:11:19:60:a3:2c:58:5d:3a:2b:85:
         56:68:61:ff:7a:01:97:fb:95:09:20:9e:2c:36:7a:c2:8a:84:
         4d:f0:0b:df:88:ea:50:00:22:ac:b8:ea:b2:69:43:78:a3:2b:
         ed:f2:68:4c:ad:ab:72:a5:ca:92:7c:b4:74:65:84:f7:58:ae:
         83:46:2d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:15:09 2026 by rpki-client