Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/07f8c0d9-a730-33db-879d-4b7255a22c83.roa
File:                     07f8c0d9-a730-33db-879d-4b7255a22c83.roa (raw, json)
Hash identifier:          FFLzZtkw2I1FMMimOpxtGE3vfmbhw6i0CtHSK8qaNog=
Subject key identifier:   60:CD:AA:54:2C:86:01:29:7F:3E:42:06:06:C1:1B:B2:06:D4:E3:BB
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584F119CEAE65EDD67D6C36F5900
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/07f8c0d9-a730-33db-879d-4b7255a22c83.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     16509
IP address blocks:        23.239.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9c:ea:e6:5e:dd:67:d6:c3:6f:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=8c61ade4-b09d-4120-9ef8-6c5560bf270a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:7d:0d:6e:3e:0b:41:d6:35:10:b8:47:a0:12:
                    4f:4f:8f:28:f3:ad:f8:37:b1:50:c0:86:9a:d6:51:
                    d6:82:30:1b:53:0d:32:5d:f7:4d:70:9c:41:04:de:
                    79:41:2e:9a:28:3b:d4:b1:39:d8:7f:db:3a:dc:74:
                    d4:82:0e:55:75:a4:93:12:64:f3:41:e1:09:56:02:
                    e5:d1:34:dc:65:bb:22:b4:62:f3:c0:f4:29:f8:de:
                    41:cf:1c:86:46:9d:b6:3e:fd:1c:27:2b:7b:a4:a4:
                    06:ec:b2:5d:9e:ce:3c:07:b0:35:25:46:cc:f7:a3:
                    3c:66:73:a7:82:f2:cb:75:97:77:54:f3:8e:e9:49:
                    48:47:4d:94:c7:35:0f:98:b3:da:c9:3c:e7:22:f9:
                    64:f1:0a:97:55:c2:d8:f1:83:44:75:89:f2:e5:4b:
                    ea:14:ea:95:44:d7:00:40:f2:24:45:68:2b:e1:dc:
                    eb:a5:d2:8a:9a:bd:27:03:53:71:32:3f:62:a6:2a:
                    be:bb:2d:8e:35:26:3f:43:7d:f9:a7:47:b8:0c:4a:
                    ce:ff:7b:15:76:49:df:9d:c0:6f:8a:65:31:2f:d6:
                    c5:94:8d:c4:3a:5f:33:ab:6d:82:38:49:b8:a6:82:
                    3f:cb:d2:5f:62:5c:3a:9f:8a:ca:cc:97:a7:c1:85:
                    eb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CD:AA:54:2C:86:01:29:7F:3E:42:06:06:C1:1B:B2:06:D4:E3:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/07f8c0d9-a730-33db-879d-4b7255a22c83.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.239.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:17:e1:5f:da:30:aa:2e:c3:71:93:4c:3c:8e:40:19:1d:51:
         04:f2:7b:6c:5c:7e:a9:0f:a6:c1:ad:e1:39:95:74:17:b5:c9:
         0e:d4:ba:fd:45:5e:80:3b:6f:93:60:8e:de:54:63:91:0e:c2:
         9e:60:fa:ca:9f:f1:74:2a:f8:99:2a:f9:01:11:f6:c4:74:c6:
         46:31:ce:58:93:06:37:1a:28:c0:d3:2f:93:25:39:f5:9d:03:
         6a:c5:e4:93:06:f0:4e:db:12:4a:85:3d:1c:c2:d2:41:5b:b8:
         3c:c5:ed:d2:40:43:1c:06:41:6e:74:cf:e6:31:98:cb:bd:39:
         54:cc:a6:de:45:be:a5:ca:d8:fd:9a:57:ae:48:d6:e6:ea:8b:
         84:43:dc:9e:eb:0e:40:e8:20:6d:13:3a:46:fe:1e:a2:71:50:
         5b:90:3b:2e:05:38:76:2d:2a:59:21:92:a7:6a:83:27:96:d7:
         8b:b8:9b:33:c0:34:2e:59:bf:22:aa:76:6a:72:dc:34:0a:f5:
         c6:63:99:a3:45:71:5b:97:c2:ca:25:1a:8b:01:cc:66:c0:57:
         17:cf:8d:31:6f:60:05:1a:2b:89:d8:e5:1d:1e:85:2e:42:7d:
         95:0b:27:79:8b:12:78:a4:da:90:d1:3b:e3:ca:7e:24:4b:b4:
         be:24:3f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 22:38:05 2026 by rpki-client