Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/391fae6e-c374-3d34-84aa-27f280411df1.roa
File:                     391fae6e-c374-3d34-84aa-27f280411df1.roa (raw, json)
Hash identifier:          AuZHWAaRCouArNtbwUpgHZAHiMgpNnXiNLDbfbR8wXo=
Subject key identifier:   E5:93:C9:50:D8:4B:9C:64:8F:B6:D2:EE:6F:F8:AB:14:1B:CF:1E:8D
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584E5A49F68D90EF44148DE1A280
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/391fae6e-c374-3d34-84aa-27f280411df1.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     20473
IP address blocks:        8.9.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f6:8d:90:ef:44:14:8d:e1:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=15453022-c64c-4ce3-9987-fbed1a1dc069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ed:92:f8:ad:f2:c7:47:66:38:d5:1b:c7:d5:
                    d8:84:ff:fc:b3:8a:b5:ee:aa:45:7b:1c:df:98:38:
                    55:2e:8e:18:a8:66:fc:bc:02:13:7d:20:99:60:e0:
                    4b:d9:9b:8f:f0:ce:2f:64:9f:ba:be:27:e5:13:2a:
                    53:86:5d:17:61:fd:df:0f:9d:81:e0:65:64:25:ab:
                    b1:c9:ef:bc:e6:4e:b9:1d:a4:4f:e8:9d:a5:d6:76:
                    8b:0f:70:5c:55:46:48:53:f8:14:40:4f:11:b4:bc:
                    2e:d3:3e:2a:d2:12:6d:93:b9:6e:84:01:7d:19:83:
                    c6:09:4f:15:d9:a9:78:4c:d7:a0:b9:ad:a7:88:f0:
                    0a:d4:59:18:62:2c:ac:17:b0:76:07:df:9e:ba:fe:
                    ac:91:b9:a2:35:37:4f:7b:98:e5:f4:dd:ae:ba:ae:
                    cf:10:19:8a:5c:ed:b3:4a:77:fb:6c:d2:34:d2:b7:
                    95:5d:51:7d:6d:bb:a4:5b:9b:a4:0c:6e:6d:60:b0:
                    33:4f:49:35:23:10:b7:d2:be:24:08:6d:2b:01:fe:
                    10:09:af:27:2b:9a:d6:fe:82:89:53:7d:76:bb:b6:
                    ad:f3:a8:bd:6b:b4:aa:18:46:0e:21:de:8d:44:9d:
                    df:3b:b4:a8:bf:8e:42:da:7c:66:cc:16:ac:85:54:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:93:C9:50:D8:4B:9C:64:8F:B6:D2:EE:6F:F8:AB:14:1B:CF:1E:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/391fae6e-c374-3d34-84aa-27f280411df1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.9.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:8a:a9:8a:09:20:e0:77:5e:3f:f2:ea:47:f1:f1:67:6f:5e:
         23:2e:fa:13:6c:1a:3d:ec:19:0f:fc:80:9f:b4:4e:67:61:77:
         6d:a4:c0:3d:8b:8b:ef:b9:85:34:6a:27:37:bb:65:42:25:e7:
         f8:23:68:14:96:55:19:6a:71:de:2e:21:83:7c:13:f7:37:9f:
         25:b1:21:df:00:6b:c7:0d:41:5c:35:dc:51:3e:a0:09:15:ba:
         b3:57:d2:4c:25:63:c8:11:44:68:96:a0:65:03:03:9b:07:05:
         43:bc:11:47:06:59:a8:71:e4:cf:56:e2:54:5e:69:07:29:3b:
         c2:79:e4:fb:c7:b9:48:69:cc:94:1b:55:cc:c8:0a:ac:67:58:
         a7:e7:ae:f7:d3:8a:22:6d:c6:77:32:bd:8b:a7:f7:e7:93:c9:
         4b:76:56:fc:69:c5:23:2e:c2:75:fc:86:24:62:fc:24:06:c2:
         61:53:69:42:89:bd:9e:7c:24:a8:bf:61:65:6d:d8:db:bf:f1:
         46:d6:ed:f3:2b:4d:31:e3:6d:66:d8:12:c5:6b:24:a6:c9:17:
         84:24:54:16:45:a0:79:97:65:67:99:6d:96:dd:f8:b5:51:3f:
         02:1b:2e:55:67:df:4e:e8:3d:a8:18:0f:e3:77:17:a1:fb:2d:
         f8:f4:45:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:26:07 2026 by rpki-client