Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa
File:                     1f4fa054-5b55-3502-aeef-38673b6dda28.roa (raw, json)
Hash identifier:          8l8d1DQuD9HoPMKv91DZzQZhvRQZ/HWcSegjlTZjAF4=
Subject key identifier:   C6:ED:8C:04:28:85:6B:99:55:DA:F2:81:B0:0B:D2:5D:A1:65:5E:B2
Certificate issuer:       /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial:       010D0C9F4328584EE0C1F92C7651C5BEDA024A80
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     19905
IP address blocks:        23.128.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c1:f9:2c:76:51:c5:be:da:02:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=f5e4f8b1-b49b-47db-9cba-e32e557e47b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:83:ae:f2:84:f9:e5:d0:81:9d:ff:a0:32:0a:
                    89:ae:3b:43:12:d3:78:0a:4d:07:8d:8c:8e:9b:a6:
                    f7:e5:59:6b:a6:20:c9:ea:0e:af:51:e8:33:d2:bc:
                    96:46:e8:22:61:54:8f:1f:f3:f5:6c:c3:c3:c7:10:
                    69:42:b3:46:9d:b3:7f:1d:dc:2d:c2:48:63:4a:a3:
                    ad:9a:61:31:fe:a6:76:80:a7:18:8d:c4:c2:62:4c:
                    d0:a7:7e:03:cc:fe:46:0b:41:e0:99:5d:a6:c3:38:
                    7b:99:be:bd:b7:58:0c:be:43:eb:3b:2e:3b:2e:c5:
                    ef:5c:ea:af:03:e6:ba:0b:97:09:d7:ef:e2:98:68:
                    a1:1d:de:32:3a:02:9f:fc:69:ce:62:5d:3f:9a:a7:
                    a2:c5:ff:e4:06:fd:d2:f1:56:4e:52:4e:74:7d:59:
                    8b:00:90:11:0d:20:47:fe:2b:c9:4f:39:fd:b1:27:
                    31:19:4d:2c:97:96:d1:5c:be:89:38:7a:ff:83:f3:
                    92:76:2a:98:9b:b5:9c:8d:8c:1b:9f:39:46:0f:4f:
                    53:8e:db:12:ea:eb:d1:ed:06:46:af:e8:6c:6d:60:
                    ac:b4:93:62:5d:6f:c8:72:48:b3:8e:41:cf:77:17:
                    d0:ee:96:c6:c7:24:ac:ed:9d:1f:9a:1a:8a:f8:0e:
                    4e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:ED:8C:04:28:85:6B:99:55:DA:F2:81:B0:0B:D2:5D:A1:65:5E:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/1f4fa054-5b55-3502-aeef-38673b6dda28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl

            X509v3 Authority Key Identifier:
                keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.128.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:dd:60:b5:e4:80:b3:a1:e7:b2:5f:00:89:5b:50:86:2c:06:
         bf:cd:81:85:4a:38:0f:da:26:a6:e2:b2:bb:91:25:ad:8d:1d:
         e2:f8:b6:01:9d:2f:2a:84:49:44:b2:cd:37:ab:59:b1:3d:7c:
         31:5e:11:40:26:fd:cb:0c:59:c1:06:52:46:dd:da:e9:b1:95:
         48:ee:9a:98:dc:e1:ba:f4:2c:97:2e:4c:f0:42:dd:96:78:14:
         f1:f3:8d:b8:33:da:35:59:b5:4a:62:74:5b:45:fe:97:0d:2b:
         b9:ac:c0:88:2e:b4:eb:b2:9b:13:62:85:57:2d:d4:e8:ba:b1:
         45:a4:33:bd:29:d5:0e:95:46:3f:78:00:d1:5e:f3:b0:cf:59:
         e3:65:63:81:5f:b1:2e:3a:4c:39:cc:1e:1c:ac:30:27:cb:b1:
         82:86:ce:1f:35:14:2a:a0:75:0c:b9:25:bc:b4:87:56:1d:31:
         9e:75:09:1d:e7:97:ea:50:08:f8:ec:12:a7:28:2e:19:13:6f:
         e3:26:46:68:be:dc:30:56:ec:c6:b5:5a:4a:3c:2d:ae:12:75:
         c7:25:c1:93:87:88:99:f5:44:ea:5e:3d:22:28:36:07:64:92:
         5a:61:57:35:4e:fd:c9:76:d0:48:5b:d7:9c:ae:20:38:74:0f:
         af:cf:d8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:08:24 2026 by rpki-client