Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/441f2e78-f3ab-32e8-a409-597a3882b637.roa
File:                     441f2e78-f3ab-32e8-a409-597a3882b637.roa (raw, json)
Hash identifier:          WjJsKXDqdZIVYmFkecFllbEa6ZqDSjt+TpxnI4n3Qe4=
Subject key identifier:   E1:C1:47:E8:65:BD:BB:97:7C:BF:76:F9:DF:D4:AC:6A:AC:F6:C5:05
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EE921EFF8A17E7797928D1C40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/441f2e78-f3ab-32e8-a409-597a3882b637.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     20940
IP address blocks:        23.32.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:ef:f8:a1:7e:77:97:92:8d:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=6ecc0d77-5489-48a7-a5f8-09b7e67bfd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:db:10:e3:a5:05:45:8d:97:3a:56:36:81:
                    ad:e3:b3:d9:9f:3b:16:88:40:4f:54:b6:02:a9:e3:
                    08:7b:21:79:ed:fb:2d:81:01:83:eb:95:6d:56:c6:
                    bd:b7:5c:39:f2:02:9a:0e:f4:87:ed:73:42:b5:2a:
                    d3:b8:37:ba:2d:d0:e6:df:9c:4c:e0:96:69:2d:c0:
                    b5:2b:d6:f5:b6:e5:ad:d4:b8:2a:ea:89:c5:22:92:
                    ea:9a:78:05:0b:4b:5a:8b:c9:0b:65:40:17:c7:f8:
                    2a:5d:f7:86:95:48:57:7d:73:3e:24:3a:fa:ad:d2:
                    57:c7:1b:c5:ac:37:49:70:a4:3d:61:64:9b:f6:26:
                    d6:c8:53:d4:5a:33:7e:1f:c2:16:36:81:ad:2c:2e:
                    15:2f:2d:a5:10:c9:51:78:64:bc:33:74:f0:f2:6f:
                    67:59:85:c4:02:be:0c:ce:3c:bf:f6:1a:d5:c4:bf:
                    53:3c:be:9a:a8:ca:15:ae:43:3e:da:ad:86:a3:39:
                    99:46:c0:54:f5:da:d7:45:cc:a3:cb:93:4b:ac:ef:
                    cd:d5:d0:be:2e:14:89:be:b8:85:cc:ab:ab:67:b2:
                    45:b6:fa:2a:a8:de:af:07:e3:26:6e:cf:d4:c7:66:
                    e2:89:38:38:13:24:6c:e4:f0:09:44:81:9a:66:7f:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C1:47:E8:65:BD:BB:97:7C:BF:76:F9:DF:D4:AC:6A:AC:F6:C5:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/441f2e78-f3ab-32e8-a409-597a3882b637.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:5c:b7:69:d7:fe:b7:c6:c1:06:fb:d6:9b:36:f4:f7:b3:74:
         e8:f5:9e:18:89:d3:fc:53:fb:27:ee:fe:2c:3d:fe:a9:2b:09:
         6d:67:68:6c:54:b1:08:9f:60:00:94:59:59:3e:72:8b:4d:6d:
         12:24:80:7b:13:85:6b:bd:aa:03:51:40:49:f6:e8:b1:18:7c:
         ec:54:e1:e8:cb:68:ab:9c:d0:2c:3a:db:59:bf:4b:1d:6f:01:
         bc:ec:7f:48:b2:50:19:0a:56:d4:ee:34:42:a9:e1:41:07:b5:
         a9:fa:3d:9b:86:d3:3a:05:b3:6a:e7:76:77:17:4b:d6:74:6e:
         34:aa:be:87:5c:80:05:58:bf:23:19:11:4a:1e:25:86:f9:b6:
         b3:86:1c:18:d5:20:f8:45:6b:fe:03:8d:32:b2:37:28:ce:75:
         78:a2:eb:d3:c5:c0:f9:40:92:b1:64:c2:fc:eb:bd:df:64:41:
         1f:93:3a:68:d5:4d:0b:d5:1e:ad:02:28:b2:8a:d4:89:8c:97:
         c9:8d:6e:1b:f5:c5:29:8e:52:c9:65:49:11:fb:22:e4:4a:26:
         54:d4:ef:b4:29:af:89:9d:2a:07:75:46:94:87:bc:9e:30:91:
         20:8b:1c:de:bc:8c:b6:ef:a9:72:dd:e5:2e:bd:2d:eb:1b:8f:
         15:47:1b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:31:34 2026 by rpki-client