Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ab7571d-81c6-3bfe-a3bf-fe66d1a27634.roa
File:                     7ab7571d-81c6-3bfe-a3bf-fe66d1a27634.roa (raw, json)
Hash identifier:          GFpyE8o06E2cPOgyLUwIifWf89eqKroYUniJRqyyWNQ=
Subject key identifier:   2B:E5:AF:C8:10:10:97:61:75:DE:48:8A:E8:73:2E:23:DE:E6:3C:D6
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F305283148CFA84535F42A0A2
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ab7571d-81c6-3bfe-a3bf-fe66d1a27634.roa
Signing time:             Wed 16 Sep 2026 01:00:12 +0000
ROA not before:           Wed 16 Sep 2026 01:00:12 +0000
ROA not after:            Tue 15 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.32.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:30:52:83:14:8c:fa:84:53:5f:42:a0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 16 01:00:12 2026 GMT
            Not After : Dec 15 02:00:12 2026 GMT
        Subject: CN=7595c0c0-38e6-4963-9d78-d5bbf2dace4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:50:3e:e1:07:c2:01:ce:e7:f1:0f:84:bf:54:
                    d7:d6:67:f2:f2:8d:37:85:c7:df:5d:59:f5:c6:79:
                    6b:09:b1:4b:39:1b:48:11:ed:a8:ed:bc:16:63:23:
                    b9:2c:b1:fd:21:5d:d1:80:68:03:92:d3:c5:73:94:
                    21:89:3b:af:ec:a8:21:c2:ad:27:0b:7c:dc:2d:48:
                    ba:db:f6:1d:74:0a:b4:40:95:6c:bf:68:13:25:69:
                    60:64:71:e0:18:28:8f:a8:76:b0:6d:11:d8:d4:6a:
                    03:a9:d7:e5:af:ff:a4:0f:bc:76:6f:35:f4:f9:c6:
                    66:b0:b5:09:c1:d6:ef:bc:76:ce:69:d6:69:f9:4d:
                    ba:6e:ad:48:e4:30:76:c2:d1:2d:5e:b1:6e:f6:36:
                    5c:2a:b3:72:47:e3:5d:cc:83:1c:6c:c2:43:35:06:
                    de:68:e1:d0:d6:e5:58:71:c9:7c:0c:67:1f:20:b4:
                    69:01:96:83:50:f9:e0:53:4e:ca:ea:c0:38:b6:47:
                    59:04:60:20:58:10:82:a7:ad:fb:b4:54:3d:75:ac:
                    8a:9f:cf:0d:a8:f8:87:c9:77:93:03:3f:7c:01:e0:
                    5d:b7:31:23:1c:23:20:f9:94:ae:58:08:9e:9d:7a:
                    eb:a9:12:82:03:1c:d7:62:c8:49:fa:8f:77:76:b2:
                    2c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E5:AF:C8:10:10:97:61:75:DE:48:8A:E8:73:2E:23:DE:E6:3C:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7ab7571d-81c6-3bfe-a3bf-fe66d1a27634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.32.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:89:7e:23:42:a7:14:61:9e:11:69:ae:49:ad:a7:90:d1:1b:
         eb:f7:9e:2d:5c:da:cf:79:3d:b5:c2:ba:96:e1:30:de:8d:78:
         f9:0b:72:b1:77:af:c9:fb:47:90:27:a6:f8:4d:7d:77:22:04:
         36:77:a4:6d:0f:54:db:36:d3:4f:2c:db:1c:08:fd:1d:29:42:
         de:0f:c0:fb:b7:65:20:95:5d:9f:d4:0b:f9:e6:6e:00:32:3a:
         4c:26:d4:87:11:fe:7b:b0:f8:fc:94:9d:3c:ed:73:f2:b1:2e:
         77:2d:06:aa:3b:84:3e:7b:25:8f:4f:3b:df:6b:a4:6c:9c:51:
         b0:6b:0a:b4:92:7e:a9:74:2c:68:5f:a5:4a:40:78:4f:0a:bb:
         8a:54:46:d9:88:e3:28:d3:52:c4:18:4d:65:02:9a:04:72:ca:
         46:32:0c:14:98:f0:c7:23:b2:3a:99:8c:fb:af:1c:31:d5:0f:
         75:76:b5:04:e6:e8:93:90:0d:6f:db:e9:1a:fd:06:e1:e6:69:
         93:1f:53:d3:7f:92:f5:01:12:a4:ac:cf:1b:f1:03:91:ae:ad:
         e0:c4:fb:1e:b7:47:72:fe:5d:c1:fc:d2:63:9f:e3:4c:61:32:
         92:dc:73:df:66:3d:5c:1f:39:8e:b9:43:35:a8:e0:bb:00:df:
         92:65:a3:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:22:26 2026 by rpki-client