Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1d8ca2-9503-3126-8dbb-6f79373a0863.roa
File:                     9e1d8ca2-9503-3126-8dbb-6f79373a0863.roa (raw, json)
Hash identifier:          MOS1WmyLXW1Yi8LmNq0OrAKLCsm8qpW7Bgov10VhipA=
Subject key identifier:   C4:B1:08:37:AD:AD:C5:89:D6:01:D5:0B:DD:45:DF:53:49:4F:34:0B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F427821C9E1423ED89724FB80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1d8ca2-9503-3126-8dbb-6f79373a0863.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        23.201.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:21:c9:e1:42:3e:d8:97:24:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=b85eb923-585f-4541-850d-42946e707fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1c:56:36:76:60:77:41:5f:11:a4:79:73:aa:
                    47:8d:0c:2b:f4:be:bf:24:65:11:08:dd:27:2f:ff:
                    ee:80:12:f0:b5:4a:8f:f8:8a:b9:7d:55:2f:d7:49:
                    ae:1a:68:22:9b:7d:16:ff:0f:d5:25:99:7c:70:6b:
                    2f:01:56:10:0e:3e:c0:44:93:77:8b:5c:60:56:e8:
                    f8:e5:1a:ad:0a:c3:52:40:19:eb:89:ed:cd:b3:c6:
                    ae:0c:d8:84:af:43:1c:49:75:62:a5:93:56:49:a0:
                    31:db:8a:b2:71:a7:54:65:ec:5a:45:68:da:f1:c8:
                    e1:2b:05:7c:03:1c:77:b4:90:eb:67:e1:7f:69:7e:
                    3b:18:6f:fa:c5:c5:4f:0b:68:2b:0d:67:94:b6:c4:
                    44:c4:95:85:96:27:0f:f9:47:53:13:0c:43:9e:fe:
                    47:b2:39:7a:36:70:cc:46:93:de:2a:95:39:96:f5:
                    9b:20:02:3d:5f:16:f0:97:e0:87:49:11:2d:c2:10:
                    7c:20:1b:36:0b:4c:66:45:43:e4:89:0c:54:3d:75:
                    d9:e4:20:28:59:62:6d:da:24:09:b8:af:1c:9a:32:
                    31:7f:74:20:f5:23:38:87:47:04:3f:4d:41:43:e8:
                    c4:f5:0e:ba:02:ab:a5:96:bb:4d:5c:bd:4e:e6:63:
                    6f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B1:08:37:AD:AD:C5:89:D6:01:D5:0B:DD:45:DF:53:49:4F:34:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e1d8ca2-9503-3126-8dbb-6f79373a0863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.201.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:85:88:81:e8:96:ae:58:b2:9e:9a:a6:bf:88:48:e8:4c:7c:
         31:67:bd:dd:15:5c:12:51:1b:e2:67:20:f2:95:e1:fa:0c:b5:
         7b:ce:a9:8d:4e:21:07:1a:0c:a0:15:e6:ba:e1:ce:ba:65:3e:
         1e:34:5a:c8:5e:52:6e:97:90:44:3b:16:5a:86:40:54:b8:ce:
         67:2d:c9:50:20:ce:14:fa:c0:86:78:15:8d:41:26:c1:f4:57:
         ee:93:60:17:47:1e:60:8a:67:02:7c:cb:2f:d7:45:0f:75:19:
         56:9d:27:83:68:c3:20:45:90:99:6e:cb:93:31:4e:c1:40:22:
         c4:1c:11:7b:d1:b3:7a:f6:c8:b2:5a:74:fd:53:c4:f5:58:43:
         f6:c0:93:16:3e:ae:ca:db:f7:b8:29:b1:30:57:b5:5c:fa:42:
         d2:0a:8e:f2:0e:e1:dc:0d:08:de:5c:d1:c6:56:69:2a:8c:fb:
         d9:e2:65:da:e6:3c:05:2c:4b:c1:4c:64:41:ca:01:23:45:6e:
         36:e3:dd:0c:80:60:ae:10:af:3c:07:b7:32:fb:be:36:6b:e3:
         40:9c:b7:7a:d7:3c:4a:18:a4:a0:2a:09:f2:f9:7f:f7:ec:25:
         71:a2:81:e5:87:13:11:f6:34:1b:74:af:42:02:36:6b:50:7f:
         e6:60:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:50:21 2026 by rpki-client