Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a05b8d20-bf56-32c6-8e77-cb7e5a3b35f5.roa
File:                     a05b8d20-bf56-32c6-8e77-cb7e5a3b35f5.roa (raw, json)
Hash identifier:          dR1LFc0Z7uvi+t/E+7EinPpfqu3s1LXHKa1UmZNhhxs=
Subject key identifier:   D3:88:80:B3:E8:70:46:34:1B:01:1F:01:F8:65:3D:D5:0C:3C:74:46
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497D56340D0B46390B5CBFC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a05b8d20-bf56-32c6-8e77-cb7e5a3b35f5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     35994
IP address blocks:        23.63.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:56:34:0d:0b:46:39:0b:5c:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=92207293-9590-43be-b846-802f7e385130
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d3:71:d3:22:06:c3:2a:c2:17:e2:a6:af:54:
                    b1:da:60:a0:9c:0f:97:9a:cd:43:d6:89:f6:44:b8:
                    26:b5:34:ec:0b:c3:bf:c1:82:f4:26:be:79:03:9e:
                    ee:7a:6e:d9:77:f3:ec:21:af:02:2f:33:70:5d:fb:
                    f9:6a:de:fd:7d:b2:bd:ae:00:02:ef:b1:d5:61:51:
                    53:9d:53:c3:04:7a:71:cd:fb:72:f0:0f:9f:ed:94:
                    4d:e7:75:49:5a:69:60:01:c2:e9:38:e4:bf:c4:c8:
                    72:b6:eb:2a:79:0f:3c:c3:8c:ed:b7:90:14:68:98:
                    7f:03:a2:a6:ae:58:7f:73:75:f4:67:11:79:68:66:
                    0c:61:b4:13:ec:7a:f5:04:e8:68:2d:07:b8:08:28:
                    77:a5:fb:72:c5:02:e6:91:9b:25:06:fa:ca:e1:de:
                    52:55:6c:11:22:d1:cb:0f:be:f6:b6:eb:e6:8b:4a:
                    0c:3f:6e:3f:f5:a4:dd:c6:33:6c:5e:66:68:2b:9b:
                    18:fe:b7:f9:2a:52:d6:53:82:03:70:e4:1f:5b:db:
                    99:b2:41:b9:b5:64:12:84:8e:f6:78:78:97:de:b4:
                    1d:85:8b:e8:f9:e2:3f:0e:77:8c:b6:2d:f8:65:ea:
                    e8:7c:2e:35:97:09:99:64:e7:8c:f3:1f:0f:89:ff:
                    95:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:88:80:B3:E8:70:46:34:1B:01:1F:01:F8:65:3D:D5:0C:3C:74:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/a05b8d20-bf56-32c6-8e77-cb7e5a3b35f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.63.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:9b:23:73:da:a7:95:dd:a4:9f:9d:9f:1f:4b:2b:38:e3:05:
         51:3a:d8:ad:69:65:ba:56:c5:b5:44:40:6f:84:09:14:ed:25:
         56:d4:f0:74:73:5c:fb:ff:cb:c6:62:4e:56:f7:81:7b:fb:cc:
         00:00:f4:8c:50:01:54:a8:a7:e8:73:00:1d:b5:c6:6b:0a:1a:
         5a:59:35:a7:fb:55:02:6e:72:5c:17:44:a6:a2:d8:f7:81:55:
         f3:2a:ac:ef:e8:39:ea:4e:78:ee:72:2f:dd:36:35:d6:b0:1a:
         4b:73:f8:27:c4:d1:5f:c1:04:32:fe:21:2c:0d:d7:78:d9:33:
         b3:79:d1:c0:11:5b:e1:64:f1:75:c8:39:79:b6:16:d3:72:0b:
         59:eb:82:bf:3d:7b:93:b0:a5:87:31:2b:11:88:5b:f9:af:96:
         45:f0:33:ea:cb:e1:c2:c9:da:15:e3:86:31:7e:28:52:42:62:
         14:22:fc:5a:a0:30:13:2f:9e:9c:86:71:09:72:e5:eb:95:ed:
         2c:ed:5e:de:aa:6a:e8:c4:4c:1f:dc:28:a4:a1:34:b5:15:c9:
         27:41:85:5a:e1:88:14:21:16:51:21:46:dc:ae:eb:17:e8:df:
         8c:b6:93:62:9a:f3:ef:6f:c1:20:3f:1e:e3:5f:83:71:81:05:
         a4:71:35:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:26:03 2026 by rpki-client