Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b514c8ca-6763-363c-a3d3-213184a2367e.roa
File:                     b514c8ca-6763-363c-a3d3-213184a2367e.roa (raw, json)
Hash identifier:          LUvSdTtn2OLkUDu29Zim0EmdvLsJYlnR9AXi3P83EU4=
Subject key identifier:   96:95:E2:BD:7B:3C:6D:A2:72:F8:C6:13:BC:D6:D3:EC:38:5C:E5:2A
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F427820D787EC726220C7ABC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b514c8ca-6763-363c-a3d3-213184a2367e.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        23.48.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:20:d7:87:ec:72:62:20:c7:ab:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=ea223181-3e12-4727-a311-bd810a0efe07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f1:0f:7d:f1:a1:63:fe:a8:78:2a:8e:8b:27:
                    9d:19:58:34:9d:1c:aa:5e:ed:d4:83:f9:08:f8:26:
                    e1:db:dc:c1:b1:fe:eb:2e:4d:30:f1:6a:a7:71:cf:
                    ff:60:ae:6f:8d:6e:77:64:20:24:d5:8b:68:bd:97:
                    ae:4c:db:2b:81:49:63:6c:b5:35:c6:bb:4e:4e:9b:
                    f5:d4:02:06:d5:f3:49:a4:5f:ba:8d:97:c5:94:55:
                    e4:28:bd:e5:cc:93:0b:17:4a:b7:3b:75:31:3a:ad:
                    b0:a6:b1:89:ea:ab:38:70:96:2b:78:59:29:1a:86:
                    8d:35:3c:5e:5b:74:ad:02:f1:94:66:38:f6:d9:73:
                    c0:28:6d:84:e9:48:64:e8:db:41:d0:b5:ab:5a:9c:
                    9a:41:d9:64:f6:c5:0b:b8:89:47:41:b7:3d:7a:e8:
                    b0:67:12:cd:6f:79:db:fc:cd:91:34:0b:69:d5:02:
                    ed:87:9a:c9:ae:fc:a3:f5:cc:01:3e:4c:2c:d4:4c:
                    c8:1f:d4:33:07:bf:2f:92:c2:20:03:39:75:14:07:
                    a0:17:41:e8:3c:77:0c:12:bc:80:95:8d:3d:85:55:
                    56:81:3e:0a:8f:75:95:11:6b:36:ba:97:66:87:14:
                    7a:e2:87:d9:ac:fd:2f:72:5e:7b:de:07:ef:7b:57:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:95:E2:BD:7B:3C:6D:A2:72:F8:C6:13:BC:D6:D3:EC:38:5C:E5:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b514c8ca-6763-363c-a3d3-213184a2367e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.48.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:47:7c:c7:c2:60:74:c7:05:d2:1c:42:ea:58:dc:6d:37:0f:
         f9:37:db:23:09:ff:4f:84:17:41:cd:38:ac:48:2d:be:7b:e1:
         ea:8e:8b:cb:ed:14:bd:8b:28:08:e5:f1:04:e4:5a:ed:3b:cc:
         c5:fb:09:73:d9:fe:28:ec:09:0e:85:22:05:04:4e:4a:44:54:
         f5:bf:e3:1c:d3:42:07:09:b2:75:cf:57:8d:89:b1:dc:83:23:
         7a:87:85:01:8d:aa:87:4c:ee:30:f1:f3:0f:09:a2:54:2d:7c:
         b8:d7:f6:aa:96:80:a4:62:81:58:63:b8:14:2e:ec:90:f8:5d:
         70:69:e5:ac:21:fe:6e:ef:08:7d:25:ea:e4:9b:fb:36:48:85:
         3b:d5:8d:f4:76:16:8f:ef:17:47:52:fc:07:ff:1d:04:ad:36:
         22:2a:9d:fe:1f:8a:64:22:38:5c:00:1e:16:ee:1a:79:64:d2:
         c9:c7:c7:68:b9:2f:5c:42:d7:43:83:55:f6:f6:b7:6f:c0:51:
         65:9a:ba:ca:93:f6:71:e0:56:22:20:4d:ae:33:36:2f:c8:45:
         01:d6:a2:9d:ba:60:43:c6:2b:99:4c:01:28:eb:fd:a2:44:3d:
         04:40:66:4c:50:b7:13:fe:b8:fc:b7:1d:be:e8:37:e1:5f:c8:
         97:dd:71:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:03:43 2026 by rpki-client