Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa
File:                     b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa (raw, json)
Hash identifier:          ioiIZqb1okN6Xk96CVS20wtB2ZGGeptRT6Qq+h9wKYQ=
Subject key identifier:   15:14:8B:D0:79:82:20:69:FD:8E:1F:F3:E0:DF:A0:B0:C0:70:13:76
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E66DA2471A9E8420A5B336840
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa
Signing time:             Sun 05 Jul 2026 21:00:11 +0000
ROA not before:           Sun 05 Jul 2026 21:00:11 +0000
ROA not after:            Sat 03 Oct 2026 21:00:11 +0000
asID:                     16625
IP address blocks:        23.4.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:66:da:24:71:a9:e8:42:0a:5b:33:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul  5 21:00:11 2026 GMT
            Not After : Oct  3 21:00:11 2026 GMT
        Subject: CN=611dfa91-a811-4d56-97b9-275f553a4d09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:67:71:c0:7e:63:f6:01:39:69:54:f7:1f:55:
                    5b:df:71:6f:5e:34:da:52:8f:4e:50:4a:60:3f:a2:
                    7e:e5:18:ef:17:a3:47:f2:2b:40:e5:07:11:40:58:
                    94:df:77:12:06:c0:ba:ee:1e:b7:59:4a:9b:e9:fe:
                    c0:c7:14:df:63:7d:b3:be:5b:2e:17:ac:a7:38:12:
                    3a:74:89:35:e3:d3:52:df:b0:75:c1:f5:3d:8c:5e:
                    a5:62:09:6b:1b:d2:2e:3d:e0:2a:cf:3d:b8:28:85:
                    2b:e2:e9:88:15:93:0d:89:06:5b:1d:58:67:9b:b8:
                    c9:34:c9:f6:aa:09:63:6f:7a:ec:a2:c7:3f:7d:92:
                    7e:14:e3:ed:d8:f7:e8:87:81:4a:e7:e4:56:00:6e:
                    fb:24:e5:1a:1d:53:42:86:37:57:88:8f:8c:44:b2:
                    d3:f2:dc:50:9e:4b:38:e9:14:9a:a6:d9:17:7c:86:
                    b9:f5:61:27:6c:1d:1b:54:63:f5:99:59:5d:fc:9d:
                    b9:0b:b9:5d:41:b6:0a:59:6f:15:5a:63:42:9f:1e:
                    8d:5d:1d:af:2d:cc:f3:7c:81:75:f8:12:7f:93:39:
                    a4:f2:a6:a9:62:51:d8:6d:0d:79:03:3d:2f:30:9d:
                    6d:98:a4:e2:f4:a4:dc:ab:b8:c4:6b:a3:f6:ba:fc:
                    1b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:14:8B:D0:79:82:20:69:FD:8E:1F:F3:E0:DF:A0:B0:C0:70:13:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b84dcbd0-45de-3518-b9be-14855a3a2f9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.4.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:dd:17:4d:7e:3d:70:13:57:c5:74:eb:50:a5:e7:d7:67:35:
         98:91:2e:63:29:83:26:e6:7d:17:6f:50:a0:be:ce:7f:15:f9:
         2f:15:27:38:6d:51:02:64:e0:6a:37:08:c9:56:4b:5f:51:f0:
         dd:9b:c9:b6:a0:f5:c2:c5:2e:8d:3c:32:a9:3a:6b:79:24:51:
         47:04:91:a9:e9:30:61:32:07:b7:99:38:b4:30:22:35:36:73:
         41:40:1b:6e:a8:34:7a:d2:da:db:7b:4d:95:3d:d4:26:7a:ba:
         c2:cd:fd:97:52:7e:d5:6f:29:8f:49:6c:83:3d:e0:35:ec:d5:
         af:76:20:08:38:cf:cb:bb:ff:76:87:b2:ba:78:eb:73:b2:96:
         b0:ba:67:07:52:55:d5:6c:28:7c:5d:ab:47:12:99:b6:9c:5d:
         77:76:86:14:21:68:30:48:c5:0b:76:83:51:4c:66:1f:d7:75:
         dd:02:fe:df:09:6c:95:e5:b7:89:91:52:b8:72:4f:da:bc:56:
         dc:b3:a5:68:94:c6:b8:20:7a:d4:5a:a4:18:c3:34:6f:90:fa:
         be:af:a3:1b:32:dd:a2:c3:fa:cb:6d:5f:1e:b5:65:7e:06:4e:
         95:b1:98:95:ed:71:e2:89:c7:b7:a8:e9:df:2d:42:bc:03:d3:
         0b:a2:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:46:32 2026 by rpki-client