Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcf610b7-90c0-3a77-8c92-1b38e76ff189.roa
File:                     bcf610b7-90c0-3a77-8c92-1b38e76ff189.roa (raw, json)
Hash identifier:          TVlFmrT7ScBFPG37jXssbTnawfEzh51+JBh1Fk7/Ncg=
Subject key identifier:   0F:47:72:AE:D5:DB:10:78:4F:03:88:51:BB:B9:D6:96:C0:D1:3A:92
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F225D18A7DA9A124A544E0E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcf610b7-90c0-3a77-8c92-1b38e76ff189.roa
Signing time:             Fri 11 Sep 2026 01:00:12 +0000
ROA not before:           Fri 11 Sep 2026 01:00:12 +0000
ROA not after:            Thu 10 Dec 2026 02:00:12 +0000
asID:                     34164
IP address blocks:        23.55.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:22:5d:18:a7:da:9a:12:4a:54:4e:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 11 01:00:12 2026 GMT
            Not After : Dec 10 02:00:12 2026 GMT
        Subject: CN=3f096404-6e7c-4346-93a1-fd30aec97842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a3:bb:4d:86:5a:48:5c:bf:d1:87:f9:2a:95:
                    19:06:07:62:ef:54:30:af:2e:e9:e2:4f:b2:4e:92:
                    fe:73:98:d8:fe:6e:f6:60:71:5b:fb:96:78:3f:52:
                    d4:d5:ce:58:52:ac:30:9a:0b:87:24:63:03:2e:eb:
                    49:43:c6:a9:81:48:a0:8b:be:c4:25:bd:b4:cb:00:
                    91:9e:71:a0:35:31:9a:06:58:6f:e0:28:d5:b4:69:
                    a3:89:54:c8:e9:73:63:a7:65:66:b6:35:97:3c:f5:
                    bc:ce:1b:7a:28:c2:0c:47:ab:33:ce:04:f9:32:1f:
                    8a:52:36:4f:11:7d:99:f6:08:25:66:3b:ee:a0:83:
                    97:dc:8b:f8:86:06:7f:79:32:79:95:66:3c:c1:b9:
                    a1:c4:06:b2:78:bc:d8:92:23:d5:3e:2b:02:d3:22:
                    43:91:50:0c:0e:a8:04:a9:32:3d:f8:db:ff:77:13:
                    1e:bc:b2:a1:4d:f5:45:e1:ae:27:f9:46:52:8c:44:
                    7f:88:14:ea:4b:bb:f5:f0:7d:f8:73:df:e3:2b:51:
                    84:fa:6e:ef:94:e3:f4:df:b4:32:60:2d:19:c7:af:
                    13:3c:64:f3:c7:5e:c3:3e:7b:79:db:e0:5b:7f:5a:
                    1f:c9:f9:f7:a9:fe:9f:48:bc:99:63:95:57:aa:02:
                    b2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:47:72:AE:D5:DB:10:78:4F:03:88:51:BB:B9:D6:96:C0:D1:3A:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bcf610b7-90c0-3a77-8c92-1b38e76ff189.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.55.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:bc:99:49:3f:60:f1:e9:8f:29:92:02:48:80:d2:a4:e2:91:
         25:19:d7:32:7a:ef:1f:27:3f:12:7a:e2:70:01:b6:08:c5:8b:
         a4:dd:2b:60:7c:e7:9c:78:de:2e:b3:04:a2:f5:5f:7a:c0:26:
         83:b2:22:35:9c:61:af:bc:69:18:10:9d:e4:eb:6d:cf:d8:00:
         cb:4e:66:dc:14:c1:9c:a6:a4:6f:e4:1c:d4:02:95:0e:7f:86:
         e6:e5:ff:69:90:8d:0b:77:30:9d:ec:dd:9a:9f:28:51:41:bf:
         e9:6a:a9:9d:98:b6:ec:bc:99:fb:b3:8c:53:13:6c:30:b8:cf:
         ce:9d:3c:9a:93:53:0b:1d:cd:93:e7:4b:cb:ed:86:cc:f7:93:
         81:4b:ee:5b:cc:49:d7:44:e3:00:f2:7a:a4:79:77:90:2c:b3:
         fb:13:94:5c:d7:04:15:90:a6:a1:55:19:71:7e:83:ec:5a:2e:
         ae:7e:53:4f:04:88:6e:dd:4a:69:f6:b9:6d:9b:5e:d3:ca:2d:
         aa:0b:d0:39:63:fb:fd:48:50:04:c4:dd:5d:3a:f5:1f:6e:19:
         71:01:a5:82:8c:44:73:93:95:5b:df:f0:08:d5:03:c9:06:e0:
         57:4f:a2:d8:9a:19:ab:82:cd:88:97:05:6d:10:ca:28:da:73:
         d5:c1:8a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:12:23 2026 by rpki-client