Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8fdbd69-b323-366b-9285-253005de1dac.roa
File:                     c8fdbd69-b323-366b-9285-253005de1dac.roa (raw, json)
Hash identifier:          aNnXVoYWYXLCXutcmG7lXJeBL/DCeEk48vvrz9Jj/sU=
Subject key identifier:   42:FA:97:DA:5A:8B:77:40:51:9E:4F:5E:F7:14:5F:39:3C:87:9F:78
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497D5A0719C1F34434257780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8fdbd69-b323-366b-9285-253005de1dac.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7470
IP address blocks:        23.192.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:5a:07:19:c1:f3:44:34:25:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=515ead83-1ee9-4596-8407-c0c3aaed9c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d8:a2:45:ef:c6:9e:47:ed:31:e0:89:4a:07:
                    79:72:94:8f:8c:38:07:37:ed:94:b2:67:42:e4:fc:
                    bb:77:59:4a:ad:60:06:f9:1f:72:ac:0d:b3:0c:af:
                    0a:d6:8d:b7:fd:23:67:30:dd:39:93:55:cf:e4:84:
                    70:3d:b8:f1:e7:f9:f0:c9:0f:32:0a:b8:7f:12:df:
                    9d:61:eb:53:ae:a6:8a:81:14:77:6d:ce:51:42:fe:
                    fa:a7:e3:3b:e8:01:14:89:f0:ae:f2:00:43:1d:46:
                    fe:4c:80:d6:64:36:27:d7:03:ea:f3:63:40:95:13:
                    7b:6e:32:e3:d1:7b:b8:48:1c:d3:ec:ec:aa:40:fa:
                    1e:66:8b:d1:8d:51:90:cd:77:02:89:5d:45:b5:ab:
                    67:75:ac:35:fc:f8:91:1d:c7:d1:ae:e6:0b:83:2b:
                    bd:7a:1e:1a:d1:e9:ff:b5:d9:3a:77:81:80:a4:fc:
                    62:ee:5b:c7:9d:f5:ff:d2:f9:71:10:98:e3:4d:53:
                    5e:34:52:f5:f5:2e:06:04:76:8e:d6:70:f7:fb:0c:
                    0f:d0:8d:2c:35:48:a0:2c:76:ec:e6:a4:bb:ee:e3:
                    7c:b3:95:7d:2f:a5:6e:06:0d:7b:4f:79:8e:12:0e:
                    72:0c:8e:4a:81:c0:0d:71:8a:09:68:8b:8b:78:ff:
                    84:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FA:97:DA:5A:8B:77:40:51:9E:4F:5E:F7:14:5F:39:3C:87:9F:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c8fdbd69-b323-366b-9285-253005de1dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.192.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:ce:b3:34:a7:5e:dc:89:8f:65:1d:5c:fe:a9:43:e2:b5:41:
         1b:3d:db:c2:55:52:55:b1:7e:94:15:33:93:33:f0:c4:bb:65:
         30:b0:ec:d8:a2:7c:fe:b1:ee:b2:07:81:40:eb:31:0e:a0:5e:
         90:42:3c:0d:1d:51:c3:bf:cd:e8:67:e7:dc:9f:9b:01:4c:e9:
         c6:91:d2:e0:0f:db:bf:be:f7:fe:f2:16:41:a2:80:21:9b:9f:
         44:0e:57:44:57:c4:08:c7:5d:fb:ee:40:b5:fc:19:11:c7:20:
         8e:8b:c6:17:66:97:36:9b:cd:33:ff:e9:f1:6e:fd:04:6c:23:
         59:bf:13:f4:33:37:32:e8:ee:7d:eb:a9:19:5a:ea:88:5b:f4:
         31:a9:6c:0b:79:18:58:c0:68:33:df:b6:c2:d3:b8:ea:7b:a6:
         4c:c0:d3:34:02:a7:06:00:67:91:df:f8:27:44:34:b9:cb:fd:
         03:89:d3:de:99:5f:94:14:82:0c:fe:49:b2:55:e8:06:9b:2b:
         ec:01:90:7f:de:5b:91:61:10:8a:cf:b7:93:6c:3b:d5:ab:6b:
         4f:86:98:63:59:86:2b:de:cc:64:30:ee:56:cf:ab:54:0d:c6:
         d6:8b:e9:23:04:34:4b:8a:b5:5a:85:84:fc:ed:f9:c5:4b:c9:
         a7:98:dd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:45:15 2026 by rpki-client