Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d6df02e-a608-4a77-b0ff-68a20a11a916/9d76b273-a1d9-3354-9eec-9466ec8bf644.roa
File:                     9d76b273-a1d9-3354-9eec-9466ec8bf644.roa (raw, json)
Hash identifier:          ntmNoH35REbnPVTtXiBdBYq6PptU6IU99+nvtudQ8+c=
Subject key identifier:   48:CC:89:C4:66:08:CC:E7:4A:0B:D8:FE:2E:3F:81:D5:0F:E1:12:71
Certificate issuer:       /CN=3d6df02e-a608-4a77-b0ff-68a20a11a916
Certificate serial:       010D0C9F4328584F1E2CEA765C8D0D6E3E2ACF10
Authority key identifier: E0:CC:52:FF:A8:39:5E:68:8F:3A:01:BA:D6:10:48:E6:68:03:D4:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d6df02e-a608-4a77-b0ff-68a20a11a916.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d6df02e-a608-4a77-b0ff-68a20a11a916/9d76b273-a1d9-3354-9eec-9466ec8bf644.roa
Signing time:             Wed 09 Sep 2026 13:00:11 +0000
ROA not before:           Wed 09 Sep 2026 13:00:11 +0000
ROA not after:            Tue 08 Dec 2026 14:00:11 +0000
asID:                     5065
IP address blocks:        23.159.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d6df02e-a608-4a77-b0ff-68a20a11a916/3d6df02e-a608-4a77-b0ff-68a20a11a916.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d6df02e-a608-4a77-b0ff-68a20a11a916/3d6df02e-a608-4a77-b0ff-68a20a11a916.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d6df02e-a608-4a77-b0ff-68a20a11a916.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:1e:2c:ea:76:5c:8d:0d:6e:3e:2a:cf:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d6df02e-a608-4a77-b0ff-68a20a11a916
        Validity
            Not Before: Sep  9 13:00:11 2026 GMT
            Not After : Dec  8 14:00:11 2026 GMT
        Subject: CN=7cc15e65-65da-46ec-a6e6-528a2b84b4a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c1:55:6b:cd:55:59:e1:1a:b9:ba:0b:b9:fc:
                    53:00:d3:80:63:94:e4:7e:01:71:7b:41:82:53:d8:
                    1c:01:83:5e:39:ac:24:c6:49:f6:7a:e9:62:f8:24:
                    d5:cb:67:94:e2:73:0b:49:ce:f1:10:0c:80:50:72:
                    2d:cc:f7:25:db:a1:3c:86:91:83:c7:ea:bb:35:f8:
                    c6:ad:0e:84:f8:0e:f0:b4:c9:44:d9:f4:bc:53:c7:
                    e4:c8:41:cc:79:80:50:a3:96:d0:f2:34:06:22:54:
                    bc:74:31:ac:64:bd:4b:18:39:c4:e4:0d:d9:af:01:
                    f4:6c:72:a1:b0:d6:0f:71:d9:e0:8b:70:8c:0c:0a:
                    19:3b:8c:44:69:06:ae:5b:ef:ed:b4:df:72:1d:72:
                    56:9c:03:ba:0e:3e:16:f2:a4:9f:9b:db:e0:09:1a:
                    02:dd:1c:a1:9f:3d:32:b2:50:f4:84:84:47:a6:2f:
                    86:fd:db:f0:e6:41:4d:84:cc:6c:cf:e5:b4:eb:39:
                    11:56:05:f0:a3:f6:f6:a7:4b:a5:42:71:32:e7:2f:
                    83:93:c1:a6:45:2f:01:36:7c:d8:f5:60:6d:b7:57:
                    49:73:90:67:1e:aa:1b:e2:63:5a:f9:ab:7e:71:9b:
                    d5:f3:06:f5:7e:dc:20:34:d3:1f:57:0e:c4:b2:57:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CC:89:C4:66:08:CC:E7:4A:0B:D8:FE:2E:3F:81:D5:0F:E1:12:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d6df02e-a608-4a77-b0ff-68a20a11a916/9d76b273-a1d9-3354-9eec-9466ec8bf644.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d6df02e-a608-4a77-b0ff-68a20a11a916/3d6df02e-a608-4a77-b0ff-68a20a11a916.crl

            X509v3 Authority Key Identifier:
                keyid:E0:CC:52:FF:A8:39:5E:68:8F:3A:01:BA:D6:10:48:E6:68:03:D4:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d6df02e-a608-4a77-b0ff-68a20a11a916.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.159.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:a8:47:db:41:5a:45:64:ac:03:3e:1a:1b:0b:ea:ad:0e:72:
         fd:54:71:1a:e9:2f:1e:2f:7a:8a:ca:b8:f0:2c:d8:b9:c4:91:
         f9:2c:31:93:1a:15:d2:72:69:25:41:45:44:ff:37:a4:f3:e1:
         01:f1:6e:44:a8:90:aa:24:d7:6f:38:cd:9c:bc:d7:06:e6:c2:
         b1:7b:ce:4f:ed:19:82:a9:81:8d:95:f6:ca:2a:93:9c:98:a7:
         93:17:a5:f6:61:6a:db:44:84:fe:99:c9:09:2b:ae:9a:92:f0:
         5f:94:6b:41:e3:80:b9:2c:3c:57:fb:22:32:43:43:5f:e6:07:
         72:8b:bb:a7:e6:7c:e6:0c:bf:b1:3f:e1:d5:b0:18:64:e0:b2:
         59:fd:ad:89:b1:d4:b9:4f:0f:17:d3:2d:5a:e9:15:67:e5:0b:
         2e:41:08:ee:6e:52:3d:f6:b8:db:f9:0f:5c:b0:ec:c9:08:0d:
         94:ab:15:23:f2:fc:25:f1:2f:db:30:d5:ed:4e:ed:f9:e1:23:
         94:60:97:77:79:fe:83:70:f0:14:85:27:27:77:3e:b7:ee:f6:
         0c:9c:86:3f:b5:8a:0d:8c:53:64:c4:11:ee:55:e3:16:6f:42:
         a1:40:70:9f:0e:c6:df:e2:ea:98:6a:3d:85:06:97:08:12:c1:
         58:e3:db:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:35:07 2026 by rpki-client