Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16e3837c-f709-34ea-bc34-ad71e6858a4d.roa
File:                     16e3837c-f709-34ea-bc34-ad71e6858a4d.roa (raw, json)
Hash identifier:          BHFVDeg64QnfACyUOhhhVO3qvzG4WAn/Pv3MHe/Tqm0=
Subject key identifier:   5D:B4:98:15:41:99:A0:7D:0B:43:3A:05:3D:08:9D:79:CA:E6:BA:A2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497D70B725D9CBADB2F14EC0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16e3837c-f709-34ea-bc34-ad71e6858a4d.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.193.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:70:b7:25:d9:cb:ad:b2:f1:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e6d1ee26-852a-4443-b4bb-89727445a22c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f5:88:46:a5:80:89:1e:9b:e5:3d:b8:8c:dd:
                    ca:b9:96:9c:9e:4e:d5:ef:cc:05:c4:cf:d8:e0:6e:
                    b8:2c:ce:7b:e1:6d:55:ee:a3:a4:3f:8c:aa:4e:3b:
                    2c:67:23:11:ec:7e:0d:04:24:8f:3c:fc:e1:d7:4c:
                    06:12:0f:6d:76:9f:f1:92:51:1a:e2:0f:e9:dd:ba:
                    08:a5:ef:27:29:77:3a:ed:1b:db:e8:a7:d3:fe:4b:
                    81:c0:4d:ba:5b:66:a2:64:2b:e5:9f:43:33:d5:d0:
                    c8:21:75:51:61:f4:b4:11:ef:4c:6e:d4:12:30:2d:
                    b3:8a:2b:cd:7b:40:9e:77:c1:89:50:56:16:b2:d3:
                    2f:e5:39:bf:5d:d9:ab:e8:50:65:3e:e7:7c:4b:97:
                    24:69:5f:1d:86:07:a1:43:ce:a0:a2:8e:39:2d:a0:
                    c4:29:13:7b:d1:7a:da:49:a9:16:85:99:57:08:89:
                    a0:4a:72:94:1b:0e:06:16:a2:7f:a9:63:49:03:a7:
                    f8:94:9d:e9:6c:5d:b8:7b:1a:9c:3c:53:0f:44:18:
                    40:5d:5c:d4:32:26:f2:c5:f4:ea:b2:51:d6:cf:41:
                    52:d7:c9:f9:0d:0e:3b:17:c7:bf:d0:03:a7:19:95:
                    96:50:f8:cd:da:65:1a:2c:f4:64:3c:fe:03:99:c1:
                    65:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B4:98:15:41:99:A0:7D:0B:43:3A:05:3D:08:9D:79:CA:E6:BA:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/16e3837c-f709-34ea-bc34-ad71e6858a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.193.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c2:07:12:4a:9e:f7:95:cc:45:ee:f4:1b:f6:64:68:df:93:
         d4:6a:07:40:ac:e2:96:db:83:d8:2c:8b:64:b4:ec:c2:45:0f:
         a8:56:38:e1:ae:7c:ef:08:0b:85:e4:1c:f9:ea:6f:27:a0:cb:
         22:8c:5a:49:91:e0:cd:6b:e4:d8:75:55:78:d8:a5:cf:ce:8c:
         49:ec:0b:9a:63:bb:a5:f2:78:2c:00:2c:c2:98:c7:ec:7d:35:
         54:1c:b6:3c:f5:e1:4c:60:49:0f:70:6f:51:32:39:12:35:1e:
         a9:8d:c9:d5:70:0f:90:68:13:8a:55:09:39:0d:a7:2b:88:ad:
         de:0d:d5:c8:58:fe:0d:01:be:9d:9a:ec:f3:fe:c3:c3:4e:da:
         a4:f2:a0:76:9a:ef:5d:7e:d9:1b:b0:4c:51:8b:df:4d:be:96:
         23:b5:86:60:f0:0b:2b:73:80:77:15:22:74:9e:a9:ee:ad:fb:
         fe:f7:de:76:16:0a:cb:0a:f4:fb:f4:9d:0c:ce:0a:9c:fa:cf:
         cc:ed:c5:02:2f:6a:ee:18:48:d0:1c:ed:18:1a:7c:66:21:7f:
         ef:48:59:de:74:17:82:cc:0f:d4:b3:c8:4a:c0:b9:46:1c:46:
         72:d4:37:84:63:70:8c:20:87:f7:69:8c:71:bb:bd:db:db:92:
         90:71:00:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:34:31 2026 by rpki-client