Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ac6485d-1509-3122-a948-c9be35bf1dd6.roa
File:                     1ac6485d-1509-3122-a948-c9be35bf1dd6.roa (raw, json)
Hash identifier:          sOOJiRwsCzycj3r9dDvcZKZ/XpyDA0sh8TR85qp67dw=
Subject key identifier:   1D:42:B1:5F:4C:A4:88:5C:54:2A:E1:CC:BB:E1:74:EA:71:96:4B:95
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F3FAD729F02CC6390E7BC4C00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ac6485d-1509-3122-a948-c9be35bf1dd6.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        23.45.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:72:9f:02:cc:63:90:e7:bc:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=abe38306-fc87-4097-bd04-f631e14e070c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:6a:5f:66:9c:30:5b:d2:59:5a:32:df:76:
                    99:3c:af:ef:2f:e0:3c:94:be:90:a9:f3:4c:58:3d:
                    29:d4:f0:55:c0:df:a5:43:7e:f3:b4:5b:7e:77:06:
                    6d:d7:2a:09:16:5c:0c:bb:51:4b:60:5f:29:f9:76:
                    c0:e7:e5:a6:b1:97:28:a7:75:4e:5c:d6:6f:b8:24:
                    17:28:ef:1b:d7:54:79:bb:6f:98:37:27:45:9c:40:
                    7c:f2:86:7c:71:79:6c:e3:45:ff:33:71:63:e4:73:
                    c9:fd:8d:a6:01:a1:a3:c0:53:97:19:f1:45:71:70:
                    63:17:6f:78:bb:00:eb:ea:07:83:eb:12:fc:55:95:
                    d2:4c:8e:b1:10:2a:51:e1:1d:cb:15:6d:b6:8b:1c:
                    ef:a1:0b:13:23:2a:09:06:65:10:42:06:72:d7:5e:
                    a8:78:c5:5c:5a:41:69:38:76:0c:42:26:2f:96:4c:
                    9f:14:ef:9f:66:7c:2c:39:e3:49:ad:98:b8:de:04:
                    75:1a:55:61:b4:45:1d:4b:56:05:4e:20:2f:26:87:
                    63:a4:45:4c:e2:9a:7d:43:71:d1:6a:48:ce:85:e8:
                    0c:bd:5a:03:a2:71:f4:d4:ae:ae:1f:eb:bf:c1:2b:
                    5e:06:db:fc:60:c3:8a:f5:7e:d8:86:c8:d7:82:54:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:42:B1:5F:4C:A4:88:5C:54:2A:E1:CC:BB:E1:74:EA:71:96:4B:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1ac6485d-1509-3122-a948-c9be35bf1dd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:d5:39:82:b6:46:ce:93:ff:21:20:ed:e7:06:bb:fc:87:c0:
         cc:a0:1c:08:dd:72:5c:fc:84:3d:8d:e0:bc:64:49:6d:a6:a3:
         5a:02:33:6d:e5:00:59:d7:d2:54:28:fd:a2:7c:83:51:de:5d:
         3d:3e:d0:a5:5f:8f:b9:31:75:b7:a5:43:f1:a3:af:b3:63:a0:
         9b:26:75:c3:21:a3:56:db:05:c8:02:e3:6d:a5:be:46:94:dd:
         db:8b:4e:8b:1a:65:eb:a3:60:e0:4a:6c:24:9e:b7:fa:0f:9c:
         16:72:5e:b4:f9:75:e0:7f:99:6b:8f:52:b2:f3:85:c9:73:2b:
         de:1d:6c:7d:ad:07:c8:ae:fb:cc:e2:f3:36:65:62:98:18:1c:
         bb:e0:8f:49:7e:f6:d3:19:4c:10:6e:ab:d4:92:b2:67:78:62:
         82:de:68:c1:a6:1e:7b:29:ba:d7:37:b2:c9:b6:51:4e:94:07:
         b6:f8:60:6f:11:dd:ce:b9:08:79:f4:c4:3b:a3:e4:bc:07:bf:
         65:f7:d9:9b:b5:03:41:b0:76:bf:a4:2e:fe:b1:97:68:cb:b5:
         fe:43:4e:76:80:f7:e3:8c:d4:88:b8:d5:e5:fe:f2:68:e9:4c:
         2c:96:33:b6:86:77:a7:45:91:ea:f0:eb:2a:d2:f9:4c:43:98:
         a8:a1:56:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:29:55 2026 by rpki-client