Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ff234a5-2ecc-382c-87d1-76329628aaee.roa
File:                     3ff234a5-2ecc-382c-87d1-76329628aaee.roa (raw, json)
Hash identifier:          yx5Zw5H5bAymG4W0QYrlXVWJ+CfiqTE1P3K0G3uLDFM=
Subject key identifier:   6C:6E:86:BC:BE:AC:B3:28:F5:EA:42:C8:CD:3D:BE:E5:F5:74:A4:F1
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F3E47F0EA11320AE8070EEB20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ff234a5-2ecc-382c-87d1-76329628aaee.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     20940
IP address blocks:        23.38.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:f0:ea:11:32:0a:e8:07:0e:eb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=080f72bd-45cb-47b3-bfc2-e6abaa15d2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f1:09:4f:fb:4c:2b:4c:68:51:64:6e:3c:24:
                    3e:1e:04:71:e0:59:65:18:3f:34:00:60:ba:23:0d:
                    8a:15:e4:fa:0a:f5:16:75:12:ae:e6:bf:a9:f7:f7:
                    63:5e:ac:42:e6:00:91:8d:d3:82:5f:a9:2c:24:cf:
                    3e:4f:92:f9:4d:53:92:36:97:b0:5b:13:29:ef:fb:
                    27:ad:35:34:ce:64:18:11:3d:1d:c9:0a:a2:d4:9c:
                    6d:63:35:02:f2:45:d6:c1:f2:4c:e5:26:0f:38:58:
                    b0:91:8b:48:fe:5f:1d:5d:18:71:82:d1:a2:98:80:
                    57:4f:7b:28:55:26:a4:d4:91:5f:41:1e:d0:0b:3e:
                    81:7d:82:fd:ba:eb:ff:39:5d:04:0f:bd:fa:f7:f8:
                    a7:c7:c4:a7:cf:0f:d7:67:95:c5:2a:07:93:47:ba:
                    69:02:b6:7f:63:9a:fb:9a:5d:96:7d:6a:3a:5e:fa:
                    67:95:80:6f:7e:07:08:5f:d0:cb:02:8a:f5:ed:7b:
                    59:6c:0e:19:d4:a6:e9:98:8e:c5:58:45:64:51:dd:
                    ee:98:ce:f4:29:9a:34:cd:ee:8f:2a:34:eb:b7:04:
                    34:88:59:28:e6:e6:52:75:1d:b6:86:0d:8e:3a:9b:
                    86:73:b6:78:9f:46:d4:81:d2:b5:e3:88:39:21:bf:
                    8f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:6E:86:BC:BE:AC:B3:28:F5:EA:42:C8:CD:3D:BE:E5:F5:74:A4:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3ff234a5-2ecc-382c-87d1-76329628aaee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.38.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a1:71:d2:e1:b7:7c:ca:e1:14:69:c9:bf:e4:c6:2b:68:7f:
         95:d0:d3:27:f7:41:f6:bf:97:8c:a4:3d:9b:b6:24:ba:ad:b0:
         bc:d6:e2:f4:c5:1d:26:59:75:85:01:98:44:7e:eb:5d:e1:c8:
         fb:7c:ad:84:fc:d1:d3:90:b7:25:60:5e:75:f1:6c:86:83:dd:
         6c:9c:8b:b0:d0:a7:22:ad:aa:09:e8:9e:49:8f:e7:01:40:00:
         ac:d5:e2:91:80:c5:5f:0d:cf:2d:99:bf:13:b7:9a:0d:96:51:
         d7:1b:d0:bc:b5:c3:88:ff:7f:ab:fc:cb:aa:d1:9d:cb:65:ba:
         9c:70:59:34:fc:03:60:33:20:95:6e:9a:74:f4:04:58:85:3e:
         ec:66:f2:36:b4:b1:28:af:7f:69:59:45:42:29:db:bd:da:aa:
         08:4d:ce:27:bd:fb:2e:99:36:dc:86:47:d0:26:78:f3:65:a6:
         ca:c6:b2:4d:17:1c:d3:ea:06:cf:7f:a7:28:29:a0:e7:6d:1e:
         b2:d0:26:c7:43:05:a5:ec:ed:27:15:f3:86:a5:8e:2c:64:8f:
         6f:6a:35:fb:f9:72:2a:a0:e3:00:72:4f:4f:da:e5:96:82:81:
         9b:da:24:31:30:92:de:fa:3f:ac:57:c9:84:f3:23:e8:de:bb:
         b4:d6:7f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:43:36 2026 by rpki-client