Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f00ce99-d1cc-33c1-8710-311a8367f738.roa
File:                     5f00ce99-d1cc-33c1-8710-311a8367f738.roa (raw, json)
Hash identifier:          H6vLrMpcgbKBdEYHGmqwerHGB3d6uno8gZxWx7QgFVg=
Subject key identifier:   73:77:FF:E6:7D:45:DA:19:E8:93:95:61:78:34:0A:95:FF:46:3B:15
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F3E47F486E3BF83C5135EBE00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f00ce99-d1cc-33c1-8710-311a8367f738.roa
Signing time:             Mon 21 Sep 2026 01:00:11 +0000
ROA not before:           Mon 21 Sep 2026 01:00:11 +0000
ROA not after:            Sun 20 Dec 2026 02:00:11 +0000
asID:                     20940
IP address blocks:        23.41.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3e:47:f4:86:e3:bf:83:c5:13:5e:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 21 01:00:11 2026 GMT
            Not After : Dec 20 02:00:11 2026 GMT
        Subject: CN=f9d2a24f-3001-414a-81d3-43d3258de127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:54:dc:14:d8:f7:6c:31:0a:b0:76:1b:6f:fa:
                    98:2d:7f:bd:53:a4:40:d4:ff:31:0d:1b:1d:32:c9:
                    53:8e:c3:e7:09:c0:76:07:56:ca:b4:fd:f7:f2:a0:
                    eb:cd:2a:90:94:b9:03:2f:36:af:2d:ab:81:85:ec:
                    72:ea:d1:67:b9:77:92:14:b2:a5:9e:5c:f8:15:91:
                    a5:d4:a6:0d:e9:7c:c3:aa:f0:e7:36:60:87:3a:aa:
                    a0:52:95:b4:c8:50:41:48:7f:9a:8e:29:db:31:ea:
                    15:ba:fe:66:ea:c1:b0:e8:62:ac:89:39:6d:8a:0c:
                    fd:ae:72:70:13:ff:0f:a5:21:bd:96:32:a3:12:4d:
                    7c:7b:a7:ef:1b:01:fa:06:0c:c3:ce:e6:76:45:e7:
                    6c:b8:ff:09:8a:0b:87:b2:5b:fc:45:58:03:5f:e0:
                    59:e7:f0:7c:d6:c7:9b:95:13:42:1a:65:4b:a7:59:
                    8f:7f:8b:b6:dd:18:b2:5b:cd:c6:d3:fc:62:48:6a:
                    8c:fe:8b:58:80:f9:e9:47:32:56:5d:f9:48:f1:3e:
                    d2:ba:6d:bf:9b:fe:f2:63:42:2d:db:e6:18:11:f0:
                    6e:fa:2b:4f:5e:2e:d2:f3:ee:e7:8d:0d:a8:7e:e9:
                    b6:51:e2:ae:55:e3:4b:28:27:84:ff:bc:3a:84:f0:
                    37:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:77:FF:E6:7D:45:DA:19:E8:93:95:61:78:34:0A:95:FF:46:3B:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5f00ce99-d1cc-33c1-8710-311a8367f738.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.41.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:26:7a:37:b3:e5:c1:18:77:f8:6d:8c:3d:86:56:9a:99:05:
         53:f6:e8:f0:0a:9e:a5:9f:ce:66:12:15:e2:a0:1f:f7:70:2a:
         0d:fa:80:51:88:eb:af:7f:4b:f5:20:e4:45:59:14:54:cf:7f:
         98:4f:ec:03:34:10:5d:e2:b8:1f:26:3c:79:88:c0:8b:3e:83:
         f4:1a:4f:c9:c7:cb:b6:6d:0b:ab:16:7c:12:f0:49:e9:1d:ab:
         a9:a5:07:ec:2a:8b:b6:70:41:a0:d7:5f:80:4c:62:28:2b:a8:
         cb:5f:32:03:8e:b4:d3:4b:23:b5:99:03:c7:70:77:16:c3:b3:
         c2:cb:c3:54:c6:1c:47:cd:84:0f:5a:22:89:2e:35:50:6f:16:
         54:b1:0e:0e:be:45:07:18:5d:16:c1:7b:83:4f:78:c3:42:57:
         6d:10:40:50:c4:58:aa:b6:29:28:40:fd:88:eb:b1:51:84:60:
         b7:8f:68:8c:87:d7:43:f3:2f:48:81:aa:ba:0d:61:2e:f3:e2:
         a0:90:77:ee:d1:9c:8f:b6:d9:11:bd:77:cc:68:d1:b5:08:47:
         ed:29:2d:d8:18:dd:ca:6a:99:2d:05:04:f5:35:25:c1:73:83:
         72:fa:3a:ba:d2:1a:67:87:89:a5:41:3a:38:4b:c1:91:fa:68:
         32:2c:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:07:22 2026 by rpki-client