Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e5cdd26-bc5c-3ec5-bde2-41561cf4eaf9.roa
File:                     6e5cdd26-bc5c-3ec5-bde2-41561cf4eaf9.roa (raw, json)
Hash identifier:          /5vGe+dqRuhfKt2JzOCZUo3iB7rlYAHJ67U+65T7mdg=
Subject key identifier:   A7:9C:04:39:42:83:46:83:C4:81:92:E0:ED:B2:72:10:2E:9F:59:63
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA01556508A2A0D1C3089F280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e5cdd26-bc5c-3ec5-bde2-41561cf4eaf9.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     20940
IP address blocks:        23.47.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:56:50:8a:2a:0d:1c:30:89:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=4f4f0c59-36e3-4573-8416-c8f141cc18e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:92:c5:30:f0:7e:ea:98:b6:98:aa:a5:fb:39:
                    8c:a1:cc:82:c0:b9:3c:ca:c6:84:b1:6b:94:f5:f8:
                    fb:da:f9:f8:0d:de:07:fb:69:4b:2d:27:a8:79:19:
                    d0:7a:c5:9a:e1:c2:59:2b:42:55:89:2c:0c:2a:15:
                    47:f5:37:14:e8:43:69:9e:61:28:65:2e:63:11:bb:
                    47:8a:57:2f:5f:c2:ff:d0:cf:ac:41:77:3b:3c:48:
                    4b:a2:90:7a:b8:99:63:d1:1e:a5:87:45:ce:41:b3:
                    53:82:bd:f3:63:2b:54:60:9e:aa:4c:df:c9:e5:61:
                    10:f9:91:42:d8:41:a0:44:0c:1a:ae:d4:54:76:ae:
                    2c:1e:4a:26:ea:92:e8:f1:c5:6c:0f:ef:82:42:01:
                    3b:37:dc:f0:e3:98:45:67:f1:17:b0:47:98:b2:d4:
                    8c:af:50:bd:00:74:e3:bc:a9:9b:63:09:3d:c5:25:
                    8f:64:6f:24:3b:c9:55:79:06:09:fa:69:64:13:b2:
                    3e:c6:d3:81:3b:55:ad:92:54:3f:84:1a:e0:65:1d:
                    bb:47:7e:8d:b3:86:b4:9b:54:d8:0d:a4:b7:c1:81:
                    f8:da:84:ec:ed:a7:4e:63:ff:b1:48:80:5f:f2:96:
                    b5:90:f2:50:6b:a1:87:1e:70:d4:e7:97:06:96:2e:
                    0a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9C:04:39:42:83:46:83:C4:81:92:E0:ED:B2:72:10:2E:9F:59:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6e5cdd26-bc5c-3ec5-bde2-41561cf4eaf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.47.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:8a:fd:c7:51:7c:91:22:d3:af:0c:2b:59:55:65:07:f4:cb:
         25:4d:36:51:e8:aa:ef:bb:14:ca:44:3e:68:08:4a:e6:79:cf:
         8f:b1:a7:6c:b3:25:28:d2:72:6e:21:20:2f:5b:05:bf:b9:00:
         0a:32:8a:db:18:2f:f5:c0:d6:22:80:35:f0:00:16:c4:0f:03:
         50:15:91:e4:67:e3:39:48:07:a7:50:6c:39:ef:63:3b:da:b7:
         c3:64:b1:7c:2d:e9:19:0f:45:09:cb:22:8a:41:f4:11:cc:b6:
         ae:41:4e:4b:70:1d:e9:01:be:b9:ea:70:13:22:a0:66:c7:80:
         9f:f3:38:ae:1a:9c:84:4b:bc:ad:c1:b5:bf:8f:74:ba:99:10:
         d7:78:b3:86:3c:2e:fd:89:2f:41:4e:1f:19:f9:58:c8:e4:3a:
         df:ad:e3:74:b9:78:d7:ed:07:83:67:a9:51:5d:f6:47:2f:6b:
         ec:f6:8c:d9:8d:52:d7:fb:bb:e1:b3:84:d2:37:8b:53:67:50:
         62:46:6c:71:8b:ac:d9:41:e8:47:34:4a:62:4a:9f:1c:f9:e4:
         fa:1a:4d:31:0c:4c:d2:da:e2:cc:af:cb:be:4e:f7:fd:ad:28:
         60:e6:6c:d5:57:99:d9:a9:4a:35:9e:32:31:22:63:ac:47:bd:
         f6:96:07:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:52:41 2026 by rpki-client