Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74dda23f-8439-3dd3-92b7-41b61af685d8.roa
File:                     74dda23f-8439-3dd3-92b7-41b61af685d8.roa (raw, json)
Hash identifier:          +fQkzSct1rgM2CLz9SPG5wtnQGw9B04tguAfCV42OGo=
Subject key identifier:   4B:DE:CD:01:F4:2E:B1:3E:7A:B7:68:DC:7A:24:2A:C6:CA:A5:C1:FC
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA798F48079C7C36A7C5A62F0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74dda23f-8439-3dd3-92b7-41b61af685d8.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.209.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:f4:80:79:c7:c3:6a:7c:5a:62:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=226f87b8-c9cf-4acf-9f1a-73bf27e67845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f3:4c:c6:fc:b9:80:c5:56:8a:1d:34:41:dd:
                    dd:db:5a:0f:c8:6b:fa:5f:f1:93:c5:ec:47:34:76:
                    b9:6d:f5:1d:82:fa:8d:e5:f3:7d:64:b2:fb:eb:2a:
                    fb:0c:6e:b8:7d:10:ff:07:cd:13:83:11:85:62:64:
                    6c:24:f5:89:4d:53:f3:08:9b:b9:45:2d:5e:46:f1:
                    18:9a:a0:fe:3d:6a:bf:8f:f5:5b:42:e4:27:10:34:
                    b0:ea:4d:4a:ce:02:96:3f:c6:f6:8f:52:6d:2b:29:
                    8a:99:4c:d3:ac:d9:4c:4d:e9:46:21:e7:0b:90:c4:
                    df:8d:bb:7c:a0:14:a4:a2:d9:2a:51:e8:54:0f:76:
                    3f:11:68:1e:10:a6:c6:fc:84:93:01:9b:b0:9f:44:
                    2f:32:48:a5:d3:92:9c:ea:df:36:25:c8:18:11:7c:
                    31:96:ea:d2:6f:ac:c4:e1:5b:5c:ce:cd:59:14:19:
                    24:46:b2:21:a5:b6:14:91:f2:12:8f:5b:21:da:b7:
                    3b:7d:55:89:e3:5d:80:61:b7:19:ed:5c:37:bf:14:
                    c1:af:08:58:ee:74:78:25:81:97:45:d7:ee:0e:45:
                    ce:85:6a:2b:0f:42:45:2b:65:47:ce:fc:77:20:8d:
                    62:0b:b9:a1:97:8f:63:c1:82:fc:68:32:10:e9:85:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:DE:CD:01:F4:2E:B1:3E:7A:B7:68:DC:7A:24:2A:C6:CA:A5:C1:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/74dda23f-8439-3dd3-92b7-41b61af685d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.209.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:ab:16:9b:bf:ba:64:6b:28:fe:48:7b:db:20:85:bd:28:37:
         65:ba:27:c3:ad:de:07:97:3f:7b:ba:bb:71:8a:20:36:6d:6f:
         b8:91:85:1b:a5:f0:ef:04:be:3c:15:9f:7b:ea:cf:4d:63:5c:
         92:c8:44:01:c3:67:36:93:ec:28:76:ac:18:ff:93:c3:74:2c:
         71:4e:e6:0e:ac:74:d0:aa:a6:a6:fa:d8:0e:03:12:1a:ad:12:
         53:09:57:71:d2:46:3d:43:65:48:56:d1:eb:25:66:45:95:04:
         95:43:e5:a9:ca:c6:f8:fc:39:e8:6c:f5:a6:4d:75:20:94:df:
         da:8a:8f:3a:36:2b:e8:ab:7d:91:3e:5c:f8:cc:db:70:31:fe:
         f3:4a:d4:6d:1d:2b:28:de:4e:e8:20:aa:26:bf:38:88:d3:28:
         5b:c8:22:1c:db:83:86:57:8b:83:e0:a8:af:80:84:42:46:63:
         6b:42:4d:2e:ed:24:15:48:9a:51:30:a9:38:a3:ce:04:7a:61:
         21:24:3d:11:56:ba:a0:58:4e:cf:51:03:8c:05:e7:5a:a0:b2:
         a8:94:66:9a:54:a4:2f:62:d2:90:28:d3:9c:3e:b0:26:12:5a:
         8b:76:d1:ca:f1:a7:c3:5e:a7:b0:98:6e:84:e4:8f:df:56:0a:
         4b:55:75:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:47:39 2026 by rpki-client