Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7eba6b98-3c72-3863-81bb-09d935b4d6c0.roa
File:                     7eba6b98-3c72-3863-81bb-09d935b4d6c0.roa (raw, json)
Hash identifier:          caUE6rvq305tGGL+hL+IzS42DpYZmZDwEu3MoMx+94s=
Subject key identifier:   6A:CA:E3:A4:40:BE:AE:AF:D5:70:17:A4:6F:AC:FE:E8:F4:2A:B5:1C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA798412CA916003D9C8DA7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7eba6b98-3c72-3863-81bb-09d935b4d6c0.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.205.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:98:41:2c:a9:16:00:3d:9c:8d:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=a0103995-1a11-44e4-b85f-dfcedb2048dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:53:fe:ee:61:63:f0:b9:4d:c8:79:19:14:0a:
                    ee:ae:fa:ab:1a:76:ef:2e:7e:ec:07:86:60:31:36:
                    1d:90:2f:c4:de:de:f1:70:28:16:74:47:35:e7:8e:
                    10:69:b0:8b:56:8d:71:0a:1f:60:eb:8f:af:99:fe:
                    87:7b:6f:fd:a2:5e:55:82:66:9b:69:24:c2:9f:32:
                    f4:ea:20:04:55:d7:7d:86:35:9f:47:23:c1:72:98:
                    bd:d5:5f:e3:55:e1:4c:31:5c:8a:c0:28:e8:e0:e3:
                    db:7a:be:2a:12:4e:16:58:55:41:d5:94:93:14:f3:
                    f4:53:06:07:88:e1:8a:62:96:8c:3e:82:d9:65:69:
                    da:0d:3d:6f:8f:de:cb:3a:92:fe:a6:ef:e3:c9:bd:
                    12:50:43:de:e5:ee:2f:14:69:aa:e2:ac:0f:64:7a:
                    f4:b3:65:4a:fd:29:db:7a:84:96:f3:77:50:ee:9e:
                    fb:11:4c:f3:e7:70:24:23:fa:47:89:09:ba:2e:6f:
                    f1:b8:c5:88:41:a6:35:36:ee:e8:08:ef:56:15:f6:
                    92:75:7a:84:7a:bf:cd:cf:f0:4d:04:5d:18:6c:09:
                    95:f6:1c:c2:fa:74:c3:e1:6f:93:63:b9:63:d5:66:
                    97:d1:04:76:f4:9a:ce:60:bf:78:50:f0:5d:1c:7b:
                    fa:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CA:E3:A4:40:BE:AE:AF:D5:70:17:A4:6F:AC:FE:E8:F4:2A:B5:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7eba6b98-3c72-3863-81bb-09d935b4d6c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.205.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:03:b2:be:0f:10:a8:3c:06:9d:08:17:7b:a5:f9:90:8b:2f:
         f4:87:93:95:60:74:6f:ec:9c:82:1b:ee:90:ce:0f:ed:b5:d5:
         d3:2a:07:6a:ab:ff:b0:18:8f:0e:01:b9:ff:09:3e:ea:7d:25:
         42:10:da:0b:74:8d:5d:d2:ea:71:12:c3:d3:57:b1:ff:fb:d7:
         14:4b:d7:3c:57:82:23:6e:f9:3f:60:a9:d2:a2:bc:a2:c7:cf:
         a6:82:f4:7f:b9:c9:65:b8:6e:2f:45:54:69:44:b2:d2:a1:d7:
         c2:2e:15:bd:05:db:7e:61:aa:0d:3c:a2:f7:d0:d4:7f:ab:0e:
         3b:4b:41:37:45:2e:bc:b6:d5:3f:10:e5:1a:3e:1c:c7:6b:5f:
         f2:3e:23:8c:16:ed:11:cc:e5:ed:67:a1:4b:0f:8e:90:c3:da:
         52:ff:04:ee:96:33:d7:00:dc:b6:14:73:70:73:86:34:e7:91:
         f9:33:70:2e:2e:fc:f3:4c:94:c0:b5:21:26:e2:c6:60:5d:66:
         7c:84:ca:b0:b2:4b:06:34:90:5d:3a:be:3d:c6:ad:11:3d:59:
         7b:db:9f:58:a2:ec:f0:d4:8b:35:a2:8c:21:4e:14:67:bc:2f:
         0c:1d:6f:9b:39:68:ec:e3:7a:d3:33:b9:e3:d1:30:17:56:60:
         fb:76:dc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:47:22 2026 by rpki-client