Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/827d7bba-9330-374c-98d9-caeb3ab5b68f.roa
File:                     827d7bba-9330-374c-98d9-caeb3ab5b68f.roa (raw, json)
Hash identifier:          vjVeHEKwjt6Uodpk3954x5N9Fy/+9k6SP5mCWL+yvGU=
Subject key identifier:   3C:58:CA:77:4B:02:89:C9:E6:1C:E1:50:72:CB:71:5D:84:16:98:11
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA5AA7D112B0E4A48B10E0F40
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/827d7bba-9330-374c-98d9-caeb3ab5b68f.roa
Signing time:             Tue 28 Jul 2026 09:00:11 +0000
ROA not before:           Tue 28 Jul 2026 09:00:11 +0000
ROA not after:            Mon 26 Oct 2026 09:00:11 +0000
asID:                     20940
IP address blocks:        23.52.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a5:aa:7d:11:2b:0e:4a:48:b1:0e:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 28 09:00:11 2026 GMT
            Not After : Oct 26 09:00:11 2026 GMT
        Subject: CN=0c9d2228-8f19-4fb1-90c1-a32131144b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:44:8c:1d:e4:e2:9b:e2:b6:3d:c3:2b:d7:db:
                    8e:78:d5:fd:49:51:d8:c1:88:2d:1b:e1:82:5b:13:
                    a0:f1:92:04:ce:16:4e:7f:39:f5:02:24:21:b2:0a:
                    a6:83:88:97:68:c1:de:7e:34:c0:c5:8c:b0:e6:5e:
                    51:e1:80:fe:81:d7:d5:36:ab:09:9d:7d:c4:3c:1f:
                    da:14:9c:65:58:0a:1c:61:97:c6:41:d1:1c:3c:60:
                    a0:29:d6:00:1c:07:9c:6b:9e:3a:5d:f7:6f:d5:0c:
                    8e:94:64:65:15:bb:50:bf:2f:d1:89:7b:de:85:ed:
                    22:49:4d:4d:39:bb:ff:6c:0d:1a:3a:16:78:09:1d:
                    01:67:59:d7:d2:32:1e:b6:ee:b9:86:bf:f8:0d:cb:
                    f3:43:f5:b8:61:86:41:1b:00:17:c2:5c:92:b9:72:
                    30:69:b3:4e:4c:0b:e7:97:2b:b7:36:fc:34:30:82:
                    25:32:f6:d4:9f:46:02:3e:d5:de:b3:7b:8e:a5:55:
                    00:70:0b:a3:7f:99:fb:0d:3c:8e:a6:1b:e4:0e:96:
                    58:88:f7:1c:ca:1b:c3:27:e8:a1:07:99:a4:52:5c:
                    65:1e:6a:4c:2d:73:bf:ea:d5:6d:8f:37:91:53:d3:
                    89:68:2c:65:08:9c:06:cf:24:1a:a7:0d:90:ae:a7:
                    ea:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:58:CA:77:4B:02:89:C9:E6:1C:E1:50:72:CB:71:5D:84:16:98:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/827d7bba-9330-374c-98d9-caeb3ab5b68f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.52.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:2f:cc:8f:43:9a:d0:c2:ee:54:c1:54:59:82:d1:46:79:89:
         f9:f9:fa:9c:e5:35:7f:e6:16:48:09:43:31:09:36:ac:e5:7a:
         28:db:5b:3e:5d:1c:ca:09:54:7b:05:93:a5:b8:2f:be:96:22:
         46:4e:09:75:83:28:11:40:5b:ad:fe:c5:ce:53:3d:cc:e9:c4:
         66:f2:2d:89:d9:f4:0d:f7:2c:3f:58:d6:80:08:4e:1c:99:82:
         3d:b2:48:53:57:dc:3a:15:01:9c:a2:2b:3c:28:8e:9e:51:e0:
         2d:88:6a:98:b8:2b:11:51:01:b7:aa:ce:04:79:f0:6c:d9:dc:
         ab:28:41:d9:1c:7c:2a:8e:1a:fe:5c:fe:25:1f:aa:03:44:4d:
         2a:5c:f4:8c:66:56:95:fe:c6:32:09:1c:79:2b:69:1b:f1:8d:
         f0:2e:72:a7:40:11:f0:33:f5:99:3c:28:24:69:e7:dd:db:40:
         60:d9:3d:14:55:79:36:ed:4f:1c:32:51:37:68:9f:d5:a1:df:
         bf:b5:84:95:30:5a:3f:8e:b4:da:45:79:d3:5b:a3:73:54:d5:
         da:7a:0a:0f:ff:63:e8:9e:05:38:d4:b6:e6:32:0b:76:e2:5f:
         d7:e8:c9:b7:39:74:33:3c:0f:8f:25:57:0c:ed:c3:b0:f4:39:
         ca:a9:4f:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:58:18 2026 by rpki-client