Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87b6cfa6-50a9-3195-a566-12c6b5c8f3af.roa
File:                     87b6cfa6-50a9-3195-a566-12c6b5c8f3af.roa (raw, json)
Hash identifier:          4ufqmxyMw9VTk/VeKy9yKUSsa2Fyom4aLvmjABqre4o=
Subject key identifier:   BA:16:B7:74:8E:0E:8D:FB:5D:5D:3B:41:59:4D:B8:6F:11:CC:37:73
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EA787A2ED17160D6CC810CF00
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87b6cfa6-50a9-3195-a566-12c6b5c8f3af.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     20940
IP address blocks:        23.62.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:a2:ed:17:16:0d:6c:c8:10:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=7d7ed6fb-b0c9-48af-b548-d03854262689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:49:02:2d:33:ca:7d:de:42:35:07:76:27:e6:
                    bb:a2:d2:0b:83:7d:e6:e8:b5:90:36:41:3e:29:fc:
                    f0:f5:7c:2a:65:1b:bf:a1:7b:89:c6:b3:01:e5:d4:
                    41:fd:82:18:5a:14:13:b9:74:0a:8b:07:7f:cb:28:
                    71:6b:43:9e:74:1f:82:dc:f6:40:51:fc:eb:da:96:
                    ae:4a:60:05:5b:65:c0:7e:0b:f4:cd:46:de:6c:99:
                    fe:96:ff:45:c4:21:c0:c3:31:22:3d:35:5b:ec:18:
                    c5:fc:67:08:3d:25:8d:fa:11:2a:df:ac:f4:e6:ee:
                    ea:2a:83:42:9f:ec:3e:56:f0:be:59:74:9f:ba:d8:
                    51:5d:95:32:93:98:ae:ca:53:dd:e7:67:0a:67:bc:
                    8b:bf:42:ec:93:c0:bb:50:c2:38:89:29:ad:a9:4a:
                    ec:fe:b8:3d:90:7f:64:6b:53:24:45:93:77:38:2f:
                    6e:a5:84:dd:cf:8b:f5:20:c5:ca:83:ee:e0:9b:5e:
                    21:b6:76:b3:1a:5c:19:f7:40:4b:2c:4b:06:4a:ba:
                    0d:c6:3b:51:fb:8a:f1:bc:fe:95:54:3f:10:f4:a9:
                    83:17:09:11:32:f9:1f:11:dd:52:24:52:57:ef:5f:
                    2e:de:3a:61:f5:a5:ce:76:44:dc:86:f4:85:3e:35:
                    f1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:16:B7:74:8E:0E:8D:FB:5D:5D:3B:41:59:4D:B8:6F:11:CC:37:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/87b6cfa6-50a9-3195-a566-12c6b5c8f3af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.62.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:4a:34:ee:8f:b6:13:7d:7a:37:95:e0:b4:39:e0:9d:97:8d:
         c1:9e:70:a0:25:01:5b:d8:a1:73:d0:a1:b8:cf:c2:68:ea:30:
         f0:97:0a:c6:e6:b4:07:36:9b:f6:c6:9b:29:8f:e3:cb:5f:35:
         ff:57:28:de:0c:69:3e:a9:c8:40:a6:09:08:2e:ae:dd:ae:33:
         7a:c6:96:80:d3:dc:97:a6:19:fc:05:fa:b1:7d:ce:88:2d:7f:
         fb:bc:51:2d:08:e7:85:c1:f8:de:b4:bd:a5:75:81:92:44:e6:
         b7:88:db:4b:4d:82:59:1a:8f:d9:6f:d8:fa:83:cc:98:74:cf:
         79:17:13:2a:e9:4d:df:3d:98:a7:0f:f6:31:4c:f5:62:97:f2:
         e4:14:e8:e2:5b:6f:ad:43:b9:5c:6a:e8:03:87:53:2e:9b:73:
         05:78:3b:b1:8b:e5:57:86:c9:36:31:0e:2e:39:14:13:64:58:
         34:5f:ac:1d:ad:e7:2b:05:40:00:60:35:05:a7:6e:3f:7d:de:
         eb:5b:73:fb:78:5a:f9:62:a7:a1:11:a7:3f:ae:ab:58:f5:a7:
         b0:46:ad:d8:02:fd:6a:46:e8:29:37:30:85:4f:9c:6e:ea:57:
         15:05:77:38:e2:8b:74:ac:ea:8a:81:e4:46:50:d1:f8:1b:05:
         d0:89:e1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:47:35 2026 by rpki-client