Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8de776a0-1eee-349d-bdf8-d14867589eda.roa
File:                     8de776a0-1eee-349d-bdf8-d14867589eda.roa (raw, json)
Hash identifier:          KFso+nlHac4NGGtPtUUMm8tgngFLDrRVpe7UDQ60HXo=
Subject key identifier:   C2:74:5A:06:00:ED:29:1A:4E:CF:D0:4A:67:33:B6:22:E5:34:02:F2
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EFCACDF8F139BF48035866780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8de776a0-1eee-349d-bdf8-d14867589eda.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     16625
IP address blocks:        184.24.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:df:8f:13:9b:f4:80:35:86:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=420ac5f5-be05-4d6d-b312-b908f694e252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:37:3e:e1:9b:5c:b4:25:50:91:3c:82:0e:
                    66:e4:8a:17:cd:12:b5:57:67:25:6b:44:af:be:36:
                    88:c5:e5:66:f4:49:b1:e4:50:68:aa:2a:24:da:3d:
                    18:6b:ad:c7:34:62:e6:05:57:25:e3:be:96:42:6e:
                    16:38:e0:1c:89:12:76:2c:6e:21:1b:dd:ad:ed:c7:
                    99:21:78:5f:0e:cf:c2:11:7c:9d:c3:8e:5e:19:02:
                    a5:9a:c8:7a:c8:69:b4:40:80:ba:b1:08:90:9f:38:
                    82:46:55:bf:37:c8:38:9b:45:42:90:b0:5b:8a:85:
                    43:51:be:c4:48:ff:8a:d8:dd:cc:79:57:f5:2f:57:
                    e1:70:7b:4b:2f:92:c3:7a:bc:30:92:45:68:28:dd:
                    39:76:1a:0c:17:cd:0f:31:0e:6b:63:75:71:1c:49:
                    f8:1f:d3:ec:c5:27:c0:5b:6e:72:c6:d3:6b:da:84:
                    32:df:1d:1e:8f:8d:b9:3e:7c:28:26:7a:15:cc:8c:
                    87:e3:d1:cc:17:67:ae:b0:eb:c5:2e:de:bb:a1:6f:
                    cb:67:27:40:ae:d5:0d:55:a9:b8:ce:68:78:c0:a3:
                    e7:03:5e:be:57:52:2d:b2:8b:b0:e3:0c:38:2d:bd:
                    e0:f7:02:92:ff:a1:2a:a6:b7:08:b6:94:07:3e:9b:
                    7e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:74:5A:06:00:ED:29:1A:4E:CF:D0:4A:67:33:B6:22:E5:34:02:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/8de776a0-1eee-349d-bdf8-d14867589eda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.24.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:dd:ff:90:b5:76:e9:bd:69:7e:6b:df:88:dd:74:fb:94:67:
         3c:5a:60:ad:cc:3d:ff:b8:64:73:4c:a5:9e:6b:aa:e4:e2:82:
         11:68:42:14:c3:21:20:7e:ed:12:78:08:b3:c8:07:ff:e5:ee:
         bf:4d:08:de:7a:96:8e:4d:54:2b:2b:8c:de:ec:e1:f2:a8:38:
         8d:4b:27:b4:15:81:a9:d7:02:e3:e0:84:cb:c8:d0:a1:e0:c0:
         d9:87:01:71:06:d6:ef:80:54:47:0f:06:06:b5:df:a9:d1:e3:
         3c:5f:8a:a5:29:5e:77:bd:44:ec:39:13:3b:d8:e4:03:54:5e:
         1b:3a:8a:a0:f9:1d:d6:32:8e:d4:d5:2a:0c:90:90:8b:de:a7:
         14:3a:15:99:9c:30:da:ce:fb:40:99:29:b3:1c:a6:3b:b6:eb:
         07:e8:dc:35:38:47:6d:ff:b1:3a:2a:2c:4e:be:4c:36:bd:c1:
         1f:50:14:64:70:ff:50:db:c8:00:51:8d:b1:35:15:89:01:7b:
         b1:a0:ed:00:92:6a:79:fa:ca:f5:df:61:e5:bb:40:f5:28:34:
         5c:a1:e5:60:4f:38:f6:47:c6:5c:65:3b:66:f1:ca:e6:e7:11:
         3d:24:b7:37:68:8e:d5:2a:d2:02:45:97:25:4c:2a:3b:f9:7d:
         cf:eb:ed:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:57:16 2026 by rpki-client