Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b79de6c8-48dc-361c-b3c6-b66f3ad28f73.roa
File:                     b79de6c8-48dc-361c-b3c6-b66f3ad28f73.roa (raw, json)
Hash identifier:          dw9sPQAKFiVQRXxsvmwdVOYTIWXEEsWE1wZscWEIwvk=
Subject key identifier:   C9:7F:C9:0B:2D:9F:34:A5:F0:58:93:D9:12:A7:63:C3:DA:CC:E9:4F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584ED9C73C9B1A4B028895B784C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b79de6c8-48dc-361c-b3c6-b66f3ad28f73.roa
Signing time:             Sun 16 Aug 2026 01:00:14 +0000
ROA not before:           Sun 16 Aug 2026 01:00:14 +0000
ROA not after:            Sat 14 Nov 2026 02:00:14 +0000
asID:                     16625
IP address blocks:        184.28.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d9:c7:3c:9b:1a:4b:02:88:95:b7:84:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug 16 01:00:14 2026 GMT
            Not After : Nov 14 02:00:14 2026 GMT
        Subject: CN=f9956db1-f0a3-4c51-968d-ef29ac95daa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6b:76:fa:a9:38:7c:91:73:f6:33:96:e4:5a:
                    13:20:ba:76:1c:f6:ff:14:08:ee:25:53:e4:8b:ca:
                    c6:5e:49:73:8c:85:42:d5:3d:ad:83:89:de:7e:0e:
                    41:c1:f2:01:32:44:9c:4a:4a:32:ca:6d:2a:e5:03:
                    d0:3b:b2:1c:62:a8:67:28:ac:27:d5:55:a3:ab:74:
                    7c:d8:7a:18:74:1c:c1:92:06:bb:8b:a9:34:bb:da:
                    a2:3e:22:7c:a4:f9:10:13:40:83:db:52:f0:71:86:
                    dd:ef:a7:76:71:9e:2e:a8:ff:61:02:d5:71:0f:c9:
                    9d:29:31:52:a6:c5:1a:01:7c:2c:cc:da:85:00:b7:
                    2f:b2:09:1a:fc:0e:2a:a6:58:f5:e7:1a:0c:77:13:
                    ec:0b:11:5e:b6:61:68:af:ee:d8:29:f3:1f:16:ff:
                    0d:91:bd:c1:3c:89:10:ed:75:2c:f8:3f:ae:d4:70:
                    4d:1e:fb:ef:d3:cc:62:92:cf:ca:ac:f7:39:33:92:
                    19:3c:33:b2:09:d0:00:b8:3e:13:fc:2b:83:2b:e9:
                    9a:d5:6f:e0:d3:8a:09:f0:eb:b0:89:2c:b1:49:a7:
                    e3:90:75:42:ff:52:d0:f6:8d:7e:5c:6b:26:21:8a:
                    6f:3d:02:f2:5e:15:47:b3:43:bb:90:87:59:ff:e5:
                    d5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7F:C9:0B:2D:9F:34:A5:F0:58:93:D9:12:A7:63:C3:DA:CC:E9:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b79de6c8-48dc-361c-b3c6-b66f3ad28f73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.28.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e5:07:cd:00:92:b4:35:8e:88:e3:f4:02:01:2c:bd:bb:6a:
         e4:2d:db:e4:de:b6:ca:2e:58:59:0b:53:81:95:a7:67:c9:a1:
         25:d9:97:ee:ee:a0:97:28:25:4e:45:99:1a:03:eb:96:8b:e5:
         12:ef:a2:39:85:5a:8e:84:88:8b:4f:38:eb:d6:f4:1e:2f:f0:
         06:d6:64:ca:70:b2:08:d2:d4:86:42:62:b8:4c:e1:26:d5:00:
         5e:78:7e:ec:70:7d:9c:c7:fc:60:ef:60:04:27:8f:50:6f:48:
         ae:fd:40:de:1b:f8:46:d0:1d:fe:b1:42:28:42:ba:37:0f:21:
         5c:2f:77:49:12:d3:b7:2b:61:5d:fb:04:31:00:92:9d:e9:57:
         94:a8:f8:83:5b:0b:8c:e2:62:23:1d:0b:b7:14:0d:65:c1:42:
         83:5c:ca:47:ff:09:be:d0:e6:5b:ec:80:d2:36:76:8c:9b:da:
         ee:22:10:3f:e5:66:ad:17:4e:8f:cc:47:3b:3c:15:cf:8b:5f:
         0f:c0:27:67:a2:f1:fb:c7:79:8e:72:41:b7:81:f1:16:32:a6:
         ac:a4:a7:f3:00:61:69:6c:fe:95:39:52:68:00:fa:79:6b:8e:
         f4:96:18:f8:8c:50:6c:ca:b8:af:9d:9a:53:f3:6f:7c:14:56:
         f6:86:42:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:54:37 2026 by rpki-client