Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc0c3a37-4a5b-3837-bfba-7897615f9ab7.roa
File:                     bc0c3a37-4a5b-3837-bfba-7897615f9ab7.roa (raw, json)
Hash identifier:          V4EqBfmSzCRiJqs6sxHSE6wOWeC3X0yldIoNswMxxyE=
Subject key identifier:   91:FE:39:85:F2:0B:6A:7C:AE:0E:6C:4E:1E:DE:5E:2A:44:FF:92:2E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E9D4AA26A14E7A50B2347A900
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc0c3a37-4a5b-3837-bfba-7897615f9ab7.roa
Signing time:             Sat 25 Jul 2026 09:00:11 +0000
ROA not before:           Sat 25 Jul 2026 09:00:11 +0000
ROA not after:            Fri 23 Oct 2026 09:00:11 +0000
asID:                     20940
IP address blocks:        23.45.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9d:4a:a2:6a:14:e7:a5:0b:23:47:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 25 09:00:11 2026 GMT
            Not After : Oct 23 09:00:11 2026 GMT
        Subject: CN=2ae7089f-03d6-48e4-8933-82ff3ff4433b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:2c:81:29:00:ef:c0:e8:fc:2a:73:58:4f:e8:
                    08:45:37:f2:fc:a4:5a:b5:b5:30:3c:8f:ff:82:0c:
                    60:62:8e:96:22:5a:95:cc:eb:3a:25:65:80:10:ad:
                    a5:52:6b:4c:2f:06:c9:0a:9f:b0:da:b7:26:15:c1:
                    a1:21:e5:a8:27:3b:e2:80:c1:5b:03:fb:fe:22:b5:
                    0a:38:12:0a:c8:55:1d:95:d4:57:f3:93:bb:bd:06:
                    2b:d8:44:ab:6e:5b:0e:fb:10:f4:ae:9a:62:1b:1e:
                    8b:43:a5:8f:17:53:59:e8:6e:cd:78:f5:4b:31:15:
                    0b:00:f0:25:d3:2c:c7:83:d9:06:95:bb:e4:16:90:
                    8b:34:f6:65:73:a7:76:b7:ed:59:69:e2:12:8a:bc:
                    6c:74:e6:8d:80:1a:c5:b5:f5:74:9f:07:0f:41:c5:
                    e7:1f:cf:dc:89:dc:04:e1:8a:97:c9:e6:2d:d9:ce:
                    54:1e:a4:4b:30:30:ad:7f:20:63:b5:72:2d:e3:30:
                    25:39:14:86:1b:99:80:14:0a:11:48:ed:c3:56:61:
                    f9:e1:e8:3e:30:63:e3:f7:fc:88:be:61:77:ba:1d:
                    c1:ff:d0:ed:1a:06:37:fb:5e:bb:ac:45:56:fd:25:
                    3f:46:2d:cc:c3:52:e2:09:f6:1a:1b:7f:46:13:78:
                    15:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FE:39:85:F2:0B:6A:7C:AE:0E:6C:4E:1E:DE:5E:2A:44:FF:92:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bc0c3a37-4a5b-3837-bfba-7897615f9ab7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.45.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:34:45:d2:5a:cd:84:1a:5b:1e:06:a3:47:a1:5f:f0:78:8d:
         33:cb:33:4d:b4:dd:92:8b:4c:8e:9b:71:f3:3b:40:31:ee:b6:
         ec:51:50:6b:d1:dd:36:62:5b:48:ee:26:1c:ba:b7:44:e7:90:
         5e:d9:cf:0c:23:97:01:4b:7b:63:5e:bc:97:fb:38:86:90:7f:
         c8:1b:dc:b2:c8:27:bf:48:ed:cc:4b:89:ab:53:25:30:b5:b5:
         ff:e1:73:37:f5:7b:d9:2e:10:f5:28:4b:4b:6e:56:35:4f:77:
         ff:47:27:d7:75:27:48:a3:0c:6b:67:48:98:0b:a2:e9:88:98:
         73:34:a8:c6:cc:ae:ee:9e:11:ba:3a:ae:a2:8d:af:dc:90:73:
         73:b3:03:55:83:ad:fc:9e:d9:26:1b:f6:2b:42:c7:e6:4c:32:
         75:bb:5a:b6:f4:1e:04:af:d0:84:49:66:43:b8:c0:dd:dc:f9:
         a6:a4:03:29:12:6c:c6:4c:cf:13:cf:b8:e3:12:9e:3e:06:81:
         c0:73:2b:a2:aa:ca:86:9c:4b:90:51:9d:43:a6:82:d0:b6:55:
         f1:48:0b:f4:08:93:c0:0c:6b:f4:82:80:ee:7c:f3:4a:47:45:
         ac:df:50:e4:46:89:53:aa:1b:d5:d1:b4:ff:c9:f2:64:a2:11:
         7a:9a:5d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:13:04 2026 by rpki-client