Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c122bcaf-8999-3f8b-92a0-2c2cdab11565.roa
File:                     c122bcaf-8999-3f8b-92a0-2c2cdab11565.roa (raw, json)
Hash identifier:          k3iSWJqJuSpLmcyydmyDInPFOOIFgLBFXFOWzQzDEos=
Subject key identifier:   41:1B:68:3C:DC:68:B6:0E:58:84:6E:9E:8D:E7:2F:70:9C:50:B8:ED
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F2957AAA16437A8CDECF36800
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c122bcaf-8999-3f8b-92a0-2c2cdab11565.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     16625
IP address blocks:        184.26.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:aa:a1:64:37:a8:cd:ec:f3:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=377b1790-c8da-45e0-a62d-57df1298193d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:b3:c5:2b:9e:50:d3:8d:5d:b9:8c:5d:8c:
                    38:9b:eb:70:bf:5e:45:5a:7e:6d:9b:6f:7e:aa:9a:
                    36:46:b7:a2:34:e3:75:04:25:1f:3a:1b:51:dc:b8:
                    9d:0a:b2:ae:3d:07:71:5a:f5:8f:86:4c:cb:12:32:
                    cb:3b:81:2f:dd:4d:7b:03:b7:ba:57:7e:ba:59:69:
                    e6:65:d8:cc:ae:08:3a:2b:f2:ec:58:c6:8b:54:ee:
                    e6:5c:52:78:2b:b4:3b:23:a6:bf:61:50:db:51:13:
                    1a:41:21:88:b2:17:ed:94:90:58:77:ff:3e:1c:fd:
                    a4:8d:c4:0d:33:f7:5f:6a:ba:af:30:d3:c8:52:d8:
                    be:80:63:71:7c:c5:e6:90:ee:3d:23:eb:a0:f5:03:
                    47:b6:34:02:98:7a:8c:bb:10:8b:93:c3:46:a0:c8:
                    aa:01:9e:c3:e7:c2:c8:c4:b8:36:7e:f3:a8:1f:83:
                    6d:5d:bc:28:1a:50:f9:47:94:e1:0e:9d:05:a1:b8:
                    e0:00:b0:4f:39:bc:a8:77:9d:f1:03:70:82:e6:02:
                    ee:fc:c1:08:7a:2d:93:17:54:61:6b:1e:11:d1:ad:
                    1d:19:94:0a:7b:29:b6:c4:ad:d2:36:1c:69:50:94:
                    2f:a0:d8:72:a5:35:b7:bf:b2:ed:f9:9e:31:07:9f:
                    fe:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1B:68:3C:DC:68:B6:0E:58:84:6E:9E:8D:E7:2F:70:9C:50:B8:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c122bcaf-8999-3f8b-92a0-2c2cdab11565.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.26.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:87:11:fc:79:76:b5:38:fa:2c:52:49:14:78:2b:8d:cf:ed:
         17:c6:db:d9:4f:3b:08:c3:0b:4b:c4:00:fa:9d:d6:aa:39:89:
         b3:1c:6d:b5:24:1b:97:78:23:18:73:da:89:4f:27:39:d0:77:
         72:1f:d0:de:ae:72:7f:7a:52:c5:af:b5:49:0d:f9:fc:1b:3c:
         7b:4d:0b:86:54:b3:cd:36:a5:a3:29:f8:c3:ec:fb:8a:fb:89:
         d5:f0:15:96:e4:0a:5b:fa:f5:73:d6:62:1c:8e:1d:e0:33:4b:
         01:db:97:21:70:ca:71:a4:97:4d:f1:76:a7:f2:43:8d:27:f6:
         a7:e5:5d:82:f1:34:95:f0:b5:09:7b:f8:e6:ff:8d:48:34:ea:
         35:42:7f:60:59:37:e0:ce:32:76:47:4c:57:49:4d:cb:a7:b7:
         35:e1:67:55:86:53:37:43:97:d0:09:c1:f0:3c:60:77:f8:11:
         41:30:e8:41:33:51:f6:ec:b5:70:10:c3:ad:b8:d9:33:bc:83:
         92:6e:25:22:b8:82:07:3c:52:bc:19:2a:f9:b3:96:f4:f3:17:
         29:39:b6:aa:97:f8:d1:eb:5c:6a:9b:59:9f:1e:59:9e:65:13:
         33:3e:71:b8:aa:09:cd:2e:26:06:52:77:85:b4:5b:ed:ad:62:
         5e:92:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:43:40 2026 by rpki-client