Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4566e1b5-eaa1-30a4-a042-b25c0e370e6d.roa
File:                     4566e1b5-eaa1-30a4-a042-b25c0e370e6d.roa (raw, json)
Hash identifier:          93iEzfzFLLBJMeHqvoGAdkdOktLjpzCdCJYRtX7zJPI=
Subject key identifier:   FB:C6:24:4C:B7:04:DF:A1:ED:A6:04:24:AA:49:B8:6C:F3:C0:89:22
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EB2B1F09D8CFAF0AB24028040
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4566e1b5-eaa1-30a4-a042-b25c0e370e6d.roa
Signing time:             Sun 02 Aug 2026 01:00:11 +0000
ROA not before:           Sun 02 Aug 2026 01:00:11 +0000
ROA not after:            Sat 31 Oct 2026 01:00:11 +0000
asID:                     20940
IP address blocks:        23.56.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b2:b1:f0:9d:8c:fa:f0:ab:24:02:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Aug  2 01:00:11 2026 GMT
            Not After : Oct 31 01:00:11 2026 GMT
        Subject: CN=b8727387-521a-497f-9722-3bb2d61215fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:1a:a7:ba:49:9f:4a:ad:81:6a:11:7d:19:76:
                    87:69:76:ce:e1:25:55:13:ec:f2:23:55:1c:0f:ee:
                    2a:d1:a8:35:74:6d:8b:d8:3e:49:3e:2a:de:7f:2b:
                    74:40:e0:fd:c1:1c:82:b3:4e:34:c6:37:4b:d6:3a:
                    20:e5:f1:6f:1e:49:84:e3:10:5b:8c:15:4f:e0:04:
                    6e:15:34:7f:67:20:21:d9:18:c8:9b:b8:35:4f:24:
                    a2:c0:9f:77:8a:c1:b6:6c:f3:6f:bf:f8:82:fb:26:
                    26:0d:3b:2c:19:2b:0c:d9:c1:2a:a5:6f:36:90:1a:
                    25:94:fb:90:20:dc:56:ce:9a:49:46:63:2b:1b:4d:
                    4b:5e:cc:fb:26:6a:b8:a4:66:1e:1c:f6:17:b3:19:
                    58:43:8e:8e:cc:fc:fa:99:b2:a9:32:44:6e:74:f0:
                    9f:05:ae:a3:26:16:75:eb:15:b9:1b:e7:d5:24:9c:
                    e5:64:e1:29:13:cd:21:4b:c6:8d:60:a5:ad:72:6d:
                    97:dc:13:85:04:0f:94:c2:02:4b:b7:f8:26:71:3d:
                    de:87:76:cb:c3:1a:ec:65:02:0c:3d:98:a0:f6:97:
                    fd:5c:80:75:a0:55:e2:f6:9e:5c:35:01:8f:2e:a8:
                    5d:ce:ff:ca:f5:64:da:11:1a:fd:bb:a2:38:fe:37:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C6:24:4C:B7:04:DF:A1:ED:A6:04:24:AA:49:B8:6C:F3:C0:89:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4566e1b5-eaa1-30a4-a042-b25c0e370e6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.56.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:f4:00:7d:53:5f:cd:14:6a:e4:1a:11:85:fe:5a:7e:a4:d7:
         ee:82:3b:e2:3d:27:53:ec:12:b6:c8:9d:95:cc:2e:f9:0b:5f:
         39:b9:bd:70:8c:48:7f:bb:94:88:f3:cb:4f:e1:75:c7:41:9a:
         f1:79:a9:18:4f:9d:8d:11:39:f3:b8:cd:d2:5f:0f:75:cb:c2:
         1c:4b:28:f7:bd:8c:03:14:dc:a9:ae:3b:cf:78:ed:17:0c:29:
         3a:74:f9:ed:e0:8a:6a:c3:0d:50:70:3d:e9:d9:b3:92:5d:f8:
         dd:25:91:b5:40:6e:8e:7a:0b:d9:b4:1c:be:29:c9:a2:6a:45:
         01:17:0e:7c:21:a5:1a:02:09:5c:da:69:bb:ba:6c:ea:64:95:
         1e:55:31:ab:5b:ed:a6:d9:8c:1e:26:57:60:ca:6a:0d:78:9a:
         88:a1:17:ce:a9:a7:53:1a:dc:7d:57:cb:03:f5:85:0f:93:62:
         22:f1:26:ad:f1:ac:79:07:a8:57:07:52:f1:c6:dd:1a:ff:cb:
         74:e4:e9:16:40:d1:c5:7b:b2:23:ac:fa:28:54:8a:b3:03:54:
         dd:7e:d2:14:8b:bf:e4:8a:c3:77:79:4c:4c:be:f3:a8:81:a1:
         c5:9f:66:cc:b2:40:76:d8:fc:81:dd:38:0b:bb:24:f2:1a:5e:
         c8:4b:ec:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:42:47 2026 by rpki-client