Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e90f9101-cc21-3bae-aad5-7a6e46f27b13.roa
File:                     e90f9101-cc21-3bae-aad5-7a6e46f27b13.roa (raw, json)
Hash identifier:          DH3NmAibzScnhlFwC4WrUPnEgoZok1MmJiOQ1Sguyz4=
Subject key identifier:   E3:F4:FA:5A:D4:B6:95:84:E4:EB:3A:F9:96:44:7E:5F:65:10:43:2F
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584EAE81AC6F74CEDE790FB21E80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e90f9101-cc21-3bae-aad5-7a6e46f27b13.roa
Signing time:             Fri 31 Jul 2026 13:00:12 +0000
ROA not before:           Fri 31 Jul 2026 13:00:12 +0000
ROA not after:            Thu 29 Oct 2026 13:00:12 +0000
asID:                     20940
IP address blocks:        23.223.156.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ae:81:ac:6f:74:ce:de:79:0f:b2:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jul 31 13:00:12 2026 GMT
            Not After : Oct 29 13:00:12 2026 GMT
        Subject: CN=fcfa0476-d2d6-464c-8c74-3e310453a441
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:5f:81:cb:91:b9:9c:cc:d3:50:cb:c7:ac:
                    da:17:0c:b1:c7:6e:88:de:33:70:66:28:f4:e2:76:
                    47:89:cb:76:1d:da:cf:88:12:74:d8:e5:d7:82:c8:
                    59:d1:13:81:b3:5a:17:59:50:22:7b:26:47:8f:64:
                    10:56:a0:21:c6:98:df:d1:e9:e6:cc:01:08:bb:ac:
                    bf:17:bd:89:65:81:27:75:e0:7f:89:b3:a5:fc:08:
                    76:77:94:8c:0b:ad:14:8c:aa:a8:ec:9b:9a:77:28:
                    79:0e:07:61:dd:31:e0:f6:86:5b:30:7c:67:ff:ab:
                    2e:7a:bd:22:a9:a9:e0:a1:18:13:b5:b9:f2:1b:3e:
                    07:40:84:c7:de:2d:1a:dd:c8:01:cf:6e:95:7c:11:
                    80:ac:4a:4b:13:a1:f4:73:81:68:de:7b:5e:a4:d7:
                    05:f5:12:58:d8:dd:46:98:96:6f:d8:cd:87:87:64:
                    5d:81:c1:7b:b8:31:20:4f:06:ed:cb:7d:5d:12:88:
                    9b:2d:26:ea:75:31:60:2a:22:2d:6a:5f:6a:34:9f:
                    fd:d1:1f:ed:b3:44:b2:eb:1c:a6:e7:44:eb:39:4d:
                    04:4a:78:83:73:18:e4:c5:df:db:75:43:7d:b2:4b:
                    53:fb:4e:a4:b7:62:8a:cb:15:c5:81:5e:e3:ff:08:
                    27:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F4:FA:5A:D4:B6:95:84:E4:EB:3A:F9:96:44:7E:5F:65:10:43:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/e90f9101-cc21-3bae-aad5-7a6e46f27b13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.223.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:c4:52:2f:5f:cd:35:e3:ea:14:c1:20:f3:e4:64:b8:78:20:
         12:b5:b5:73:98:db:29:45:88:85:f8:fd:98:9d:67:55:cc:9a:
         fb:5e:68:92:1c:04:4a:a5:b2:31:ed:38:3d:13:fe:b4:32:9d:
         f2:56:0b:94:54:47:0f:2e:e7:84:6b:13:d7:f5:07:78:5d:d0:
         f3:32:e5:3b:1e:26:30:27:f6:c7:84:4d:5a:34:16:a7:08:03:
         6a:4a:d5:33:e3:cd:ad:92:c0:0c:ea:23:63:34:da:53:23:e2:
         7c:31:1d:85:47:96:3e:d3:cc:84:55:7f:6d:f5:75:18:d9:3d:
         63:b4:45:b9:ed:3f:e4:e3:ce:6d:0e:ea:ff:19:33:4e:09:73:
         44:74:55:37:f4:2b:ab:84:d3:a8:56:1d:42:f9:84:a0:d7:18:
         33:63:63:33:c3:e4:9b:cd:03:eb:b6:aa:60:29:fc:4c:22:af:
         0d:05:ab:51:00:5a:ca:dc:b9:15:29:92:b8:3e:6b:4a:93:2f:
         fe:d4:29:5b:af:96:10:4f:e5:44:68:a6:63:93:ac:93:22:93:
         54:f0:33:a2:5e:c8:4e:df:3b:e1:db:5f:c2:81:65:f9:c7:02:
         18:65:e2:8e:52:d5:e7:28:84:f8:3a:6f:c1:0e:ec:22:a4:81:
         27:1c:a6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:52:14 2026 by rpki-client