Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa
File:                     eae85ad0-1277-36ff-9059-3ed1f569e35e.roa (raw, json)
Hash identifier:          B0k9BmRjZdkfMJnmRlYpAx5AV/ut2azKPXkZqR8Pid0=
Subject key identifier:   FA:8E:D4:A6:2B:01:98:DF:48:8F:4E:72:35:2D:9C:16:C0:94:EE:F9
Certificate issuer:       /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial:       010D0C9F4328584EFE1224E7625A9B1851ECE500
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     22765
IP address blocks:        72.20.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:24:e7:62:5a:9b:18:51:ec:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=02fe6467-2d4b-4f2c-b68d-27c60b920928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:f6:30:65:53:ba:2a:de:fa:25:a9:62:39:
                    6a:11:30:f1:6c:25:c8:15:7d:26:37:e2:93:51:e0:
                    a8:2c:a4:03:07:81:57:2b:85:8c:ee:72:63:20:e7:
                    ba:70:8e:af:c4:bf:37:db:a5:ed:af:80:b6:3a:ca:
                    99:33:cd:70:2a:ab:78:c0:8f:c8:05:73:cf:38:0f:
                    44:90:08:2c:51:00:9d:a3:c3:22:1e:b5:77:4a:2d:
                    e7:ad:94:f2:c9:a1:0d:ed:80:37:61:2b:a8:f3:62:
                    ff:50:f7:0b:ef:f6:48:54:00:3c:3b:5a:07:2a:cb:
                    99:4e:37:92:9b:0f:8c:b1:eb:29:22:96:c6:12:fb:
                    61:bc:bd:89:0f:cb:bd:7f:c7:88:42:0c:86:10:0c:
                    f2:26:5a:42:01:c9:03:6e:0b:5e:13:f8:e8:da:d7:
                    50:a6:11:cc:6f:ab:80:7d:92:3b:8f:0c:f3:93:a8:
                    8d:52:32:a2:1a:12:35:6a:9f:ce:e0:8c:05:9b:c8:
                    37:46:e0:66:38:94:77:d7:95:e2:19:43:4c:e4:92:
                    cc:80:72:76:43:03:6e:4c:ed:86:be:bc:79:f4:2b:
                    d1:f9:a5:ea:04:4b:82:4f:5a:7c:ba:b6:fc:c6:30:
                    77:7d:04:43:df:07:ea:98:6b:f5:86:e6:74:b4:c5:
                    01:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8E:D4:A6:2B:01:98:DF:48:8F:4E:72:35:2D:9C:16:C0:94:EE:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/eae85ad0-1277-36ff-9059-3ed1f569e35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl

            X509v3 Authority Key Identifier:
                keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.20.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:3e:23:01:f8:df:dd:5f:42:64:48:3b:10:51:ff:6e:1e:5c:
         36:84:5c:05:bc:67:4a:71:cf:ba:4d:b3:98:4b:f4:bd:0d:00:
         c4:f1:16:26:3e:06:7a:52:fa:4b:e1:19:31:ae:0c:56:ac:ed:
         16:a4:45:e2:a1:d9:13:0d:ef:96:a2:31:f9:07:1d:8e:22:23:
         9a:85:fc:82:8f:f0:9e:b1:75:29:08:1e:1c:c3:08:ae:79:a5:
         33:d8:1f:2d:29:a4:b3:05:44:8b:e5:af:8d:9d:ff:79:09:3d:
         06:4e:6d:58:03:d5:b0:f1:b6:82:12:47:0e:89:4a:f0:7d:a0:
         47:97:5a:5b:5a:62:86:ae:c8:95:66:4e:70:32:c6:a2:1e:47:
         ef:bc:d9:14:58:9c:a3:c8:92:df:17:26:2d:a0:db:36:d0:7b:
         74:67:75:2e:99:34:c9:ea:52:9c:48:c7:33:09:65:5c:be:53:
         30:8b:54:19:77:1b:5f:b7:dc:c1:3d:fe:c7:51:e4:7a:ab:17:
         e5:29:fd:5f:1c:75:db:3c:78:99:bf:41:6d:ae:8d:4f:51:84:
         75:de:e3:45:6f:44:cc:53:89:08:8b:c2:d9:f1:e6:18:2a:01:
         ab:3f:dd:8f:29:3d:60:fa:96:dd:d9:51:6f:f6:00:f6:d0:7a:
         ce:04:fe:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:08:31 2026 by rpki-client