Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/85f13155-42f7-31a3-917f-c70710547a23.roa
File:                     85f13155-42f7-31a3-917f-c70710547a23.roa (raw, json)
Hash identifier:          BhzQJw/0A5ck2sv/NPbrNHFNcKg/fGzDqrk5tf+PDZw=
Subject key identifier:   1A:93:E0:8F:C2:42:77:97:EB:D7:43:86:49:2F:83:8B:BA:58:13:90
Certificate issuer:       /CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
Certificate serial:       010D0C9F4328584EA791C20FA9641DBA5ACE244C
Authority key identifier: B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/85f13155-42f7-31a3-917f-c70710547a23.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     399870
IP address blocks:        23.144.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:91:c2:0f:a9:64:1d:ba:5a:ce:24:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=713466b3-0ff4-45eb-be8d-7a59e42bf5b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5c:66:91:b3:95:15:77:18:58:b4:a1:50:59:
                    30:cf:00:1e:67:73:68:3a:83:fc:29:1b:ae:fc:d4:
                    48:12:2f:df:24:c8:c2:1e:fe:ec:0b:6f:50:a9:7d:
                    b2:f3:91:b1:80:08:71:34:73:61:c2:de:2b:9e:a9:
                    44:c6:cd:23:88:46:f9:cb:09:3c:b2:13:c9:ad:b6:
                    9d:32:40:31:7a:4b:f9:9e:d0:8e:41:82:92:aa:29:
                    57:d7:fc:97:77:13:66:35:fd:af:3b:68:59:4d:34:
                    c9:1f:48:ee:4d:f1:12:11:b1:3c:6e:a7:dc:d3:a6:
                    f3:02:11:91:d2:cd:12:6d:a3:d0:76:0d:a9:82:c1:
                    74:bd:47:7a:7e:f2:36:7f:76:49:fd:7c:6f:52:c6:
                    19:d9:7c:0b:00:93:16:c6:f8:d0:70:d6:7a:6d:ca:
                    63:b4:9c:84:2e:9f:e9:c8:da:64:b1:3f:b8:bb:15:
                    52:4e:3c:f2:bd:51:05:d6:81:25:ae:99:87:e6:56:
                    a7:c3:91:4b:eb:cf:27:18:2d:5f:08:fd:2d:b1:ab:
                    4c:ab:58:c1:36:6a:6a:28:a1:e9:2c:45:72:43:d3:
                    1d:d3:ec:7f:ab:2c:f2:fe:ba:71:b7:d2:91:a2:dc:
                    47:d2:18:6b:0e:d9:9b:4c:56:9d:3b:c7:94:f7:e7:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:93:E0:8F:C2:42:77:97:EB:D7:43:86:49:2F:83:8B:BA:58:13:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/85f13155-42f7-31a3-917f-c70710547a23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.crl

            X509v3 Authority Key Identifier:
                keyid:B7:57:15:BF:89:DA:5C:E0:31:74:EC:EF:F6:CB:59:B2:F8:B8:3A:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a22fdb27-e4fe-4d81-9bf4-e13b1daf7f51.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:40:18:e5:88:f8:a8:ac:90:b6:ce:d2:be:75:0f:39:da:0b:
         be:98:19:d9:c7:7c:78:83:8e:77:5c:8c:e1:c5:2d:5e:a8:69:
         14:fb:46:8f:10:14:ab:94:e0:d8:d1:1a:7d:1a:07:c5:76:1a:
         cb:c6:22:03:fd:35:ee:dd:bf:64:01:f4:99:e9:f3:ca:5d:75:
         89:9d:80:a0:3c:d1:cd:cd:b4:4e:0f:95:a1:23:d0:63:c8:df:
         6e:e8:12:5e:8e:d5:ff:8f:dc:c9:0c:04:23:d5:94:47:9f:a3:
         14:e3:ee:84:4f:dc:0c:a2:49:bf:f3:b5:21:52:77:36:cb:9d:
         a9:ba:df:5a:75:bf:f2:1e:57:ab:7e:2e:b2:20:a8:47:68:bc:
         e2:69:a3:88:eb:0b:73:4f:ec:2e:1c:45:2f:57:47:b4:17:6b:
         6e:ad:48:16:09:06:bb:56:18:05:72:07:3d:ea:70:bb:e4:35:
         c7:fd:96:cb:c4:1b:59:2a:2d:82:04:cb:c8:21:13:be:00:f4:
         f1:66:89:78:4a:8d:39:4b:af:cd:2e:eb:17:73:0a:2a:55:d5:
         74:de:8f:67:92:48:47:c4:62:9b:ce:1f:04:6d:96:08:22:4a:
         e6:f0:0b:56:ed:92:be:ec:13:30:98:c5:b1:37:8f:f0:ef:02:
         54:80:b4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:50:53 2026 by rpki-client