Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa
File:                     7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa (raw, json)
Hash identifier:          cUUrY+TA7eaqa9ZnSMjVOmBiA09tbn64hknpRTIeMq4=
Subject key identifier:   EB:F6:40:E6:1F:CF:B4:35:96:80:6E:66:E0:BF:23:5C:92:A7:9A:D1
Certificate issuer:       /CN=bf246bfa-4298-4264-af85-3fb2845207f8
Certificate serial:       010D0C9F4328584F8F3DC992041A826AFADB0700
Authority key identifier: 0C:B2:02:68:95:CB:E4:C6:84:98:68:D4:B4:1A:BB:BD:65:6D:BF:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa
Signing time:             Tue 20 Oct 2026 01:00:12 +0000
ROA not before:           Tue 20 Oct 2026 01:00:12 +0000
ROA not after:            Mon 18 Jan 2027 02:00:12 +0000
asID:                     395886
IP address blocks:        23.135.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:8f:3d:c9:92:04:1a:82:6a:fa:db:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf246bfa-4298-4264-af85-3fb2845207f8
        Validity
            Not Before: Oct 20 01:00:12 2026 GMT
            Not After : Jan 18 02:00:12 2027 GMT
        Subject: CN=b7f425be-021f-405b-b460-16d26a449116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6b:df:7f:c6:33:a1:5e:b7:b1:32:e4:f9:80:
                    77:ea:2f:0a:a4:2a:49:16:3d:cc:37:7d:84:4b:71:
                    2d:61:47:a9:b4:04:b0:b5:0b:b7:bb:bc:38:f8:80:
                    8e:9a:f2:ed:94:4a:95:87:73:5a:c6:50:0f:55:3b:
                    e4:a2:2e:80:45:b9:4a:69:ae:4d:3c:ed:4b:41:43:
                    a6:cc:8b:ad:2d:6b:e3:82:7a:5e:9a:e4:f4:b6:bd:
                    b3:19:dd:77:c1:af:c8:15:ae:84:70:63:f6:00:11:
                    85:af:ad:35:a5:fb:39:fb:4b:e8:4f:cf:04:a8:5d:
                    65:8f:bd:28:c2:30:14:e2:a3:f0:8b:59:4a:12:44:
                    5b:35:4e:18:80:54:15:27:cc:02:cc:7c:bc:d5:6b:
                    8f:19:c8:5e:f6:da:66:53:d4:20:e0:c3:41:94:e9:
                    a5:46:1e:36:c1:ff:9b:5d:a0:73:92:8b:c2:da:8b:
                    57:00:7d:fe:83:6b:7c:c2:dd:d2:e0:2f:79:42:4e:
                    1a:bd:25:06:00:fe:ad:fb:24:95:f6:1d:4a:d2:90:
                    7a:f5:8f:5d:4b:de:fb:21:61:b3:d0:fd:4e:a7:f7:
                    75:96:5f:49:b9:ce:a0:b8:8d:5e:d7:1e:61:ff:f3:
                    e5:30:01:b1:75:82:a3:ac:30:ef:50:c5:7c:d0:81:
                    ff:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F6:40:E6:1F:CF:B4:35:96:80:6E:66:E0:BF:23:5C:92:A7:9A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/7f168c5b-c14e-3b1e-918a-0069b8ca7e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8/bf246bfa-4298-4264-af85-3fb2845207f8.crl

            X509v3 Authority Key Identifier:
                keyid:0C:B2:02:68:95:CB:E4:C6:84:98:68:D4:B4:1A:BB:BD:65:6D:BF:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/bf246bfa-4298-4264-af85-3fb2845207f8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:64:55:f0:1d:d6:1a:e7:22:e4:c7:df:af:67:ce:0d:7c:
         e1:5d:59:2b:d6:0c:4d:53:be:b5:01:3c:c0:5d:8c:fb:59:30:
         08:19:51:c6:b6:25:5c:b6:61:b6:b0:cd:47:f5:c2:6d:a3:d7:
         d9:c2:60:71:92:28:15:09:fe:39:6d:a3:55:a8:71:4e:51:4b:
         bf:08:fc:73:2d:0f:2c:b4:8c:b4:9f:d4:4c:6b:5c:ae:19:57:
         e9:54:cf:71:17:31:2c:72:20:8b:bc:ef:cb:ac:ef:c7:b1:e4:
         21:5b:50:01:28:0f:03:da:ee:d6:44:e8:6e:1a:38:08:fc:fa:
         1c:8a:2c:f8:47:e4:bb:76:ef:a0:00:5f:a2:21:31:16:41:02:
         e7:38:35:0e:d1:e2:8f:de:4c:8b:99:ac:d8:e4:36:09:76:b7:
         81:e6:37:d9:07:9b:d1:07:ab:95:b5:3a:bd:a3:b8:39:bb:7c:
         79:f3:00:dd:f8:f9:6a:28:de:76:1d:fb:95:16:1a:a0:97:3e:
         2d:e4:91:db:ca:c9:4c:53:01:46:86:2f:d1:52:d0:22:da:62:
         32:1c:cc:73:8d:78:57:0e:4c:4b:73:04:a9:e6:25:14:e4:0b:
         60:1d:d4:0b:a6:05:b9:64:26:ef:d2:9a:cf:2a:bf:56:32:81:
         88:86:09:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:48 2026 by rpki-client