Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570/b491a863-9fe0-36e0-8762-5823b3ba9f21.roa
File:                     b491a863-9fe0-36e0-8762-5823b3ba9f21.roa (raw, json)
Hash identifier:          OBF/anEpi6gP0ccsfzfTAUC7nbst+uBXmmhJPc73gqg=
Subject key identifier:   81:3C:30:22:3D:94:6B:F4:01:BB:12:2A:D1:F5:FC:CD:5D:07:28:89
Certificate issuer:       /CN=594dc3d7-d496-4b12-b848-f53f33a1c570
Certificate serial:       010D0C9F4328584EE96294B6E28D77717A8A6500
Authority key identifier: 2B:DF:62:2F:84:71:8B:E5:79:FD:28:F4:FB:6B:37:4B:B1:26:08:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570/b491a863-9fe0-36e0-8762-5823b3ba9f21.roa
Signing time:             Fri 21 Aug 2026 15:10:29 +0000
ROA not before:           Fri 21 Aug 2026 15:10:29 +0000
ROA not after:            Thu 19 Nov 2026 16:10:29 +0000
asID:                     399905
IP address blocks:        23.161.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570/594dc3d7-d496-4b12-b848-f53f33a1c570.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570/594dc3d7-d496-4b12-b848-f53f33a1c570.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:62:94:b6:e2:8d:77:71:7a:8a:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594dc3d7-d496-4b12-b848-f53f33a1c570
        Validity
            Not Before: Aug 21 15:10:29 2026 GMT
            Not After : Nov 19 16:10:29 2026 GMT
        Subject: CN=7a19d966-79cb-4c6b-8603-cea68a6bc3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:bd:6d:6a:07:6f:aa:3b:8f:50:d9:56:60:
                    cd:8a:a5:1d:1e:24:6b:be:85:4b:8c:cf:60:78:b3:
                    8b:15:44:e3:36:7f:d9:89:22:ff:d9:1a:09:4f:31:
                    40:45:47:d3:7a:05:3b:0e:4d:79:c6:44:81:ba:f8:
                    d0:a7:67:56:a1:87:d2:15:80:5b:5d:3d:09:f8:14:
                    a6:2c:2c:a4:5b:f8:56:ce:78:6b:84:c5:be:13:da:
                    e6:e8:6e:a0:96:0e:8d:9d:74:b1:c2:64:2e:dc:5d:
                    35:91:54:70:05:34:a1:9f:86:39:05:92:4e:bc:24:
                    90:8c:7e:2f:41:31:24:2d:b3:98:45:7a:1f:14:1e:
                    0f:b5:f5:dd:f2:52:f6:09:92:02:99:f1:f5:45:ba:
                    e2:d7:28:01:06:6c:76:49:5e:46:f4:39:ab:38:af:
                    b4:bb:f5:a6:bc:39:4f:a2:ae:88:21:ae:fe:fb:0f:
                    14:a8:c2:6a:d9:af:62:c4:e8:99:49:18:43:ef:0e:
                    2b:94:0d:62:f0:61:39:3c:cf:88:a1:78:8b:7b:a8:
                    67:c9:79:ef:a3:a3:34:62:95:c7:a5:30:f5:55:77:
                    52:ba:b3:ce:96:88:0d:c9:c4:f3:2e:87:6e:2a:13:
                    7f:bd:41:26:7d:11:f6:ec:1c:c6:a6:e9:df:76:2a:
                    e1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3C:30:22:3D:94:6B:F4:01:BB:12:2A:D1:F5:FC:CD:5D:07:28:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570/b491a863-9fe0-36e0-8762-5823b3ba9f21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570/594dc3d7-d496-4b12-b848-f53f33a1c570.crl

            X509v3 Authority Key Identifier:
                keyid:2B:DF:62:2F:84:71:8B:E5:79:FD:28:F4:FB:6B:37:4B:B1:26:08:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.161.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ba:22:2b:5f:66:64:06:9b:64:21:0d:94:85:5c:2c:12:84:
         0d:16:d6:85:d6:ea:06:47:3f:d1:71:91:a9:8d:a7:6f:74:99:
         58:2d:8b:6f:e9:91:78:6b:cb:3f:b6:e0:89:e1:4e:54:a3:de:
         43:53:42:0f:08:0a:95:33:92:b1:71:9a:6c:f7:62:4d:41:9c:
         9a:79:5a:93:68:0c:3c:20:42:dc:37:ba:27:9e:da:60:d3:bb:
         e0:e5:17:12:b6:0e:b9:0f:43:1f:91:12:66:d3:bf:d7:37:b4:
         8b:e2:fe:0d:12:33:6f:58:e9:88:e6:cd:05:97:ea:0d:13:8f:
         b3:81:00:ab:e6:3b:24:c1:0e:4d:7a:b4:49:e1:7e:2c:72:1b:
         c1:5a:5f:f6:b3:77:d9:2d:bc:cf:64:a2:2c:4b:e8:07:63:23:
         04:ac:f9:5a:82:4b:60:20:e3:40:aa:16:2b:0e:a1:54:31:5f:
         3a:1e:bb:f9:c2:28:98:42:c6:7f:af:4d:ce:d2:3c:9b:a3:9f:
         cd:b7:83:6a:d6:77:70:7f:04:bd:0e:1a:97:db:7d:94:78:85:
         e3:48:86:c2:60:f1:c9:4f:2d:3e:9a:95:ce:e3:58:a1:0e:06:
         60:d3:2f:21:df:17:e3:be:aa:90:80:26:6a:a0:82:0a:e2:0f:
         63:d2:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:53:30 2026 by rpki-client