Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa
File:                     8c96b8b5-6d96-394f-8062-cb55430e1548.roa (raw, json)
Hash identifier:          psE385278lNZ0H06mPk2uaDV4h3A5hy2J8dTTLK7cWI=
Subject key identifier:   EE:16:A6:D5:C8:54:DE:18:00:CB:CB:46:4E:6E:2D:BC:EE:44:77:5D
Certificate issuer:       /CN=265875fa-2cd8-4782-9b63-97850fa49dfa
Certificate serial:       010D0C9F4328584F7352E1F60A80B6343FCAE150
Authority key identifier: 2C:5D:06:09:CF:16:D0:66:81:D1:58:51:A3:F8:E8:5D:50:A9:9F:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa
Signing time:             Sat 10 Oct 2026 01:00:13 +0000
ROA not before:           Sat 10 Oct 2026 01:00:13 +0000
ROA not after:            Fri 08 Jan 2027 02:00:13 +0000
asID:                     402075
IP address blocks:        23.147.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:73:52:e1:f6:0a:80:b6:34:3f:ca:e1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265875fa-2cd8-4782-9b63-97850fa49dfa
        Validity
            Not Before: Oct 10 01:00:13 2026 GMT
            Not After : Jan  8 02:00:13 2027 GMT
        Subject: CN=af5e09f7-3c42-4fb1-bc21-3eb65e425091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fe:36:e5:d7:7d:de:82:04:fc:d5:fa:b8:54:
                    d4:18:31:e7:32:25:59:79:b1:78:80:60:34:3b:8f:
                    71:0a:07:1b:31:d3:3c:89:7f:a8:28:a2:ba:02:99:
                    4f:01:0d:07:5f:70:29:81:e2:95:20:f5:7b:36:86:
                    d6:31:f5:4e:fb:8c:bf:24:e6:df:41:83:e5:78:e1:
                    0c:39:8d:80:7c:00:dd:05:d6:19:f0:ca:16:5a:b9:
                    86:2c:05:34:32:9a:9c:5c:d0:17:8a:9f:77:47:ef:
                    cb:e2:dd:0c:72:bd:cf:d1:29:69:0b:d7:0b:78:73:
                    0c:bf:80:d1:46:ff:82:7d:d8:fc:b3:a2:52:80:d5:
                    c9:41:a2:30:c9:f9:16:84:34:74:90:d2:73:46:95:
                    6b:d8:74:a5:0b:44:4b:ee:ba:9b:2b:dd:69:3e:9e:
                    3b:cc:53:8b:48:9f:fe:17:80:ff:da:51:5e:32:61:
                    15:46:49:37:c3:89:a1:fe:0a:a1:b9:b8:2b:92:e4:
                    6c:67:1e:93:5e:d9:f4:df:64:fc:df:e5:c9:98:54:
                    1f:09:b3:3d:62:75:54:61:fb:9a:31:aa:f6:de:5e:
                    1b:63:2c:29:fe:06:df:89:95:3a:a8:0d:ce:25:ca:
                    ab:6b:a5:e8:27:06:4b:23:df:58:b6:68:5a:e6:01:
                    a6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:16:A6:D5:C8:54:DE:18:00:CB:CB:46:4E:6E:2D:BC:EE:44:77:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.crl

            X509v3 Authority Key Identifier:
                keyid:2C:5D:06:09:CF:16:D0:66:81:D1:58:51:A3:F8:E8:5D:50:A9:9F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c5:45:9b:65:36:5a:de:7c:f4:fd:3f:2d:06:8a:9d:e0:25:
         d2:8f:44:19:45:39:00:5c:22:5b:6b:83:c0:d8:3d:4f:89:b5:
         19:9c:a4:6b:bd:e0:d4:38:f0:ee:d8:d1:20:0f:40:64:f8:19:
         e5:0e:c6:ae:cd:f0:f6:3d:b6:e3:81:1e:df:3a:4f:c8:87:cf:
         df:d9:29:8c:40:79:5a:c7:6f:f3:f1:1b:72:01:bc:72:76:2c:
         1a:15:e3:7b:88:42:be:74:82:ae:21:1d:80:b2:a7:66:fb:84:
         b7:0d:e8:60:b1:02:7a:1c:c9:79:5f:99:09:ab:1f:3f:41:86:
         b3:15:c7:8f:67:a2:73:d5:70:83:ed:e3:61:e4:d4:b4:b7:79:
         17:7e:21:0d:72:d0:bd:22:02:c5:7e:c9:a7:91:37:8c:cc:36:
         16:e3:5c:5c:b8:37:7f:d6:15:2a:40:bf:e4:6f:df:e7:fc:1c:
         a2:82:31:52:a8:84:b5:c5:1d:5e:c5:1c:cc:c3:50:f9:fd:9e:
         28:84:87:2c:cb:f6:e3:06:7e:05:c7:f7:9f:f8:bf:68:35:fe:
         e6:9d:b7:b1:58:2f:da:e9:cb:02:72:cc:85:7a:44:4c:20:4e:
         6a:2b:4e:73:c1:4e:4a:c6:45:aa:b6:0a:69:9c:65:b1:05:67:
         32:f2:28:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:22:30 2026 by rpki-client