Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa
File:                     8c96b8b5-6d96-394f-8062-cb55430e1548.roa (raw, json)
Hash identifier:          VVWX9fSzhmrCPaUhhIO3GAg8I2TcPfmv/rHhSzkuhlU=
Subject key identifier:   C2:20:F4:37:D1:85:BC:55:D4:4D:72:1F:61:02:62:2C:24:55:F6:7E
Certificate issuer:       /CN=265875fa-2cd8-4782-9b63-97850fa49dfa
Certificate serial:       010D0C9F4328584ED1672CB2269E978263DCF300
Authority key identifier: 2C:5D:06:09:CF:16:D0:66:81:D1:58:51:A3:F8:E8:5D:50:A9:9F:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa
Signing time:             Thu 13 Aug 2026 01:00:11 +0000
ROA not before:           Thu 13 Aug 2026 01:00:11 +0000
ROA not after:            Wed 11 Nov 2026 02:00:11 +0000
asID:                     402075
IP address blocks:        23.147.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d1:67:2c:b2:26:9e:97:82:63:dc:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=265875fa-2cd8-4782-9b63-97850fa49dfa
        Validity
            Not Before: Aug 13 01:00:11 2026 GMT
            Not After : Nov 11 02:00:11 2026 GMT
        Subject: CN=7e776eed-b78f-44b9-a410-568f0c45df12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:46:d8:62:e1:1f:ff:95:77:03:cb:19:f4:36:
                    a0:06:a8:43:e5:46:07:64:2f:23:f5:9f:81:b8:c7:
                    51:63:9a:c3:3d:de:7c:12:41:dc:53:12:7b:0a:ca:
                    36:b4:d9:3e:7a:a3:71:1d:56:3e:08:05:5e:b8:ef:
                    91:76:1c:35:11:bd:cc:f7:97:d3:e6:82:a9:2b:be:
                    ac:f2:f8:9b:8e:41:23:31:b8:db:c7:8a:6c:5f:af:
                    58:b0:69:c5:48:e8:4d:f4:c1:2e:14:34:f2:87:6a:
                    58:77:d1:70:d8:93:93:e6:9f:7f:db:3a:21:62:28:
                    ba:ab:7e:c8:55:4d:f8:69:d3:2c:90:52:18:99:62:
                    bd:58:b5:7f:de:78:24:b5:80:3f:23:cc:5b:0a:64:
                    74:af:db:24:b2:8c:13:02:bb:fa:22:39:bd:b4:f5:
                    fb:60:60:22:5a:4f:cd:31:cf:77:76:7a:57:c6:e9:
                    5b:eb:b7:a5:55:ae:e9:f2:13:c5:dc:b8:52:df:25:
                    f1:ff:b1:d1:cb:66:3e:32:25:71:22:db:31:8a:24:
                    b1:45:b9:45:45:39:8a:39:ad:b7:d8:a1:b5:d3:b9:
                    9e:38:c8:44:79:a3:63:d3:21:05:5e:7e:18:4c:fd:
                    72:4a:8f:d3:a8:c1:35:d4:2d:3d:ff:17:9a:5f:f3:
                    7c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:20:F4:37:D1:85:BC:55:D4:4D:72:1F:61:02:62:2C:24:55:F6:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/8c96b8b5-6d96-394f-8062-cb55430e1548.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa/265875fa-2cd8-4782-9b63-97850fa49dfa.crl

            X509v3 Authority Key Identifier:
                keyid:2C:5D:06:09:CF:16:D0:66:81:D1:58:51:A3:F8:E8:5D:50:A9:9F:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/265875fa-2cd8-4782-9b63-97850fa49dfa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:5d:3d:79:59:d6:e3:0a:8a:a0:a3:2d:1e:eb:68:8e:02:2a:
         0f:1c:bd:94:02:46:c3:75:85:06:7a:5f:51:5c:36:90:1f:e1:
         60:c8:b6:90:0f:af:a0:f6:95:1f:08:88:24:da:5e:69:30:c8:
         ba:46:32:52:51:60:f1:b7:a9:b4:1e:57:94:c5:97:9b:d1:7b:
         ba:f8:98:40:9b:15:92:a7:b6:6d:50:1b:67:e3:b3:03:1e:c7:
         5b:62:2e:69:d9:93:9a:bd:be:fa:21:09:75:2c:d7:bf:33:f8:
         a5:20:3c:01:c8:e6:31:b7:75:36:8e:24:bb:8c:1a:49:22:ca:
         fe:3d:95:35:81:9b:e7:57:b7:1e:8d:5b:80:ae:64:9b:44:bc:
         8f:7c:a3:36:c9:d2:1c:10:59:94:5d:ed:29:61:11:18:9c:69:
         a3:74:e4:19:d7:15:21:c9:6e:b7:36:37:ac:d2:4a:8d:89:e1:
         2a:3e:75:58:1d:45:54:21:6a:3b:6d:a9:d7:c1:c2:aa:0e:3a:
         6f:af:76:f5:f0:03:7f:fd:aa:07:f5:12:c5:62:92:64:5b:64:
         ef:79:dd:09:73:59:29:22:ce:90:e6:0a:c1:79:d9:88:e4:14:
         f7:6a:a9:fa:dc:e5:c1:93:c8:08:02:79:e6:58:02:bc:cf:cd:
         6f:da:49:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:52:38 2026 by rpki-client