Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa
File:                     2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa (raw, json)
Hash identifier:          UPJ9WJpYvSVM24qErZXvpCU7YOm0v0sFqAyItpqaxaA=
Subject key identifier:   F6:BD:5A:90:0A:37:4C:30:14:0D:36:81:BB:A2:31:83:EF:82:DA:3D
Certificate issuer:       /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial:       010D0C9F4328584EED5215406C5CF5612369B800
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa
Signing time:             Sun 23 Aug 2026 01:00:12 +0000
ROA not before:           Sun 23 Aug 2026 01:00:12 +0000
ROA not after:            Sat 21 Nov 2026 02:00:12 +0000
asID:                     138643
IP address blocks:        23.226.57.0/24 maxlen: 32
                          23.248.217.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ed:52:15:40:6c:5c:f5:61:23:69:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
        Validity
            Not Before: Aug 23 01:00:12 2026 GMT
            Not After : Nov 21 02:00:12 2026 GMT
        Subject: CN=1d8100e5-8d28-4c97-a751-69eb1406b8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9a:c1:65:b5:36:cf:57:1f:17:37:99:d1:ec:
                    41:89:6d:22:37:a8:b5:e1:71:f8:76:af:df:3b:cf:
                    d8:30:68:ae:7d:ea:5e:b0:82:4f:5f:d1:18:7a:ea:
                    67:cd:53:24:b0:85:85:55:24:d2:56:b3:40:6c:93:
                    18:7c:ed:02:9e:6d:2b:f0:39:cf:c8:af:f4:46:c3:
                    5c:71:66:c9:cc:19:30:d5:a2:33:54:a5:55:c9:0d:
                    a0:e3:14:ed:5a:e8:d5:7e:6d:b3:b3:ba:5b:e9:87:
                    1e:08:21:85:48:b6:a5:60:8c:88:02:7b:c9:96:f8:
                    d3:13:a8:c9:60:30:e8:88:8e:10:3c:9a:7d:7c:ff:
                    4e:4e:36:6f:85:12:60:50:5e:f1:5d:4b:26:1f:66:
                    4b:5f:e4:4b:04:84:d5:8d:08:68:1a:a5:b9:40:1f:
                    99:6e:43:42:44:e2:22:15:4e:9a:b4:d5:74:aa:43:
                    11:cd:fa:fb:aa:a1:32:9e:c6:19:20:76:9a:60:ff:
                    5a:95:e6:be:d1:ad:b8:01:91:31:c5:98:ca:ee:b8:
                    06:0b:4b:94:e2:2a:be:00:5e:c6:27:7b:1d:30:b8:
                    07:9a:12:08:9f:71:5f:87:27:e6:f5:21:89:5f:92:
                    fa:08:41:23:f9:4d:2e:80:94:c5:34:91:ce:7d:4b:
                    a6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BD:5A:90:0A:37:4C:30:14:0D:36:81:BB:A2:31:83:EF:82:DA:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/2f031cc2-d842-3ae3-9d0f-8f8582adcb31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl

            X509v3 Authority Key Identifier:
                keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.226.57.0/24
                  23.248.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:a5:50:ab:ac:72:0f:95:c4:37:0e:f7:70:a5:7d:53:47:1f:
         da:14:a4:52:1d:00:c1:04:c2:47:c5:30:d6:0b:65:7e:23:d1:
         ce:ea:62:aa:74:2d:08:8e:1e:0e:35:62:19:91:0b:6e:1e:ba:
         37:b5:47:c3:f5:9b:ab:3c:1e:86:05:10:94:9f:1f:ce:8d:a4:
         34:14:25:05:f6:7d:be:9e:61:9d:09:fb:62:71:d8:95:07:0b:
         f5:ac:4d:04:3a:64:9d:5c:87:8d:94:f8:4e:4d:2d:5f:e6:4f:
         46:57:f1:13:70:03:e5:d4:ce:a1:6b:96:98:13:23:45:31:16:
         3e:6a:46:20:fb:48:46:de:52:26:70:38:16:44:a4:7c:17:dd:
         58:1a:94:0f:07:e2:ea:95:86:3a:b0:16:78:db:3f:b5:fe:0c:
         b4:a2:23:26:5f:71:9b:21:fb:75:c6:13:e2:69:d7:39:77:41:
         a3:df:bc:b0:61:5e:ab:6d:26:20:3d:5e:ec:bd:2c:0d:7e:34:
         05:2e:d5:76:5d:b4:16:5a:03:89:45:0e:a2:c0:91:f8:84:b1:
         a6:45:0c:18:83:10:e5:72:1c:5c:8f:f1:ef:e8:ff:06:37:a3:
         4d:99:4f:52:f5:4d:1e:90:30:d9:aa:72:32:91:6a:1d:b6:8c:
         37:3c:cf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 15:38:30 2026 by rpki-client