Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/573ad8c6-2882-33ac-86ca-8fda368a6c77.roa
File:                     573ad8c6-2882-33ac-86ca-8fda368a6c77.roa (raw, json)
Hash identifier:          qoZhSC+f2wWaMkc5J039itBsZS/+8Yxfc90QoAfDJJY=
Subject key identifier:   A4:7E:E4:6D:CE:5E:10:A6:1B:2A:8A:3A:68:0C:AD:B6:1C:3E:0D:47
Certificate issuer:       /CN=5e87876c-4225-44e7-b377-9a3bf9bdb315
Certificate serial:       010D0C9F4328584ECE9C6FAC4FAD0A0F6CDE8040
Authority key identifier: 50:6D:8A:DF:E7:77:92:83:B0:4C:78:90:23:EE:6D:45:29:44:3B:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/573ad8c6-2882-33ac-86ca-8fda368a6c77.roa
Signing time:             Wed 12 Aug 2026 01:00:11 +0000
ROA not before:           Wed 12 Aug 2026 01:00:11 +0000
ROA not after:            Tue 10 Nov 2026 02:00:11 +0000
asID:                     402090
IP address blocks:        23.147.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/5e87876c-4225-44e7-b377-9a3bf9bdb315.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/5e87876c-4225-44e7-b377-9a3bf9bdb315.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ce:9c:6f:ac:4f:ad:0a:0f:6c:de:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e87876c-4225-44e7-b377-9a3bf9bdb315
        Validity
            Not Before: Aug 12 01:00:11 2026 GMT
            Not After : Nov 10 02:00:11 2026 GMT
        Subject: CN=c8b7d017-c80e-4fe8-9ecc-ea6d7a6abb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8b:3a:32:f6:d2:30:92:d8:ed:6a:59:5b:cf:
                    94:fb:0e:49:48:ee:4f:64:b0:95:d0:5a:a2:42:5a:
                    34:3a:5d:05:21:d2:c9:cd:4c:a0:54:e4:1f:8f:0b:
                    44:7a:aa:9d:de:3a:a5:6f:e8:4b:4b:40:38:08:be:
                    a8:40:2e:a9:e3:2c:62:5b:74:a7:4b:3c:18:b2:25:
                    77:61:8e:fa:c6:c7:c5:fd:9e:32:80:68:93:e2:f4:
                    20:16:0b:ba:17:8f:9c:57:14:b2:a0:9c:77:14:ce:
                    5c:5c:67:3e:83:ce:39:af:01:6e:f4:7d:ac:7d:8d:
                    84:0f:0a:75:d6:86:71:6f:c2:ee:cd:d9:97:92:de:
                    1a:31:60:1e:ac:d9:87:98:2a:3b:21:29:7e:93:8d:
                    41:6d:a1:7b:da:d6:19:9e:82:1e:a1:26:2a:4c:24:
                    e6:95:32:d7:09:e2:25:3c:cd:49:1f:03:e5:32:9b:
                    08:0e:1e:25:7a:7f:7c:87:8f:59:86:a7:07:9c:d8:
                    34:ac:16:58:6d:61:d8:0a:82:96:87:d1:ac:11:a6:
                    8a:74:c4:d6:9c:49:26:bf:da:18:61:36:3a:72:50:
                    5f:d5:71:78:23:e4:a6:7f:07:44:4d:ba:2a:fc:dd:
                    61:8b:32:55:23:81:7b:57:5f:dc:de:54:61:35:62:
                    a5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:7E:E4:6D:CE:5E:10:A6:1B:2A:8A:3A:68:0C:AD:B6:1C:3E:0D:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/573ad8c6-2882-33ac-86ca-8fda368a6c77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315/5e87876c-4225-44e7-b377-9a3bf9bdb315.crl

            X509v3 Authority Key Identifier:
                keyid:50:6D:8A:DF:E7:77:92:83:B0:4C:78:90:23:EE:6D:45:29:44:3B:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e87876c-4225-44e7-b377-9a3bf9bdb315.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.147.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:b6:25:eb:cc:8b:22:7a:63:68:35:47:8b:08:21:45:fc:bc:
         94:78:20:7e:66:cc:8c:85:0b:32:50:e3:bc:09:88:b5:e7:08:
         07:e3:c6:16:d4:34:1e:ec:d0:96:d2:d5:97:e9:3d:b6:1e:00:
         e6:f8:e6:78:11:c4:10:74:dd:9e:1a:b5:4c:a6:22:85:ad:da:
         7c:cb:39:a5:99:ba:42:f0:5e:eb:c2:89:1c:14:84:0f:4d:d0:
         0f:ad:af:de:6f:82:16:7e:1c:90:f3:36:90:9b:78:21:0b:ec:
         0d:9b:51:d5:77:1f:0c:c4:a0:94:7b:a8:55:d9:c9:d7:e4:ba:
         c5:1c:20:b2:17:dc:2d:81:05:f8:67:bd:3e:9c:c1:e3:14:c8:
         67:ca:10:53:c7:f9:e5:10:fd:f2:2e:40:37:fe:dd:43:f2:62:
         32:1f:52:00:f6:bf:ae:5a:14:d8:89:35:d0:8b:50:e4:8c:6d:
         6a:92:2c:c6:0a:17:60:36:83:79:78:7d:49:e4:50:6d:22:a8:
         f9:fe:a2:19:23:6b:5a:c5:ae:a9:e6:9d:58:cf:b0:66:49:25:
         0a:09:93:bf:14:4b:12:07:11:2c:e6:99:6f:b0:d8:5a:d0:9c:
         a7:d0:f1:5e:4d:e1:9d:59:ab:24:73:ef:1d:34:8e:cd:2e:d9:
         cb:08:c0:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 12:58:13 2026 by rpki-client