Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3659bae8-7902-3ca1-90a2-f75a4f2aab3d.roa
File:                     3659bae8-7902-3ca1-90a2-f75a4f2aab3d.roa (raw, json)
Hash identifier:          vUm2n9ZmqFPKIZMTm2bxBsnxBE8c20BaLcengJ91Qv8=
Subject key identifier:   F3:5A:CB:BE:67:8A:59:B9:54:F9:94:F8:9A:1A:FD:17:E6:11:05:08
Certificate issuer:       /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial:       010D0C9F4328584F6292BCD25FB1AF602FFF1910
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3659bae8-7902-3ca1-90a2-f75a4f2aab3d.roa
Signing time:             Sun 04 Oct 2026 01:00:13 +0000
ROA not before:           Sun 04 Oct 2026 01:00:13 +0000
ROA not after:            Sat 02 Jan 2027 02:00:13 +0000
asID:                     395954
IP address blocks:        23.106.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:92:bc:d2:5f:b1:af:60:2f:ff:19:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
        Validity
            Not Before: Oct  4 01:00:13 2026 GMT
            Not After : Jan  2 02:00:13 2027 GMT
        Subject: CN=d2d3a87c-2282-46a1-980c-7ba7c100f51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:53:7a:76:bc:99:86:0f:df:61:96:22:5a:
                    23:b6:59:cd:a0:e3:50:bb:6f:2a:45:6a:45:06:b9:
                    39:5a:eb:d2:83:ef:4c:76:94:82:7e:61:e2:58:ad:
                    e8:6d:58:04:65:fa:87:e6:23:51:8a:87:2e:79:59:
                    41:4f:e7:b2:3f:39:25:c1:d9:c3:af:8c:5a:60:f3:
                    b1:a2:b9:b0:39:f6:aa:03:00:81:17:7d:cd:d1:0e:
                    59:d6:4c:d1:c5:fe:14:8a:f9:94:97:79:ac:bc:f1:
                    97:08:de:8a:0f:14:f4:30:99:68:87:51:1c:06:90:
                    dd:33:74:aa:e0:57:d3:1f:d9:95:57:4d:21:65:0f:
                    44:61:60:13:5b:38:3c:cb:5e:70:c2:77:4a:24:b9:
                    c3:43:fe:60:3f:0b:92:1f:87:c6:4a:8e:55:b5:88:
                    d3:4d:55:38:ab:1a:31:0e:13:46:24:29:69:aa:02:
                    58:45:67:10:da:5b:5f:fa:de:f6:ab:07:a9:2e:14:
                    04:f8:a3:27:03:31:14:f8:a5:e5:17:b3:1b:4f:1e:
                    87:45:b1:b5:4a:e4:aa:2c:6b:3e:82:d1:e8:0e:a4:
                    9e:f1:6b:10:83:d8:52:ac:15:8b:a8:b9:a7:d2:16:
                    0d:62:d3:82:6a:79:b1:e9:b7:ff:5e:b2:2c:bd:ce:
                    c2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5A:CB:BE:67:8A:59:B9:54:F9:94:F8:9A:1A:FD:17:E6:11:05:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3659bae8-7902-3ca1-90a2-f75a4f2aab3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl

            X509v3 Authority Key Identifier:
                keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.106.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a2:e0:b9:59:97:f4:a6:cd:b1:80:7d:31:b1:58:01:23:48:
         ff:21:36:b5:66:65:e9:01:ef:4b:08:dd:b5:4c:20:19:ac:a9:
         6e:64:8d:88:28:4f:9f:7d:58:3c:94:be:b5:b0:0c:ef:d7:30:
         81:6d:86:00:a1:e6:a6:81:9c:d8:f6:63:fa:b4:ef:9b:1b:d7:
         b9:ca:83:7c:bc:97:97:71:2b:81:36:22:65:f4:f5:9d:be:47:
         a2:2c:a5:38:1a:22:73:d0:00:0d:92:dc:b2:35:4a:c7:67:f2:
         f1:75:c0:72:cc:b7:62:55:32:19:92:89:05:0f:88:e5:9f:0d:
         43:fb:5e:52:70:86:20:f3:57:04:04:b1:1d:82:c8:a8:7b:17:
         6a:0d:8c:a2:b2:c8:26:6a:38:88:a1:78:02:d3:7c:f8:0f:53:
         fa:3b:e2:c8:81:78:e4:b1:59:e0:47:82:27:ca:f6:01:f4:f3:
         d6:51:99:37:6d:f7:73:0b:18:cd:c8:80:ef:3b:ad:ad:c3:e2:
         a5:2a:0c:03:23:62:74:3f:2c:c0:c0:4a:c4:d0:9f:07:37:b9:
         7b:fc:44:62:12:4c:bd:7a:0e:59:72:d5:07:be:9a:0a:ae:d3:
         97:4b:9b:8e:b5:63:b0:ad:f4:12:db:37:94:db:83:bf:49:74:
         cf:40:7f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 15:09:53 2026 by rpki-client