Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6bde10da-0c24-32c4-9070-96451dcb9aa2.roa
File:                     6bde10da-0c24-32c4-9070-96451dcb9aa2.roa (raw, json)
Hash identifier:          GeFAV893ZdBvLrmMW+7b1F5v84UYrtXLPkYrlx2SIcs=
Subject key identifier:   66:F7:73:E1:AD:E8:AC:87:AE:48:18:EF:62:A0:5B:32:B9:DC:68:13
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584EAF19C2A91BEA501A7A088A00
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6bde10da-0c24-32c4-9070-96451dcb9aa2.roa
Signing time:             Fri 31 Jul 2026 18:06:53 +0000
ROA not before:           Fri 31 Jul 2026 18:06:53 +0000
ROA not after:            Thu 29 Oct 2026 18:06:53 +0000
asID:                     402265
IP address blocks:        23.90.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:af:19:c2:a9:1b:ea:50:1a:7a:08:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jul 31 18:06:53 2026 GMT
            Not After : Oct 29 18:06:53 2026 GMT
        Subject: CN=9c5f9995-8fc2-4b06-9cea-cd476530b150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5a:b8:b2:f7:4b:46:0c:23:5c:a6:a7:b1:a0:
                    29:28:72:fc:24:fc:38:73:04:ac:8e:a1:0b:b0:29:
                    33:10:0a:a8:e0:c7:10:7e:3e:7b:f2:a8:b9:0c:fd:
                    e9:9c:c2:22:86:d9:b1:11:35:53:5c:1e:4e:c8:45:
                    7c:a1:e8:ac:45:51:9a:f3:9e:91:0a:89:e9:14:a9:
                    63:65:90:ec:fc:57:08:83:78:57:08:e2:b0:0e:92:
                    f5:d0:81:53:02:8b:1e:03:9a:c8:5f:52:f6:9f:77:
                    a1:c7:a4:4a:be:98:f4:e1:d1:ea:b2:1c:b6:af:0e:
                    5d:55:a7:15:e4:91:f9:c2:2f:c1:a8:9f:79:3a:a6:
                    30:e1:73:36:b9:85:c2:b8:60:42:4f:b8:7a:30:a2:
                    10:a7:48:a6:8f:42:d4:2d:de:04:2a:ae:36:8f:dc:
                    39:8d:df:d9:e4:59:98:57:0e:7c:fe:35:01:08:f3:
                    83:cd:27:aa:42:d7:01:22:41:b1:14:89:3b:9a:fb:
                    73:3e:2c:7a:06:70:b9:55:c5:19:bb:40:fc:5a:ad:
                    30:9e:cf:66:b8:77:72:a6:c3:ee:94:32:7c:dc:bd:
                    a6:a7:bd:69:9c:47:c6:7b:37:42:d5:9d:a6:fa:6b:
                    b5:23:23:7f:10:40:c0:68:71:77:45:65:7d:3d:05:
                    b6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F7:73:E1:AD:E8:AC:87:AE:48:18:EF:62:A0:5B:32:B9:DC:68:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/6bde10da-0c24-32c4-9070-96451dcb9aa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:76:c9:8b:1d:09:b6:2e:36:01:d7:18:f6:87:99:ba:5a:33:
         97:f4:e8:84:90:79:4b:2d:f1:f0:3f:c0:07:68:f8:e5:25:18:
         67:6a:90:54:20:2d:e7:c1:d9:7c:43:62:53:78:ce:22:cc:3f:
         7b:a3:03:f6:48:ab:fc:cc:4f:e3:52:ba:24:61:99:3f:e5:07:
         63:69:ff:8c:34:dd:fe:db:90:50:bc:53:bc:63:bb:09:7b:f5:
         0e:13:75:1d:46:e4:cd:f9:7a:39:9c:dd:13:d7:73:d1:b0:d3:
         6d:bd:8b:54:a8:72:bc:a3:c6:8c:79:cf:78:1f:c0:e2:ca:36:
         08:4b:ee:a6:0a:42:62:60:53:e3:ae:d0:72:32:77:e8:f3:9d:
         f4:64:56:05:cf:21:f8:9a:34:c6:30:2a:95:d4:87:1f:be:0a:
         c5:f7:c4:41:d3:2f:5c:3f:5d:5e:57:fc:12:93:07:df:b3:2c:
         9e:bd:fb:e9:f2:bf:4f:00:6b:c9:a8:22:0c:d9:e6:d6:ba:8a:
         56:74:ee:22:02:67:f5:a9:7a:2d:a2:aa:97:2c:3e:4d:18:f8:
         e5:fa:7f:d7:2c:ce:d2:de:ca:3e:87:82:7d:4a:0b:0b:a5:74:
         bd:22:ef:17:16:31:23:29:ae:64:9e:eb:67:d3:a9:8e:f8:45:
         35:fa:6c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 05:59:48 2026 by rpki-client