Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/0e0fb7fd-33cc-3bd5-8e4c-1083995e1c11.roa
File:                     0e0fb7fd-33cc-3bd5-8e4c-1083995e1c11.roa (raw, json)
Hash identifier:          1Ug7LynTFQLIAwgOlMmOul8x3yE1G/O1WXXfv0+p80c=
Subject key identifier:   56:00:3F:B1:DC:EB:1C:DE:22:C5:A2:7A:49:1E:FD:F9:6A:57:BF:79
Certificate issuer:       /CN=22ffee48-ebff-42ef-a411-b2fd73c7ffcf
Certificate serial:       010D0C9F4328584EE921F150D8BE93F7CD007230
Authority key identifier: A2:D6:37:34:C5:BD:16:2B:C5:17:D1:AA:A4:DF:3B:66:C7:FA:43:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/0e0fb7fd-33cc-3bd5-8e4c-1083995e1c11.roa
Signing time:             Fri 21 Aug 2026 13:00:11 +0000
ROA not before:           Fri 21 Aug 2026 13:00:11 +0000
ROA not after:            Thu 19 Nov 2026 14:00:11 +0000
asID:                     2914
IP address blocks:        23.134.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e9:21:f1:50:d8:be:93:f7:cd:00:72:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22ffee48-ebff-42ef-a411-b2fd73c7ffcf
        Validity
            Not Before: Aug 21 13:00:11 2026 GMT
            Not After : Nov 19 14:00:11 2026 GMT
        Subject: CN=560426d1-defb-42a7-ad5e-0c2d53289890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:5c:c9:ef:0d:8b:1b:fc:13:fc:c8:37:c1:1b:
                    c1:5b:80:d8:99:7f:0e:b6:3f:1c:52:fa:ad:c8:e3:
                    08:6f:2a:3e:28:35:0e:e0:c9:e7:b0:c1:9d:2b:f1:
                    ad:59:86:73:a8:92:29:54:1e:f6:1e:e5:27:08:5e:
                    bf:dd:ac:dd:6a:3c:d7:ad:85:51:02:85:92:42:70:
                    84:a6:c4:93:8c:2c:73:15:39:3e:ae:c6:6f:00:3d:
                    d1:ba:80:f9:39:a6:81:c8:c0:b3:d9:96:77:26:94:
                    2d:30:e4:5e:ef:d4:46:90:64:c5:17:da:69:0b:be:
                    b6:50:2d:27:b5:da:b5:54:a3:bd:af:51:90:cb:fa:
                    e7:05:e8:3e:9a:0f:0c:48:bf:b9:a0:8a:07:1c:1a:
                    e6:d9:53:f5:b5:f1:bc:31:65:6a:f3:a9:5e:86:c3:
                    a9:47:5f:16:9d:e2:34:79:3f:46:51:d8:dc:0a:28:
                    e8:40:06:cf:42:0d:05:f5:e7:2a:3e:3b:42:72:c9:
                    97:a4:5f:f7:7d:1d:6d:0d:87:bd:04:e6:24:b3:ad:
                    9d:60:11:bb:26:19:7c:4e:7b:c4:f8:a3:2f:e3:0d:
                    d5:23:d4:a5:93:c6:fb:11:04:d2:6e:63:88:69:88:
                    a5:59:5b:2a:97:b6:f2:73:fe:6d:54:f3:c5:2e:aa:
                    cb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:00:3F:B1:DC:EB:1C:DE:22:C5:A2:7A:49:1E:FD:F9:6A:57:BF:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/0e0fb7fd-33cc-3bd5-8e4c-1083995e1c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.crl

            X509v3 Authority Key Identifier:
                keyid:A2:D6:37:34:C5:BD:16:2B:C5:17:D1:AA:A4:DF:3B:66:C7:FA:43:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22ffee48-ebff-42ef-a411-b2fd73c7ffcf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:69:6a:c5:03:04:9b:dd:07:72:17:a2:ef:35:9e:1e:30:39:
         e6:4f:ca:92:d3:4d:de:cc:ce:58:ad:e2:47:ac:98:3c:44:37:
         c1:31:c3:42:ea:15:1d:6d:49:ca:13:05:a2:e7:7b:b0:99:9a:
         6e:27:99:8b:f6:39:1c:72:c5:8f:38:ec:93:6f:25:b8:59:16:
         8c:94:72:05:34:93:21:af:66:d2:13:8b:e4:c7:90:b4:1f:92:
         6d:33:bb:ce:d0:e9:2d:b9:29:7c:c3:08:b7:ad:63:dd:18:8a:
         65:b4:47:13:0d:fb:66:0c:32:c5:32:10:80:e8:27:f3:aa:60:
         8d:af:ad:f9:22:82:71:69:5e:d4:3e:06:80:c3:d9:39:be:33:
         a6:c1:fa:2e:3f:de:c7:11:eb:39:37:d0:d9:4c:bb:b3:7c:f2:
         e9:de:e4:f0:72:2f:4a:da:c2:3b:9c:20:b5:a3:ea:b0:35:b2:
         b5:dc:d9:8d:4e:25:c6:d6:36:f1:3a:7b:11:08:d5:ff:3b:90:
         7c:99:40:02:ba:0d:ba:3e:71:9f:9f:53:f3:04:9c:10:93:0a:
         cf:1b:8f:fe:f5:c2:b5:24:cc:45:f8:4f:4b:65:dd:8e:f3:78:
         2d:94:f4:be:b8:ee:98:f7:dc:cd:a4:ff:06:25:69:77:36:9f:
         4f:45:cf:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:03:59 2026 by rpki-client