Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/22d7252a-5ab7-340a-9f6a-d3f5afca5686.roa
File:                     22d7252a-5ab7-340a-9f6a-d3f5afca5686.roa (raw, json)
Hash identifier:          +3g5jC33WiMJgSsEdNAJ7dGUO02lnTZQwQgPJaresNQ=
Subject key identifier:   9D:96:D9:A8:70:E5:77:7A:2F:94:93:1D:F8:76:8A:98:1B:B6:57:68
Certificate issuer:       /CN=f1151c8e-10a0-40dc-b592-f275bf602484
Certificate serial:       010D0C9F4328584EE7BCB1A5606D2A894D9EE8C0
Authority key identifier: FB:53:5E:25:F6:CC:E6:4D:EC:80:7A:BF:E0:77:BA:3D:C6:E0:45:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/22d7252a-5ab7-340a-9f6a-d3f5afca5686.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     2914
IP address blocks:        23.135.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/f1151c8e-10a0-40dc-b592-f275bf602484.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/f1151c8e-10a0-40dc-b592-f275bf602484.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:b1:a5:60:6d:2a:89:4d:9e:e8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1151c8e-10a0-40dc-b592-f275bf602484
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=9fb4691a-ac54-4515-bd26-226f1d19d6d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:51:b9:2e:f1:ea:e4:6b:19:e5:24:9f:58:b7:
                    0d:09:ff:a6:d7:6b:f8:57:21:5b:b4:d5:23:93:e9:
                    96:5e:d2:c7:b3:13:12:86:55:48:5d:d7:62:4d:a5:
                    2a:9b:12:1b:83:03:0c:50:9c:d1:ee:ad:84:51:ab:
                    59:a5:69:5b:35:3b:cb:ab:70:35:43:9d:ac:92:3b:
                    20:8a:73:69:bc:8d:8d:1a:e6:38:83:74:a4:f1:22:
                    d2:41:65:81:d0:0c:1c:46:9b:84:81:81:ff:76:77:
                    c8:c4:2f:0b:a1:39:bd:d3:72:f1:0f:75:16:c0:00:
                    46:9c:f7:36:a2:76:ef:d6:cb:e7:fc:41:54:92:2a:
                    f6:05:26:39:84:d2:b2:34:96:56:d3:ee:7f:f6:12:
                    31:1e:49:28:da:cb:e7:a8:62:28:7f:dd:3a:68:16:
                    7a:50:ae:67:f9:8b:75:bd:01:e9:7d:3a:9d:0a:f5:
                    d6:73:fd:59:9f:5b:c6:b6:c8:fe:46:f2:72:4f:cc:
                    54:95:66:aa:61:12:90:8c:e9:00:4c:b6:37:6f:5c:
                    16:99:25:1d:ed:d7:68:3c:4c:c9:bd:42:9b:e8:33:
                    6b:77:00:72:25:5a:bf:e3:9a:ab:e9:1d:13:96:11:
                    a4:c1:24:6e:29:aa:d2:9f:f2:a6:72:db:ad:30:22:
                    8c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:96:D9:A8:70:E5:77:7A:2F:94:93:1D:F8:76:8A:98:1B:B6:57:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/22d7252a-5ab7-340a-9f6a-d3f5afca5686.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484/f1151c8e-10a0-40dc-b592-f275bf602484.crl

            X509v3 Authority Key Identifier:
                keyid:FB:53:5E:25:F6:CC:E6:4D:EC:80:7A:BF:E0:77:BA:3D:C6:E0:45:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f1151c8e-10a0-40dc-b592-f275bf602484.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.135.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:63:92:1a:b6:71:8e:30:4e:6f:cc:8a:ec:f9:f8:c3:f1:b6:
         fc:5d:01:13:eb:96:fb:d6:8b:6e:8a:8a:cc:a5:99:fa:8e:ee:
         79:41:de:84:d6:55:26:88:d1:3d:e3:c3:bd:77:39:7b:75:c0:
         67:e8:64:77:6b:ea:42:50:14:64:42:32:cf:73:ea:0b:f9:ac:
         52:08:95:4a:be:b6:3b:7a:7a:f1:0f:45:38:01:a0:c9:b9:1c:
         7f:2c:fb:4f:6a:64:ff:85:6b:22:58:80:18:ef:94:d0:d4:d2:
         13:f6:0c:39:ba:43:c6:bd:a1:ef:59:e3:c0:ef:af:f2:4c:dd:
         57:95:45:d9:e9:c3:f1:ce:02:e8:4d:7d:b0:15:4a:cd:af:63:
         3d:77:c6:d6:34:9b:75:a9:79:41:5e:5c:ed:04:76:a4:87:2a:
         32:f2:23:5f:13:14:6d:56:56:61:ee:6d:e1:d4:a2:12:a4:f0:
         f1:42:8a:bb:a9:1c:42:cc:95:dc:08:fa:b7:b3:f6:26:42:50:
         93:47:46:ff:05:e5:f9:8d:4c:59:3e:4a:05:dc:4d:14:46:1f:
         49:28:4c:c0:04:3d:03:49:b6:a2:4d:24:87:89:f1:60:48:f2:
         12:36:f9:58:26:1f:c1:fc:8b:7c:79:61:01:41:a3:90:c5:26:
         26:0c:96:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 00:05:07 2026 by rpki-client