Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b/08855e56-d976-3e8a-b006-02445b50f075.roa
File:                     08855e56-d976-3e8a-b006-02445b50f075.roa (raw, json)
Hash identifier:          JlDsCEODUe56AWc1jggRe27qYsVMtCZSIE+U2p/HMSc=
Subject key identifier:   9A:FA:98:B3:DD:84:E1:83:83:DB:75:A3:B3:5B:F0:10:BD:32:77:29
Certificate issuer:       /CN=93689a2f-96ac-4e15-bbd2-67f64dee5f6b
Certificate serial:       010D0C9F4328584EC4D70A4DAF26FB684ABE5180
Authority key identifier: 54:24:89:8B:B6:22:71:82:BA:B6:5C:7E:DE:2E:92:CC:08:5E:8F:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b/08855e56-d976-3e8a-b006-02445b50f075.roa
Signing time:             Sat 08 Aug 2026 13:00:11 +0000
ROA not before:           Sat 08 Aug 2026 13:00:11 +0000
ROA not after:            Fri 06 Nov 2026 14:00:11 +0000
asID:                     202736
IP address blocks:        23.156.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b/93689a2f-96ac-4e15-bbd2-67f64dee5f6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b/93689a2f-96ac-4e15-bbd2-67f64dee5f6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c4:d7:0a:4d:af:26:fb:68:4a:be:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93689a2f-96ac-4e15-bbd2-67f64dee5f6b
        Validity
            Not Before: Aug  8 13:00:11 2026 GMT
            Not After : Nov  6 14:00:11 2026 GMT
        Subject: CN=43d345df-08d3-4a92-874a-d9ff959fdbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a0:83:07:05:ac:60:da:97:ae:62:49:c0:e0:
                    e4:74:38:e5:e5:97:5e:5b:b6:1c:31:19:cb:e8:4d:
                    70:0b:7e:b4:a4:55:2a:8a:47:a3:d9:7b:fe:56:a0:
                    41:a6:63:36:48:d7:86:40:e8:62:c3:e4:d5:7a:b3:
                    50:c3:15:54:9c:42:8d:06:d9:8f:cd:42:30:51:7a:
                    75:06:7a:c1:30:d7:41:6a:26:ed:65:88:65:90:71:
                    b8:c6:7d:6c:b9:0b:47:70:10:ff:d3:4a:f3:62:ed:
                    aa:ab:43:27:38:54:ff:83:1b:ae:b5:03:53:ae:3b:
                    04:ee:4e:95:8b:94:4c:5e:2a:15:d2:6f:1e:ec:fd:
                    92:49:e1:ec:79:86:e5:b2:c4:fe:4c:09:c9:15:f6:
                    fc:11:8f:71:00:86:a6:9c:db:18:c7:43:d0:74:e5:
                    e3:24:08:c5:e4:2f:d4:06:46:19:1c:f3:43:6d:c9:
                    3a:e9:ad:91:ea:19:0d:61:56:51:6e:7f:6d:5b:54:
                    23:31:20:d6:d0:54:6d:a8:36:e8:01:e0:fb:c3:f0:
                    e7:49:cd:32:44:37:40:68:c8:8c:15:8e:17:23:5c:
                    b9:e5:af:8c:93:c2:a7:53:80:88:75:ac:16:38:e3:
                    86:9c:27:95:e2:d8:45:46:4e:9f:f1:ec:41:3f:8a:
                    b4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FA:98:B3:DD:84:E1:83:83:DB:75:A3:B3:5B:F0:10:BD:32:77:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b/08855e56-d976-3e8a-b006-02445b50f075.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b/93689a2f-96ac-4e15-bbd2-67f64dee5f6b.crl

            X509v3 Authority Key Identifier:
                keyid:54:24:89:8B:B6:22:71:82:BA:B6:5C:7E:DE:2E:92:CC:08:5E:8F:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/93689a2f-96ac-4e15-bbd2-67f64dee5f6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.156.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:06:f4:dc:29:ea:b9:4c:f9:29:0f:16:f2:85:86:5c:4a:d0:
         80:ee:59:ac:ca:54:47:3c:04:8b:4e:93:11:8a:83:12:d8:57:
         ce:97:1e:fb:e7:fd:24:f6:08:ac:29:7b:47:d1:3f:f3:6e:b5:
         0a:8f:a8:d1:d6:f4:33:4d:6e:51:20:9e:3f:12:70:63:63:2a:
         28:52:83:9f:e1:5f:0e:53:90:9c:48:85:22:3f:ee:a7:d7:e7:
         d6:19:3e:4b:2b:4a:c5:13:74:dc:71:0d:ee:b6:5a:92:90:b0:
         ae:66:48:e5:b8:8e:f8:04:03:92:43:2d:ac:6e:a8:0a:cd:99:
         b6:f5:54:35:b2:e4:fc:f1:b4:c4:e7:89:ae:53:53:21:86:fb:
         0c:b5:17:ea:49:db:42:b5:57:48:36:b9:25:e0:41:2a:c2:ae:
         e2:9e:18:e9:7e:62:e3:4c:79:61:ec:6f:1d:67:16:74:3f:d2:
         b2:4c:6c:de:d2:ea:b2:85:b8:0f:61:37:53:20:c7:1d:23:7d:
         85:b0:ba:f7:78:14:ba:7f:03:3c:a5:be:ee:3a:3c:22:50:13:
         f0:5c:fd:d1:c6:46:6e:ff:7b:4f:b1:44:a4:49:9d:ea:cf:22:
         aa:8b:5c:df:77:cc:c4:73:f5:d1:f7:21:c2:5d:3f:4b:a8:ce:
         59:b8:90:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:11:29 2026 by rpki-client