Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c0d68ad-32f5-3218-a05b-687a0314d536.roa
File:                     0c0d68ad-32f5-3218-a05b-687a0314d536.roa (raw, json)
Hash identifier:          XS7OrQwOOE+EZhpQYuRZAMOGNL/sKnc4QUoh/b1a1Q0=
Subject key identifier:   C0:A3:FF:B6:C2:7A:23:E9:84:A0:80:7D:F6:5F:3E:F3:8F:93:E2:1B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F89A86B9F7A50B5FB38C67100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c0d68ad-32f5-3218-a05b-687a0314d536.roa
Signing time:             Sun 18 Oct 2026 01:00:13 +0000
ROA not before:           Sun 18 Oct 2026 01:00:13 +0000
ROA not after:            Sat 16 Jan 2027 02:00:13 +0000
asID:                     35994
IP address blocks:        23.57.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:89:a8:6b:9f:7a:50:b5:fb:38:c6:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Oct 18 01:00:13 2026 GMT
            Not After : Jan 16 02:00:13 2027 GMT
        Subject: CN=2da457f9-c8c2-4b3c-873d-a59727aa460f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:6e:fe:47:2e:c0:80:2c:30:95:e5:38:8f:a4:
                    80:a9:3f:7c:55:fc:72:06:3f:93:db:0d:0d:c5:17:
                    f3:0a:61:7d:c7:36:0a:2d:0b:53:e2:33:d1:12:1b:
                    44:54:8f:56:3f:ac:aa:f5:ff:5c:5f:fd:e5:97:9b:
                    7e:02:21:6b:35:76:13:7a:7e:8f:c5:87:70:d4:77:
                    52:8e:64:44:ee:bb:03:33:6c:2b:ee:5b:f2:28:05:
                    4e:28:c5:c0:58:79:d9:6b:a5:36:e7:e4:f8:3d:69:
                    35:53:11:c3:14:93:f0:09:b3:06:17:89:57:dc:36:
                    b4:f4:0d:61:ff:4d:00:a6:ef:43:1d:67:aa:04:87:
                    13:e4:88:37:cc:b8:89:8e:c8:90:df:8e:f6:63:75:
                    37:ad:fd:11:3f:0f:ca:44:f9:f3:10:16:a9:23:77:
                    28:77:62:0a:9d:e1:be:39:04:97:46:70:81:d4:39:
                    05:43:5e:25:1a:35:6a:9e:0d:1f:d6:f2:30:b0:df:
                    ca:0e:ba:8c:0a:d9:fd:12:02:4a:fd:59:ff:97:1c:
                    8e:1d:3c:f9:59:a4:31:ee:e6:3f:13:8d:3d:a7:60:
                    61:6a:d1:58:f6:0e:cb:72:1b:48:b1:bc:c9:10:e2:
                    5f:4b:61:90:90:2c:6d:74:d8:8c:c8:d1:44:bd:04:
                    7c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A3:FF:B6:C2:7A:23:E9:84:A0:80:7D:F6:5F:3E:F3:8F:93:E2:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0c0d68ad-32f5-3218-a05b-687a0314d536.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.57.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:68:b0:5a:00:57:8a:c8:20:ce:73:9a:a3:60:12:3d:9d:46:
         46:44:46:9b:cf:f0:55:37:b2:4c:89:81:eb:77:38:49:a3:fa:
         da:9b:a7:69:c9:b2:aa:7f:49:7f:61:a1:36:13:a2:bc:84:d0:
         66:b4:3a:9d:7c:8f:48:cf:2c:ee:36:51:f7:03:be:87:18:ab:
         21:fe:3b:fe:a4:48:f2:d5:b2:f0:e8:86:dd:59:07:a4:13:6d:
         f1:ab:18:47:bb:07:5e:25:8e:f9:d3:ea:24:17:97:c1:be:f2:
         72:6e:4e:7c:e1:d6:a6:91:6e:d6:60:78:ba:2b:2d:5a:e7:15:
         6d:38:67:e9:9a:cd:28:d5:89:e3:78:2d:83:63:73:3d:7d:83:
         c1:4e:a9:a1:52:8a:f7:6e:84:b9:a4:77:a0:e8:08:97:63:8c:
         d9:e6:2f:7e:a8:eb:f1:74:f2:52:6b:5f:dd:7b:33:e2:ab:22:
         32:cf:85:46:59:a3:51:59:06:22:4e:83:03:e6:85:27:9b:8b:
         34:55:80:c9:cf:ce:18:7d:66:ab:ca:43:68:f1:87:1f:de:62:
         3a:af:64:3f:71:2d:6a:0f:ed:b9:97:5b:5f:81:8a:47:45:8a:
         0e:d8:a4:9f:12:2e:84:18:e5:df:66:4e:64:f6:57:69:42:89:
         a0:c3:65:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 01:03:06 2026 by rpki-client