Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46ddef1f-ce8f-3608-b8bc-8cc4104f6f36.roa
File:                     46ddef1f-ce8f-3608-b8bc-8cc4104f6f36.roa (raw, json)
Hash identifier:          GNEL1i3O25KIgmqDXNrurzgZ4Pib+abs1vtnmzxKh+E=
Subject key identifier:   48:D8:34:8C:5E:2D:53:23:19:48:2B:16:D4:2B:FA:AC:2C:F4:04:65
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F4F081C51462CD63F0CEA03C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46ddef1f-ce8f-3608-b8bc-8cc4104f6f36.roa
Signing time:             Sun 27 Sep 2026 01:00:12 +0000
ROA not before:           Sun 27 Sep 2026 01:00:12 +0000
ROA not after:            Sat 26 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.218.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4f:08:1c:51:46:2c:d6:3f:0c:ea:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 27 01:00:12 2026 GMT
            Not After : Dec 26 02:00:12 2026 GMT
        Subject: CN=05523c19-9b7e-47c2-8939-26a810015a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:49:b8:3f:bd:72:9f:62:5d:01:4a:ed:1d:
                    db:25:76:d8:ce:52:dc:e9:39:4a:e0:3e:a3:3d:d6:
                    0a:47:69:d2:4c:3a:a3:68:96:11:da:f9:34:72:72:
                    fb:0e:de:8f:16:88:62:13:eb:60:48:a7:90:9d:41:
                    55:d3:57:d2:8a:8a:52:d0:8e:e0:90:c4:37:8c:7f:
                    cf:4c:df:f2:83:45:9d:f8:78:74:e6:f4:0e:4c:f3:
                    26:62:1f:ea:dc:1d:60:9a:ef:cd:3f:02:6a:65:a2:
                    c8:b5:a1:2d:63:40:08:50:30:b9:6a:60:3b:06:86:
                    66:40:5c:66:e2:91:ad:5a:ad:fa:ec:f3:c5:33:7c:
                    42:a5:c4:f1:cf:44:de:f7:b6:b6:e6:9b:93:77:9f:
                    67:1b:57:6b:ec:f7:28:60:12:65:21:84:6e:49:fc:
                    dc:46:c0:5a:20:a2:de:ee:15:ad:64:53:d8:db:43:
                    99:3b:64:23:c4:33:d6:10:2c:27:e7:e0:da:fd:e8:
                    a2:86:46:cf:c5:4f:70:49:cd:37:95:f7:e6:90:1a:
                    18:ed:66:08:69:6d:df:49:d4:44:ad:73:d4:9b:ab:
                    d3:e6:7d:4a:44:e8:25:96:a8:e6:18:f4:64:9f:0d:
                    42:eb:e2:f7:ac:e0:04:72:07:87:cc:7e:61:68:88:
                    db:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D8:34:8C:5E:2D:53:23:19:48:2B:16:D4:2B:FA:AC:2C:F4:04:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/46ddef1f-ce8f-3608-b8bc-8cc4104f6f36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.218.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:e1:02:54:29:ad:28:cf:c9:d3:f4:ba:3d:46:e8:08:10:42:
         bf:c7:f1:a0:32:c4:7a:fc:4c:b8:f1:f4:89:16:5f:2e:e3:c6:
         82:2c:7d:58:be:02:f3:70:d9:e0:26:6e:45:bf:18:99:88:7e:
         eb:11:0e:22:f0:f0:33:05:72:e8:07:66:48:26:a5:ca:07:ff:
         ec:97:a3:fa:4e:03:af:4f:4d:8a:8c:29:a2:33:ab:79:8f:00:
         d1:77:d2:7b:2f:7a:3d:e8:f5:70:be:49:dc:67:73:5b:d6:02:
         3b:ce:3a:f6:74:c6:a0:a0:e6:ec:a5:c7:a9:f2:aa:ca:33:f5:
         3d:46:f5:4f:bf:a8:bf:39:4a:80:3e:af:e9:9d:32:56:22:12:
         ee:b6:f2:2c:ed:35:55:4f:e5:da:02:19:bc:4c:71:68:47:c4:
         50:4a:aa:92:fb:fd:ee:23:93:c9:d1:cf:84:82:ba:f8:b3:42:
         a6:39:5c:66:f6:ca:2b:a9:9e:b9:0b:17:6a:77:14:73:15:6e:
         f6:50:1e:78:9a:43:30:76:d4:76:8b:13:6d:fd:6b:81:15:64:
         b7:e2:50:6d:32:24:ea:73:e7:99:25:2c:51:cb:fe:1e:21:72:
         40:ff:c0:cd:30:b0:dc:1b:c0:35:6d:5d:4e:17:9e:ab:2e:47:
         94:0b:9d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:44:49 2026 by rpki-client