Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa
File:                     47d7fcfd-95fd-3503-adb6-67e323a7831f.roa (raw, json)
Hash identifier:          /DBin3ibg7D+siBYuYI9yrlKGb0zVQ1THBZ4KrcW7Ew=
Subject key identifier:   4F:36:04:1D:C1:F7:C3:E1:2F:B8:3E:F4:18:DB:9C:50:45:EC:8E:CE
Certificate issuer:       /CN=fe90a536-ade0-4ce0-ac99-a1c784d18816
Certificate serial:       010D0C9F4328584EC7A1CD65AE4621644E05BF40
Authority key identifier: 0C:A7:BE:35:6E:DC:1B:CF:8B:72:4B:29:6B:8B:D8:95:BD:0A:05:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa
Signing time:             Sun 09 Aug 2026 13:00:12 +0000
ROA not before:           Sun 09 Aug 2026 13:00:12 +0000
ROA not after:            Sat 07 Nov 2026 14:00:12 +0000
asID:                     397554
IP address blocks:        23.134.144.0/24 maxlen: 24
                          2605:40c0::/28 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c7:a1:cd:65:ae:46:21:64:4e:05:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe90a536-ade0-4ce0-ac99-a1c784d18816
        Validity
            Not Before: Aug  9 13:00:12 2026 GMT
            Not After : Nov  7 14:00:12 2026 GMT
        Subject: CN=ef16258f-50e3-4e99-a30a-f8b9afeefc80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:07:e0:24:8c:e4:26:6e:ff:99:85:41:a5:0a:
                    28:1a:a5:ee:5d:2b:d8:a8:f0:cd:cb:44:74:96:2a:
                    ff:9e:96:d6:10:a0:18:8c:db:00:66:c3:42:78:be:
                    c6:04:19:de:9d:3e:26:07:aa:9b:c9:84:91:31:54:
                    05:6c:60:d4:92:2f:da:2e:be:58:7b:46:68:77:fd:
                    0e:bf:ea:e4:6d:04:95:ae:0e:f8:81:5a:97:37:c7:
                    4b:f4:aa:77:e3:32:93:11:ed:71:b3:44:fe:9e:38:
                    52:6a:33:7c:d9:0b:7c:97:19:ae:cd:3b:31:d0:9d:
                    d7:a8:4c:c0:7e:8a:e2:98:ba:37:64:e0:ae:54:54:
                    ba:1c:73:95:ff:c8:ed:69:ec:90:4a:53:e6:cb:d1:
                    c4:10:aa:13:c4:5d:fe:f3:ac:35:ea:eb:80:ce:f2:
                    f2:dd:45:c3:c7:ec:20:28:03:c6:31:6f:c2:cb:1d:
                    a8:50:c2:cd:50:cc:17:38:62:bd:e7:9a:04:8e:30:
                    63:42:81:4d:33:98:d8:88:e8:07:c8:28:65:d9:66:
                    cc:09:91:0f:19:7c:f4:d7:46:61:43:ad:c2:d4:ab:
                    c8:98:1c:ed:7e:9b:e5:ac:99:0d:df:30:fa:a9:c3:
                    b8:93:25:56:c1:77:d6:24:e9:84:8e:c2:3f:89:d9:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:36:04:1D:C1:F7:C3:E1:2F:B8:3E:F4:18:DB:9C:50:45:EC:8E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/47d7fcfd-95fd-3503-adb6-67e323a7831f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816/fe90a536-ade0-4ce0-ac99-a1c784d18816.crl

            X509v3 Authority Key Identifier:
                keyid:0C:A7:BE:35:6E:DC:1B:CF:8B:72:4B:29:6B:8B:D8:95:BD:0A:05:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe90a536-ade0-4ce0-ac99-a1c784d18816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.144.0/24
                IPv6:
                  2605:40c0::/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:67:4f:d9:d5:62:ad:9e:f5:8f:3a:b6:98:59:9d:49:0b:ff:
         0d:b4:9d:e0:3d:77:9b:38:70:00:cb:29:cb:e9:6f:db:77:34:
         a7:b8:43:b2:72:8e:37:58:ef:f2:f9:ce:6c:ad:43:41:55:6c:
         70:7b:b0:66:85:3e:df:14:47:93:12:0c:7d:ab:e8:11:7e:22:
         75:95:23:83:1c:35:3b:db:fd:b9:fe:01:59:81:7d:dd:35:15:
         72:a8:7d:09:ec:c7:2f:f5:eb:69:24:34:20:10:13:45:45:06:
         cf:cd:46:f2:b5:c6:10:6e:08:35:b5:b6:84:4d:f1:b2:e2:29:
         51:cf:9b:9b:4a:09:43:21:f3:71:ec:26:fe:c9:20:0b:88:3f:
         ec:14:4d:3f:94:b1:19:79:61:af:a4:6d:b7:58:bf:45:8b:3b:
         73:26:39:c1:d4:43:7a:e5:4b:83:83:f3:f1:a5:45:c0:6d:61:
         56:21:13:1c:16:96:00:d9:53:da:c9:d5:bc:55:d8:03:e7:6b:
         96:d2:ab:56:3b:31:0a:0a:98:9e:b0:94:93:57:10:1b:fd:ad:
         66:65:c1:c7:63:7c:5e:6d:fd:5c:49:ff:55:28:54:29:5d:59:
         07:b5:e5:5e:58:7a:85:0e:cd:a8:e1:06:c8:bc:27:4a:06:b5:
         51:a4:fb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:06:57 2026 by rpki-client