Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/bcfcfbba-e223-3e86-b198-67b0c119a52a.roa
File:                     bcfcfbba-e223-3e86-b198-67b0c119a52a.roa (raw, json)
Hash identifier:          mfjyk5SdtHjsnWuHMRSnGTOfUtiHXP2UZXgTTUx1x/s=
Subject key identifier:   D1:B4:F2:99:DC:13:9F:1E:11:C4:01:D8:39:CC:2A:C5:DA:AE:16:33
Certificate issuer:       /CN=abe8e36b-7a45-4f87-b6d6-55a4a1dfa118
Certificate serial:       010D0C9F4328584EC20C7C9182ED5431AB440480
Authority key identifier: 41:6C:26:94:21:8B:04:FF:A0:EC:13:AA:D4:CD:6D:BB:C3:07:4F:DA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/bcfcfbba-e223-3e86-b198-67b0c119a52a.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     36352
IP address blocks:        23.92.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:7c:91:82:ed:54:31:ab:44:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abe8e36b-7a45-4f87-b6d6-55a4a1dfa118
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=ac9d803b-3645-4eae-8444-faf82d0fc0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:24:65:ea:df:0b:00:d9:6b:ab:ed:29:7c:27:
                    05:d5:bf:e1:b9:cc:93:25:c8:c1:f5:ea:b0:fa:1a:
                    1a:4e:46:23:45:2d:a6:d1:84:79:24:b5:c3:4e:0e:
                    8b:d2:0d:9b:fb:62:0c:97:99:aa:72:55:69:7c:0b:
                    b8:f7:73:d8:a1:44:75:9b:dc:8b:4b:63:74:e8:ca:
                    6b:c2:a8:60:3f:1c:55:ca:a0:ed:4f:a3:04:12:13:
                    32:c4:8a:80:74:ad:31:8a:f7:97:41:4d:25:86:33:
                    bc:5d:cc:f8:8a:d7:a6:56:dc:75:30:fc:8c:9d:3a:
                    5e:56:f4:2e:57:65:34:a3:d0:1a:5c:bb:17:9f:0b:
                    b5:a4:17:c4:8a:ab:32:93:a5:ab:a9:05:02:c2:d4:
                    ae:d5:f9:74:74:3c:4d:c7:81:d1:07:fa:b0:99:fd:
                    67:4a:ae:3e:d1:8c:4e:1c:41:b2:c8:ab:bf:84:d7:
                    4b:41:9f:67:01:be:4e:f5:bd:22:cd:a3:81:d3:b8:
                    ff:ad:76:d9:c7:50:bc:36:1b:5c:c5:5f:7b:0a:33:
                    db:3f:5d:cf:f2:c8:b5:a2:8f:02:cf:57:2a:62:4b:
                    bc:46:aa:23:bd:4e:23:92:53:61:95:c8:ab:87:c6:
                    f9:0f:69:cc:44:4f:ba:fd:d8:80:71:9b:b3:e9:1d:
                    5f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B4:F2:99:DC:13:9F:1E:11:C4:01:D8:39:CC:2A:C5:DA:AE:16:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/bcfcfbba-e223-3e86-b198-67b0c119a52a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.crl

            X509v3 Authority Key Identifier:
                keyid:41:6C:26:94:21:8B:04:FF:A0:EC:13:AA:D4:CD:6D:BB:C3:07:4F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/abe8e36b-7a45-4f87-b6d6-55a4a1dfa118.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:55:8e:33:bf:4f:93:07:d0:3b:ea:18:b6:dd:d7:15:8e:fd:
         e7:14:7c:6f:6b:af:f7:58:ac:8f:c4:44:24:78:57:21:13:34:
         f4:fc:00:b3:e0:e9:4f:e8:25:b0:c3:77:b8:cf:02:a4:5b:ff:
         0c:48:bf:3b:ef:84:a0:bd:10:36:1b:21:f7:9b:4a:b5:52:e3:
         38:cc:54:0e:94:7f:fc:83:25:f4:94:4d:cb:40:c5:b2:c3:98:
         9b:0d:d7:35:45:2a:d8:74:da:62:b2:8b:28:45:4a:47:28:0b:
         1e:a5:d0:ba:41:30:dd:c4:a8:9d:73:5f:10:12:55:a9:04:b1:
         41:1b:f5:2d:b3:13:49:e9:48:25:da:68:1c:38:28:aa:c2:c7:
         99:c9:e1:42:95:e6:69:c9:78:39:09:53:94:c7:40:c1:95:71:
         ea:ed:4c:03:6f:21:34:de:cd:c1:69:71:d3:cd:09:c7:ca:14:
         3e:b8:0a:70:d9:c1:1a:d7:72:66:32:4f:6c:3c:2b:27:bf:b3:
         b7:7d:10:e1:40:c0:01:01:d6:95:af:71:44:9b:fd:a9:ab:4e:
         50:c3:a6:67:37:6b:a0:f2:b2:94:2a:83:d4:7b:20:94:68:65:
         8f:7c:69:72:ee:e3:17:02:87:0c:9b:29:10:82:47:0e:ed:f9:
         03:69:0d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:48:44 2026 by rpki-client