Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/6fd57e35-cd0d-30ce-a689-08517547fd19.roa
File:                     6fd57e35-cd0d-30ce-a689-08517547fd19.roa (raw, json)
Hash identifier:          LnUJu3jB3uFDWPxdUoWLlPqciiHGYjHnUv7XR4uudx0=
Subject key identifier:   68:D1:42:DC:45:35:98:CA:BB:D3:49:8A:A2:53:30:39:F7:B5:03:8F
Certificate issuer:       /CN=92d1570d-08ed-4cb4-83ab-788f1dcfd4bf
Certificate serial:       010D0C9F4328584F4975EC328246A1FB424E9800
Authority key identifier: DA:45:34:D4:19:67:3C:53:57:48:6C:27:27:52:AE:ED:5B:28:54:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/6fd57e35-cd0d-30ce-a689-08517547fd19.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400767
IP address blocks:        23.141.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:ec:32:82:46:a1:fb:42:4e:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92d1570d-08ed-4cb4-83ab-788f1dcfd4bf
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=33316427-2cd4-4ef1-9023-07f38073cb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:79:ae:bc:eb:a5:27:19:db:58:a0:f4:0c:dd:
                    f9:6d:7d:6d:fe:8b:b1:08:82:6d:db:ab:69:c7:67:
                    63:06:32:2d:dd:76:41:14:9c:54:db:a1:fc:e0:a5:
                    08:43:04:35:16:f1:d9:48:eb:33:c0:2d:ea:18:c9:
                    aa:ba:d9:52:d7:74:7c:ab:f8:34:5f:11:00:37:51:
                    de:a3:93:64:97:33:0b:88:85:17:8d:8a:5a:5f:a3:
                    b2:74:38:a1:74:47:75:df:de:52:9e:1c:00:cc:9c:
                    cb:7b:00:3f:41:b2:60:9b:5f:c7:15:fb:01:9c:7e:
                    b3:b7:d8:be:22:94:18:49:23:94:cb:69:e0:25:9d:
                    da:f1:fa:6b:b8:23:1f:27:34:58:f5:75:30:73:a5:
                    c1:14:b0:87:1e:8a:44:0c:37:3c:91:81:a4:5c:2a:
                    1b:5b:e0:42:23:80:fd:13:ca:ed:df:92:45:78:55:
                    09:f9:97:97:cb:7a:6c:79:ee:b1:65:38:b8:44:65:
                    3f:ca:a8:b8:55:bb:71:e7:7b:23:63:d0:21:f8:94:
                    f5:e6:ec:66:b8:27:db:7f:9a:62:69:8b:64:36:30:
                    2c:71:c5:6c:d1:f2:f3:93:da:4b:61:fd:93:d8:52:
                    8c:c2:54:a0:8a:e0:cf:77:61:32:4b:82:ca:23:8c:
                    7b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D1:42:DC:45:35:98:CA:BB:D3:49:8A:A2:53:30:39:F7:B5:03:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/6fd57e35-cd0d-30ce-a689-08517547fd19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.crl

            X509v3 Authority Key Identifier:
                keyid:DA:45:34:D4:19:67:3C:53:57:48:6C:27:27:52:AE:ED:5B:28:54:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/92d1570d-08ed-4cb4-83ab-788f1dcfd4bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.141.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:8b:f8:20:25:04:0e:3a:e3:69:35:0e:b3:cb:6f:8d:96:e3:
         52:e3:12:be:14:65:e4:0e:fd:58:d3:32:c5:c7:7a:db:ab:f2:
         3a:5e:c7:b4:60:38:a6:71:03:a5:b4:e8:8e:fe:56:be:1b:9f:
         83:f1:46:97:62:b5:e5:df:5e:8a:7c:58:35:db:3b:b3:43:43:
         03:1c:93:b3:c2:29:82:b0:62:d6:67:ac:67:bb:cc:c1:1e:64:
         58:67:67:8a:6c:4c:c9:21:88:91:5f:6e:3e:30:a3:23:63:00:
         10:e8:72:08:13:0a:90:72:e3:21:12:35:82:fe:d0:f2:e1:f5:
         86:b4:3d:19:45:69:3f:51:cd:36:ae:91:62:c0:6f:d2:a4:4c:
         65:ca:3a:12:9f:f2:3b:d0:cd:2f:4e:75:7b:c2:a3:dd:c1:23:
         c6:87:0a:46:90:95:40:83:71:94:d8:3b:83:ba:5f:d9:d6:4d:
         a5:09:ae:a4:2a:61:a1:62:c8:48:c7:bf:f9:a9:5d:95:1c:db:
         71:6d:ca:5a:cf:d3:b1:b8:e0:cd:d4:58:97:d1:56:52:60:b4:
         d1:02:26:d0:28:9b:df:c0:97:db:55:cd:52:1b:cd:68:61:e4:
         c0:f6:a4:74:c5:5c:e7:6b:e1:67:71:8c:10:ea:65:5d:4f:41:
         dd:3e:ce:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:54:49 2026 by rpki-client