Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/39f20580-c91b-301e-b9f3-c125283e6936.roa
File:                     39f20580-c91b-301e-b9f3-c125283e6936.roa (raw, json)
Hash identifier:          Hkgs+FRzrJG+hFXkkAyRIGBNRV7nlU5TbKdFkQdM4E8=
Subject key identifier:   BB:39:4C:DB:4D:A9:44:5E:AD:1F:A0:CB:D5:AE:EE:11:AD:B0:5A:AC
Certificate issuer:       /CN=a9586916-68f6-41f9-8be8-415f39b3aff8
Certificate serial:       010D0C9F4328584EFE121B4A3E1D2122E9E98080
Authority key identifier: 5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/39f20580-c91b-301e-b9f3-c125283e6936.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     40676
IP address blocks:        23.151.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:1b:4a:3e:1d:21:22:e9:e9:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9586916-68f6-41f9-8be8-415f39b3aff8
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=e6e65e40-ee63-478b-880f-dfbd69da6cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6b:90:3d:66:c7:90:5d:aa:fe:9e:0c:c5:ec:
                    7d:93:ff:d7:ba:52:88:62:ea:48:e5:78:ef:7a:d0:
                    c5:c3:53:de:5a:38:f9:60:a3:54:8d:73:4d:9d:ac:
                    ad:03:fa:f7:b1:a5:f6:8c:1a:d7:fa:2b:c8:21:f1:
                    ee:53:31:a0:e4:ea:01:a0:aa:d6:55:9e:d9:30:50:
                    f4:e2:5a:34:07:45:7c:ef:17:5e:7e:b7:47:c1:6c:
                    70:96:29:fd:8b:a2:ad:7d:5d:1b:41:87:58:7e:2d:
                    f8:f6:12:c8:71:c9:8b:db:5e:02:70:b9:9f:25:4f:
                    d7:4f:a9:59:9b:8b:82:49:2a:d2:af:35:b3:30:bb:
                    2e:4f:71:0e:f7:13:aa:8f:4f:86:b9:e8:19:2c:2d:
                    6d:1e:fa:61:5e:f6:81:04:4d:38:d9:bf:eb:3f:09:
                    36:2a:3f:c9:e3:4a:a8:dc:a0:eb:72:29:43:48:ad:
                    5e:da:b6:1f:98:70:6e:9e:23:73:01:39:e6:d2:58:
                    49:50:cf:ce:80:42:3c:02:58:8c:88:8d:c8:ad:3f:
                    1e:e7:05:0a:f7:9a:81:33:18:01:a2:f0:ff:47:73:
                    ad:89:24:bc:db:ba:ff:03:3a:7e:82:0d:8f:95:66:
                    3b:f0:d3:52:0d:b4:79:ea:1c:3a:c7:8b:94:a2:bf:
                    e9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:39:4C:DB:4D:A9:44:5E:AD:1F:A0:CB:D5:AE:EE:11:AD:B0:5A:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/39f20580-c91b-301e-b9f3-c125283e6936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.crl

            X509v3 Authority Key Identifier:
                keyid:5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:1f:8a:45:c1:61:5d:ea:ea:87:61:86:e1:3b:bd:81:52:69:
         6d:f3:8e:73:99:bb:aa:c4:23:ed:1e:54:49:90:ea:a8:49:90:
         f4:1d:36:2a:05:9e:36:e3:65:25:f6:61:a2:c9:80:01:fe:86:
         da:80:63:6e:ac:3c:79:8e:3c:8c:3d:2c:a4:5c:3c:45:32:95:
         dc:82:75:9f:6c:42:bc:7d:70:f4:db:75:07:d7:8c:8c:fc:4b:
         c1:24:ed:f0:9f:b3:99:17:4b:50:02:cb:dd:37:d6:5c:7d:9d:
         a8:ca:1a:2f:64:56:d2:16:95:c1:9f:ac:99:3a:8c:db:6b:d6:
         eb:63:8d:84:39:f3:46:f0:f7:d8:66:b9:b8:44:fb:d1:9b:5d:
         b5:90:84:86:3b:e5:46:a5:8e:e2:83:04:64:03:b0:23:c2:42:
         3c:5e:60:f3:2a:5c:c2:2c:5c:96:6b:0e:d5:69:70:ba:8b:df:
         5c:7d:7c:5c:ff:33:76:67:d2:aa:83:8a:04:15:b3:d6:fe:96:
         af:4a:9c:ec:f9:df:5d:bf:45:89:70:f0:19:e4:a9:ba:b8:14:
         8a:8f:5f:50:19:08:bc:a2:8d:de:d4:e0:15:61:10:0a:37:fb:
         be:e7:2d:8a:b3:ef:6c:a2:b0:6b:03:fb:1c:3c:fb:c0:df:2a:
         fe:cc:0b:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:17:46 2026 by rpki-client