Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/856fc6b2-4147-377b-8dad-2b19ba6279ba.roa
File:                     856fc6b2-4147-377b-8dad-2b19ba6279ba.roa (raw, json)
Hash identifier:          +3m5U4hacqd3mklVYfiXcLdXMWnsbNGhLdGmloxHRuA=
Subject key identifier:   5E:88:BD:A5:4D:A7:77:79:F8:17:F4:BA:F0:B9:0C:EF:4A:BC:4D:1E
Certificate issuer:       /CN=2ca5e7d8-de7d-48b8-9cb1-491065714227
Certificate serial:       010D0C9F4328584EFC0FD2BC4B2CA550C6B9FA80
Authority key identifier: 26:3A:B2:36:A1:2A:13:CC:0A:7A:93:76:89:C4:AA:AA:24:2D:8A:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/856fc6b2-4147-377b-8dad-2b19ba6279ba.roa
Signing time:             Fri 28 Aug 2026 07:44:06 +0000
ROA not before:           Fri 28 Aug 2026 07:44:06 +0000
ROA not after:            Thu 26 Nov 2026 08:44:06 +0000
asID:                     25618
IP address blocks:        23.144.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:0f:d2:bc:4b:2c:a5:50:c6:b9:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ca5e7d8-de7d-48b8-9cb1-491065714227
        Validity
            Not Before: Aug 28 07:44:06 2026 GMT
            Not After : Nov 26 08:44:06 2026 GMT
        Subject: CN=a8d6fb19-cd8f-4114-b039-b4939403dcf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a4:f2:90:12:6f:9f:c1:a6:7f:90:c8:1f:8d:
                    91:0c:40:fe:a6:6c:65:d4:83:d6:7e:1e:12:26:36:
                    4c:2f:94:19:05:ff:eb:55:49:c4:59:f0:e6:fb:d4:
                    42:ec:65:94:0b:01:71:28:7f:35:1c:d9:a5:78:30:
                    bc:d6:05:53:fe:2c:c7:92:4c:d1:6e:32:d3:e3:72:
                    42:9d:36:51:c5:86:5d:c4:9f:70:82:2a:dd:37:fb:
                    17:68:66:42:cd:8b:90:65:69:5a:58:2f:44:9d:69:
                    2c:ec:e9:44:23:7f:10:db:21:c5:f0:f5:b4:9a:7a:
                    a9:91:28:c1:1b:06:55:9a:76:7a:f2:a8:d5:ca:3a:
                    8a:00:dc:a9:c9:ee:27:31:52:12:5e:e9:fd:ab:f7:
                    14:ae:8f:6a:8f:f1:f5:dd:fc:08:7e:bb:47:de:7e:
                    a8:07:44:1e:d0:2b:14:bb:4d:e7:38:41:2f:5a:d6:
                    cf:ef:b8:26:64:45:76:00:34:6e:9c:21:50:e4:c5:
                    2e:f2:4b:a5:a0:5a:91:04:c8:6b:d6:a5:e4:1e:62:
                    1f:a8:3b:0a:7b:31:95:04:77:7c:9e:ca:4f:2a:e1:
                    51:22:eb:8b:ba:24:3e:ff:56:bc:99:c4:06:65:09:
                    41:ed:17:27:0e:d0:d7:8e:56:58:7f:e7:51:7e:ac:
                    ff:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:88:BD:A5:4D:A7:77:79:F8:17:F4:BA:F0:B9:0C:EF:4A:BC:4D:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/856fc6b2-4147-377b-8dad-2b19ba6279ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227/2ca5e7d8-de7d-48b8-9cb1-491065714227.crl

            X509v3 Authority Key Identifier:
                keyid:26:3A:B2:36:A1:2A:13:CC:0A:7A:93:76:89:C4:AA:AA:24:2D:8A:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2ca5e7d8-de7d-48b8-9cb1-491065714227.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:10:dc:ab:71:4f:db:52:03:de:1a:b8:ab:96:bb:80:58:5e:
         db:ab:76:7b:89:3d:0e:4f:99:d2:61:01:60:69:03:a1:44:5f:
         c1:b7:82:70:65:38:0c:39:43:39:60:c2:39:6f:6c:c8:fe:bd:
         0d:cd:e0:80:8b:44:83:09:08:50:14:3e:e2:48:72:0e:92:c1:
         60:a4:9b:5e:33:71:e8:9f:64:8a:89:22:a3:43:13:f3:a8:5e:
         f1:97:fc:ba:69:ab:56:45:24:cb:7f:5e:d6:30:3c:74:a6:95:
         e5:b9:13:20:a3:34:0f:26:d8:ab:0e:52:f0:2c:20:53:2c:99:
         76:a5:d1:1c:41:25:77:cb:31:18:a8:00:a8:13:4f:df:7a:63:
         6b:92:8a:3a:ce:71:ec:91:ab:7d:9c:6d:80:c7:77:92:53:0e:
         9f:8a:e6:7a:37:83:32:83:26:f6:4f:85:67:85:4d:5d:90:a8:
         b3:ea:d1:10:54:7d:7a:50:4a:b3:33:f6:1e:c3:d9:eb:88:3f:
         30:b3:75:e9:fe:b7:f2:cd:e2:0f:15:6d:f9:7a:84:9e:c2:c2:
         87:f5:10:68:cd:d8:15:c7:49:f8:6d:24:6e:e0:82:4b:57:0b:
         75:6c:3e:f9:03:30:b2:34:f5:8e:b0:60:d2:da:1c:44:15:5b:
         b4:6f:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:59:59 2026 by rpki-client