Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb/9cdc6445-0758-3b3c-9285-69a25ee1c123.roa
File:                     9cdc6445-0758-3b3c-9285-69a25ee1c123.roa (raw, json)
Hash identifier:          OT23HU21yWSZfV6C26jtN/UyHGXtFU8NhvJ5M8FDCs4=
Subject key identifier:   05:F3:DB:B8:86:9A:CE:AA:DA:5E:DB:4B:EC:2D:17:B5:F6:DD:AB:6C
Certificate issuer:       /CN=87c0eaa5-97ec-4efa-8555-88298630efbb
Certificate serial:       010D0C9F4328584F4C3D7096CC7EBDA61F64FDC0
Authority key identifier: 50:7C:D9:E5:87:8E:EC:9D:B6:85:25:60:AE:A5:93:A1:B9:03:DA:C8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb/9cdc6445-0758-3b3c-9285-69a25ee1c123.roa
Signing time:             Sat 26 Sep 2026 01:00:13 +0000
ROA not before:           Sat 26 Sep 2026 01:00:13 +0000
ROA not after:            Fri 25 Dec 2026 02:00:13 +0000
asID:                     402291
IP address blocks:        23.154.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb/87c0eaa5-97ec-4efa-8555-88298630efbb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb/87c0eaa5-97ec-4efa-8555-88298630efbb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4c:3d:70:96:cc:7e:bd:a6:1f:64:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c0eaa5-97ec-4efa-8555-88298630efbb
        Validity
            Not Before: Sep 26 01:00:13 2026 GMT
            Not After : Dec 25 02:00:13 2026 GMT
        Subject: CN=b52acc8c-ae55-49e6-93ba-6a0be001b1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5a:92:c8:d0:b0:0c:4d:21:4d:24:30:dc:97:
                    2f:95:cb:1a:3a:e1:8d:17:6a:71:c8:4e:89:6b:af:
                    c2:88:81:e8:0d:2e:16:71:52:9b:2a:ea:d5:d5:a1:
                    b9:46:eb:2c:9a:ff:b5:cc:54:e3:ff:8e:86:ed:93:
                    64:37:00:05:42:8f:0a:63:3a:55:30:41:b2:df:e2:
                    3c:c9:84:b9:27:9a:7f:71:91:f9:8c:fc:59:52:f7:
                    b2:87:fa:88:8e:52:88:c1:47:b4:7a:91:77:c3:98:
                    e7:da:13:d1:7a:e8:c7:54:6e:a0:95:8f:54:8d:a9:
                    ae:59:ae:2d:a2:61:4e:81:ba:ef:da:11:90:d1:d1:
                    56:a7:78:69:fb:1c:53:90:0c:c4:de:62:fc:c2:ef:
                    f0:c7:8b:06:b0:f0:1e:45:42:7d:35:0e:b6:31:04:
                    1c:00:39:4d:69:b8:1e:4c:30:1b:82:eb:72:18:ad:
                    d8:31:33:7a:0f:b8:b1:34:c2:0d:1a:9e:eb:21:be:
                    90:2c:83:24:d2:30:7c:23:de:f0:5b:99:8d:24:2d:
                    20:a5:0e:a0:e8:aa:0f:c4:a2:bf:05:3f:23:83:4c:
                    a2:39:b8:8d:72:ca:cd:78:fe:fe:6c:58:ba:74:f7:
                    60:1c:82:85:5c:d4:37:8f:09:ca:8b:3f:4a:a6:9f:
                    47:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F3:DB:B8:86:9A:CE:AA:DA:5E:DB:4B:EC:2D:17:B5:F6:DD:AB:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb/9cdc6445-0758-3b3c-9285-69a25ee1c123.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb/87c0eaa5-97ec-4efa-8555-88298630efbb.crl

            X509v3 Authority Key Identifier:
                keyid:50:7C:D9:E5:87:8E:EC:9D:B6:85:25:60:AE:A5:93:A1:B9:03:DA:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.154.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:8f:c2:68:d9:5a:d6:31:87:c5:43:34:3d:8e:25:73:55:1d:
         ef:1c:19:6d:8a:20:31:84:52:59:82:a3:1e:4e:fc:85:36:b0:
         08:89:5e:13:86:d3:65:ac:e8:7e:33:c8:3e:a6:9a:1c:bf:55:
         61:5c:28:d6:06:0d:cd:f3:8f:28:ce:c3:26:3b:5c:9b:53:45:
         a4:3d:6d:7f:b2:2a:6f:4c:79:06:37:a9:23:c2:3b:e8:63:b3:
         4a:8e:bd:6b:5f:82:f4:e2:e3:f6:77:bd:0c:66:63:4d:42:25:
         bd:03:99:ae:b0:d7:00:fc:e2:64:df:6a:76:3f:40:fe:51:35:
         20:fe:19:59:f4:9c:0c:ab:a1:e0:b7:ce:45:b8:b3:4e:b3:12:
         0f:7f:23:67:99:b5:bc:d5:85:99:4d:83:c5:fe:f7:4b:b3:33:
         30:d4:21:0b:d8:96:1a:2b:81:2e:53:86:a9:aa:47:40:59:05:
         b3:e6:18:64:91:e6:cb:74:ee:84:c2:e0:63:35:6a:10:c6:90:
         43:dd:35:b1:1b:69:e6:be:9e:2b:11:5f:9e:83:c5:2d:a0:de:
         22:a7:5b:44:80:13:6c:92:f7:57:5b:ea:d7:10:c9:1b:29:f7:
         8f:61:ff:68:ec:9a:f6:27:39:9d:36:86:48:13:f9:88:ce:17:
         09:55:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:10:13 2026 by rpki-client