Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef0740c2-3eeb-3256-9793-9badbf728d19.roa
File:                     ef0740c2-3eeb-3256-9793-9badbf728d19.roa (raw, json)
Hash identifier:          z5mTHS91fzhAUCdIsbCkQhzXvbXPZr99Z1LCQIWc90E=
Subject key identifier:   D0:1D:51:58:0B:F5:55:39:CD:DF:45:79:8B:06:23:F8:A2:F7:83:86
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F31B7C784E2774A2506732780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef0740c2-3eeb-3256-9793-9badbf728d19.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     20940
IP address blocks:        23.34.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:c7:84:e2:77:4a:25:06:73:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=5738bd50-dbb5-4c31-aaec-93e1f1e4f2a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f0:cf:de:44:8d:32:e7:55:af:26:73:5c:76:
                    f7:28:bf:62:9c:64:e6:54:90:c9:21:2b:d0:3b:ce:
                    f8:f9:37:b4:f7:cc:46:06:16:3d:ee:51:f3:48:33:
                    5f:27:99:f3:78:09:15:80:4c:62:39:e0:89:fc:46:
                    ba:5d:02:72:51:1e:63:04:e4:a5:c1:2c:16:8b:ec:
                    c1:d4:94:69:06:e8:cf:c7:28:f7:36:a0:b3:9d:0a:
                    b4:c8:ca:7a:29:bc:6d:33:fa:f6:da:97:ba:44:c3:
                    ea:c4:8e:9a:25:ec:ee:0e:57:16:e8:38:51:19:01:
                    b3:c0:b2:86:33:46:01:fc:04:63:5d:63:8f:a0:61:
                    d0:2e:1c:70:b4:ed:43:51:5f:d0:42:66:cf:98:3b:
                    9f:6a:9f:c8:49:60:5a:c6:49:d6:7b:77:fb:4c:b7:
                    94:d2:80:61:12:4a:af:45:e0:f0:9a:8b:c1:59:dd:
                    8c:61:39:fc:d4:d3:15:5b:27:fe:21:51:6d:f2:35:
                    17:18:64:72:fa:d4:53:b7:63:82:f7:fb:0e:d3:9a:
                    14:ef:4a:f1:27:7f:0a:3d:99:03:6b:bf:be:2f:1e:
                    5a:53:d2:95:9b:ad:a5:9a:be:a5:ef:86:58:1c:74:
                    5c:ae:ed:2e:ce:e4:c9:e3:ac:35:96:bc:ad:1d:dd:
                    2a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:1D:51:58:0B:F5:55:39:CD:DF:45:79:8B:06:23:F8:A2:F7:83:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ef0740c2-3eeb-3256-9793-9badbf728d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.34.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b1:6f:84:57:f9:f8:4e:c1:12:aa:12:c4:ae:a0:f9:45:18:
         69:19:b8:46:c6:7b:75:59:22:57:fe:5a:45:67:4d:15:26:ee:
         80:b4:81:1f:df:e6:80:99:77:ac:bd:3a:4d:d7:30:07:f1:17:
         5a:93:c4:34:a7:97:c3:75:c9:7f:32:71:09:54:36:ef:88:45:
         39:ff:83:d7:f5:98:3f:1a:50:86:38:d6:2e:73:b8:74:85:7a:
         eb:b7:f1:be:dc:f6:eb:49:80:09:da:e6:7d:2a:dc:34:68:c9:
         06:f7:37:30:80:1c:f2:ab:87:f0:14:6f:2e:4a:d4:7e:d8:34:
         ea:f5:79:16:51:3b:71:3c:47:80:8c:11:5d:f1:ab:be:e9:23:
         4c:4a:db:ac:f0:80:ec:18:7f:22:bb:bc:84:62:b2:f9:44:76:
         8e:91:a1:c1:19:c2:a0:60:fa:1d:6f:d4:f2:7f:a3:4f:87:f0:
         e6:87:34:01:dc:7e:cc:f0:d6:d6:53:25:73:c7:9c:e1:03:95:
         cb:fc:7d:49:98:a9:b7:15:b7:a0:97:d5:32:6d:ab:32:9c:36:
         5d:9a:5a:fa:fb:68:f0:d9:92:08:bb:f3:fd:8e:ce:22:cf:30:
         87:a7:b6:a1:29:e2:81:65:3f:76:d6:3d:ac:6c:ee:da:05:09:
         e2:de:46:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:10:09 2026 by rpki-client