Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS141323.roa
File:                     AS141323.roa (raw, json)
Hash identifier:          OdiQ1kTzbis7GlaEPTPAW0oxiUOybs2R0/1CzKANvao=
Subject key identifier:   EB:3C:EC:05:A5:6A:F7:B8:61:4E:38:69:AE:F7:48:4C:27:C9:FE:C5
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       681AC3500C547FECF6E34DA93DD3CFEC3EB0FCB1
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS141323.roa
Signing time:             Wed 23 Sep 2026 02:17:46 +0000
ROA not before:           Wed 23 Sep 2026 02:12:46 +0000
ROA not after:            Wed 22 Sep 2027 02:17:46 +0000
asID:                     141323
IP address blocks:        23.94.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:1a:c3:50:0c:54:7f:ec:f6:e3:4d:a9:3d:d3:cf:ec:3e:b0:fc:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 23 02:12:46 2026 GMT
            Not After : Sep 22 02:17:46 2027 GMT
        Subject: CN=EB3CEC05A56AF7B8614E3869AEF7484C27C9FEC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3a:a3:71:91:37:77:87:7a:b0:66:65:da:a8:
                    2a:65:1f:c6:5e:34:b9:ed:c6:fa:04:c5:1c:0d:b4:
                    8a:bb:b6:51:31:e8:e1:7a:69:5f:69:9b:bf:c5:e5:
                    e8:97:67:b2:cf:ec:e4:01:bf:33:12:e4:fb:7d:65:
                    4f:db:4a:7a:d9:eb:8b:24:d9:d1:8b:a4:a0:96:b6:
                    49:55:85:65:84:c0:49:ae:7c:5b:b3:58:62:b7:06:
                    8e:1b:55:e4:a4:55:1f:ff:8d:b6:b9:a3:2a:ca:07:
                    09:4c:fd:41:ae:5f:0e:f7:ff:3e:54:a4:45:17:9d:
                    7d:53:18:4a:96:88:c0:31:87:4c:1c:93:23:a4:96:
                    ac:56:8a:15:8b:93:39:3b:48:d2:83:58:93:a3:30:
                    1d:d3:e3:d7:25:82:c3:15:fe:03:5f:02:98:75:d5:
                    6c:73:55:f1:29:2d:21:fc:16:e1:69:f8:02:a6:36:
                    92:5c:c8:fa:ec:68:92:01:be:b2:0d:5b:a3:d3:bb:
                    74:4a:75:7b:9c:80:f2:42:a1:09:78:00:8d:f2:a7:
                    b3:a9:33:83:9d:99:58:c7:c2:4c:3c:fc:dc:a7:a4:
                    62:8a:d0:12:72:d8:a0:7e:40:cd:a3:2e:81:0c:be:
                    00:cc:72:d7:3e:4d:00:da:87:c8:38:6b:c7:07:0e:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3C:EC:05:A5:6A:F7:B8:61:4E:38:69:AE:F7:48:4C:27:C9:FE:C5
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS141323.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:38:40:5c:34:d2:c7:7e:22:77:08:2c:82:c9:9b:2d:ab:46:
         a0:3a:9a:53:3b:52:13:e1:46:78:29:eb:2a:dc:d0:1c:70:ca:
         bb:64:4f:74:5e:17:86:18:3f:f4:e0:14:9c:6b:8d:3b:cd:b5:
         ef:b9:57:45:dc:f3:9e:c3:f9:55:14:10:c2:0f:e7:85:c1:3d:
         49:e9:2b:a2:f5:09:3b:04:62:81:a5:a2:f2:51:42:48:0d:93:
         a8:bb:2d:a3:a4:5f:d9:68:be:ff:c5:79:9b:f1:af:4a:f0:20:
         a7:81:e5:e1:90:0e:1a:b9:03:91:b9:6d:bd:2b:98:8b:09:92:
         4e:e9:25:96:0e:ba:cd:be:d8:50:4a:b9:1f:41:b4:26:8b:cf:
         c4:64:ee:c2:ed:08:6a:81:31:7f:30:1b:de:07:a8:d1:b1:ca:
         9a:c4:8a:8f:f4:a7:53:0d:dd:35:16:af:66:89:0d:a9:66:a5:
         a6:1f:07:35:ff:d6:a9:4f:ae:8a:ce:9f:32:92:2c:82:37:6d:
         61:63:56:46:03:10:79:46:83:48:8e:b7:fb:63:5f:dd:21:56:
         a9:c6:f4:f0:f4:44:78:e0:f8:64:fa:3b:b1:92:98:ec:8b:2c:
         d4:c3:2b:89:44:f9:d9:56:ea:a0:15:90:f3:ee:a9:63:ff:01:
         6e:8d:fc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:59:22 2026 by rpki-client