Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/5e49f05d-616b-3e73-95ef-fdf98a231b07.roa
File:                     5e49f05d-616b-3e73-95ef-fdf98a231b07.roa (raw, json)
Hash identifier:          4TiQR8qi1NKbAX0mWCOaiD3V/ekx+mks2qte/bsjaGs=
Subject key identifier:   45:9C:30:A6:8F:12:9B:48:B0:A4:06:4E:D0:C5:CB:C8:26:39:B3:2E
Certificate issuer:       /CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
Certificate serial:       010D0C9F4328584F42AFDD713D303AF23B5E5E80
Authority key identifier: 8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/5e49f05d-616b-3e73-95ef-fdf98a231b07.roa
Signing time:             Tue 22 Sep 2026 14:53:09 +0000
ROA not before:           Tue 22 Sep 2026 14:53:09 +0000
ROA not after:            Mon 21 Dec 2026 15:53:09 +0000
asID:                     54641
IP address blocks:        23.235.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:af:dd:71:3d:30:3a:f2:3b:5e:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef710622-7ec4-4bb2-9e87-27c5e5964fae
        Validity
            Not Before: Sep 22 14:53:09 2026 GMT
            Not After : Dec 21 15:53:09 2026 GMT
        Subject: CN=da5d147d-ee47-49a4-82e0-c8a478347842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:27:89:88:d0:c2:65:02:cf:a2:51:13:2d:34:
                    9a:f9:10:ba:9b:4d:45:21:be:1f:a4:b8:d8:f2:56:
                    d6:bf:29:a6:14:3c:38:7c:59:24:4c:0f:2d:79:23:
                    30:3e:cb:ac:ef:ff:7b:b6:5a:94:96:1f:67:5c:19:
                    38:c0:9c:91:2b:8a:33:7a:1a:0d:86:db:53:7f:2b:
                    22:47:36:e4:5c:3b:40:80:f4:ba:14:2b:6c:b8:dc:
                    20:87:99:cb:d5:35:02:ed:f3:95:d3:64:73:5f:57:
                    f8:35:de:36:51:9d:cc:30:70:0d:67:bc:54:68:31:
                    b0:c1:70:d7:fb:79:89:5b:87:7a:2d:9c:9a:5d:cb:
                    40:47:06:9c:a5:81:90:e9:dd:f7:8b:e9:83:1c:a4:
                    d3:4e:96:84:87:b8:22:84:55:60:ce:78:89:e7:a7:
                    8f:c3:93:ee:a7:1d:16:fc:21:49:60:a4:21:25:4a:
                    48:12:a4:f3:e5:9e:a3:29:e1:a3:32:80:7e:b2:95:
                    76:18:d0:63:a3:8f:72:2b:1b:fa:56:7d:49:75:55:
                    c1:60:cb:6b:a8:94:2d:98:e1:58:c5:7f:dd:4a:11:
                    97:c0:39:09:28:74:9c:72:4e:46:21:a5:93:95:01:
                    66:b1:f8:d1:21:ce:5c:9a:38:b9:2c:36:71:9d:3b:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9C:30:A6:8F:12:9B:48:B0:A4:06:4E:D0:C5:CB:C8:26:39:B3:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/5e49f05d-616b-3e73-95ef-fdf98a231b07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae/ef710622-7ec4-4bb2-9e87-27c5e5964fae.crl

            X509v3 Authority Key Identifier:
                keyid:8B:4A:0E:7A:84:48:3D:14:18:BD:AC:31:07:96:0F:68:2A:61:ED:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ef710622-7ec4-4bb2-9e87-27c5e5964fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.235.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:84:b9:2e:d1:b0:25:5d:c1:af:0f:b6:e4:01:34:0d:7a:a1:
         72:3b:33:0e:9b:5d:cf:ad:cc:aa:d3:d3:bb:31:64:df:3b:40:
         ef:b1:d2:9a:2d:df:25:e7:55:61:99:65:6f:63:bf:9e:a2:d8:
         4b:62:ab:b0:16:b8:54:2f:c6:62:57:35:7f:c0:e7:f1:06:c0:
         8d:18:0c:b0:23:3c:8d:c5:e7:71:39:7b:9a:81:90:4a:9e:2e:
         46:4b:ef:9a:db:23:63:81:7d:95:62:82:2d:32:00:21:5d:09:
         67:72:01:71:ea:a8:38:8e:9f:ee:2e:d0:aa:23:b4:25:ee:c7:
         2f:08:6b:d0:ed:da:5c:29:3e:ad:34:78:3b:43:70:63:b2:1d:
         40:94:b5:b6:b3:33:03:99:85:84:57:a9:82:8b:2e:76:4d:23:
         f8:96:5f:88:6d:73:cc:03:71:e7:9a:0c:94:91:dd:be:86:25:
         2c:b2:fe:34:7e:b2:b6:5d:00:16:74:f7:03:ae:b9:30:0a:dc:
         70:c3:b1:b7:e7:fb:c9:e1:8d:a8:46:ee:13:d8:50:55:ff:5b:
         0a:e4:a5:fd:6b:c8:cc:d9:ab:43:e4:ad:2c:3c:06:1e:8a:5d:
         2b:d5:23:fb:ed:18:42:92:0e:d1:81:a8:d9:05:ac:ce:a8:89:
         4e:dc:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:36:57 2026 by rpki-client