Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/356a8af0-0330-39f3-b4a6-70c67e1ca303.roa
File:                     356a8af0-0330-39f3-b4a6-70c67e1ca303.roa (raw, json)
Hash identifier:          ABjaBHkNyUA95biO0S+duO/IRHr6QysBOSBjYYujgKE=
Subject key identifier:   C3:4C:A4:27:91:01:F8:B5:81:D6:2C:1C:3C:EA:83:39:3E:D2:AE:F9
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F4328584E885A3D5369A4EB40610EEFC0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/356a8af0-0330-39f3-b4a6-70c67e1ca303.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     394727
IP address blocks:        23.92.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:3d:53:69:a4:eb:40:61:0e:ef:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=a6fa9d47-f94f-44cf-81c3-edad0eacd5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b9:42:e1:c0:01:d2:5b:6d:a0:db:20:d6:26:
                    15:b4:b4:ab:9a:10:13:3b:6e:a2:d4:1c:5c:0e:9c:
                    b1:78:c5:2c:9b:a2:32:91:c5:42:3e:fc:70:3f:0a:
                    32:a9:77:5b:27:33:a3:06:a8:c9:7a:a4:ac:7a:54:
                    89:93:66:75:5d:c3:3a:71:13:0d:bc:c9:fa:ae:95:
                    19:10:fa:80:e7:2f:76:e9:e2:f2:c8:01:fa:a7:3e:
                    74:3d:68:50:38:30:76:d4:eb:a4:89:69:49:be:8b:
                    41:9e:51:78:84:f4:da:01:cb:79:d5:d0:28:2a:d8:
                    f7:3e:37:44:d0:33:ad:a3:57:33:0e:45:b6:bf:10:
                    0a:e1:d8:cc:36:59:08:71:99:3e:7c:de:93:66:fb:
                    c6:64:1d:b1:54:1b:dc:97:a2:b0:f3:ed:d2:be:62:
                    2d:b4:0a:90:cd:f2:9f:f5:13:ee:6a:d2:de:1d:6a:
                    57:ec:9d:9a:01:cc:22:56:16:78:ac:5e:e7:ab:66:
                    eb:21:b5:a6:d9:7e:aa:68:31:e9:f4:1f:39:96:28:
                    fd:b5:c1:5e:a2:dd:ea:ae:1c:5e:d9:72:ac:32:a0:
                    bd:b9:97:6d:91:43:04:8a:d0:97:04:f1:69:da:ed:
                    bb:1e:b9:41:b5:80:35:b2:2d:91:97:77:d9:bd:e1:
                    5e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4C:A4:27:91:01:F8:B5:81:D6:2C:1C:3C:EA:83:39:3E:D2:AE:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/356a8af0-0330-39f3-b4a6-70c67e1ca303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.92.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:16:5f:6e:ac:36:27:4a:73:58:71:bf:81:38:9a:0a:ae:2a:
         58:02:d9:a7:25:61:c9:0b:e3:41:b7:f2:5f:28:7c:66:b6:61:
         8a:3b:6a:62:77:39:ff:4c:9c:4c:07:8c:d3:67:68:c6:37:7a:
         ff:21:62:07:ce:39:b0:8d:23:51:77:77:d1:f9:50:2c:bb:e8:
         1d:80:ef:23:c4:dd:ca:a4:32:14:62:24:ca:98:06:3f:72:9d:
         bf:89:5b:34:e5:26:91:39:cd:75:25:54:c6:9c:91:d9:c2:a8:
         87:cd:3a:73:81:2e:62:7c:16:be:35:6d:50:4a:1d:fa:86:90:
         2f:77:f1:65:49:aa:bb:3a:5b:4a:af:46:cd:87:ca:ae:b2:7b:
         a6:50:28:07:8a:3a:da:e2:37:f0:da:50:c9:23:76:cd:9f:04:
         66:d4:42:58:34:5c:48:66:d6:33:38:78:7c:c3:0b:da:bd:44:
         13:eb:44:65:3e:2e:de:53:f4:2a:9e:4b:54:23:13:07:6b:b9:
         cd:24:57:1e:ba:34:7b:f9:a7:b9:84:87:f3:5d:cc:de:f8:f5:
         ee:76:43:dd:04:50:c3:5c:52:7c:6d:fb:11:ef:21:9c:dd:2b:
         31:4c:61:a8:af:59:e6:03:30:22:2c:68:b5:3c:a5:8c:2a:a0:
         50:f0:d1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:11:18 2026 by rpki-client