Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/b5079e43-62d5-3633-b8d0-25e7af0eb6d0.roa
File:                     b5079e43-62d5-3633-b8d0-25e7af0eb6d0.roa (raw, json)
Hash identifier:          ye4NgH1xI/ZQL6fc1rH4wJ4FUz6GQQlWuho8/TMo7+Q=
Subject key identifier:   EE:95:64:23:70:6D:56:A7:72:A8:F4:63:DC:0E:08:C8:C6:35:B8:AE
Certificate issuer:       /CN=440eb756-8dc2-423e-8aa8-850483061961
Certificate serial:       010D0C9F4328584F050CC4EFEE068A81CB008900
Authority key identifier: 98:DE:E0:6B:BD:0C:34:A0:1B:EC:CC:5A:92:3B:75:31:00:0D:45:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/b5079e43-62d5-3633-b8d0-25e7af0eb6d0.roa
Signing time:             Mon 31 Aug 2026 13:00:12 +0000
ROA not before:           Mon 31 Aug 2026 13:00:12 +0000
ROA not after:            Sun 29 Nov 2026 14:00:12 +0000
asID:                     54953
IP address blocks:        23.136.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/440eb756-8dc2-423e-8aa8-850483061961.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/440eb756-8dc2-423e-8aa8-850483061961.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:05:0c:c4:ef:ee:06:8a:81:cb:00:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440eb756-8dc2-423e-8aa8-850483061961
        Validity
            Not Before: Aug 31 13:00:12 2026 GMT
            Not After : Nov 29 14:00:12 2026 GMT
        Subject: CN=c645697b-6a35-43d2-9e7d-2de3b648f39d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:69:16:95:21:60:29:55:88:68:e2:1e:0d:ab:
                    2f:c1:ae:1e:7a:bd:f2:cb:ba:83:fd:29:58:d3:7a:
                    bf:b7:d3:e4:63:be:d8:d1:7c:63:f0:5e:f5:14:1d:
                    be:e6:40:44:28:86:a6:0b:55:e7:83:90:ac:d5:92:
                    4b:c2:ff:9a:8c:46:8a:e9:bc:ad:90:8b:b1:9e:4c:
                    09:d2:22:33:2c:75:e3:28:94:2e:92:da:77:e0:0b:
                    00:4d:e3:90:84:93:ea:cc:bc:59:d7:94:6c:6e:e8:
                    4f:74:c5:08:1f:bc:07:58:c0:3c:33:44:c6:25:8c:
                    85:18:07:60:81:9f:e7:03:d0:d9:75:94:d8:07:c3:
                    8f:57:82:a2:8c:30:95:6b:89:33:a1:7e:51:9e:58:
                    bd:f5:b2:0c:14:70:7a:8c:bf:7f:c4:86:c0:04:08:
                    04:cb:43:90:05:3a:c7:12:ca:65:a6:e6:d7:2a:b7:
                    d6:87:3d:61:aa:8a:56:6d:0a:9d:f6:ab:56:d6:3c:
                    ff:14:8b:94:28:f3:60:1b:1f:ed:dd:78:88:7b:8f:
                    73:0d:b8:d0:58:ea:ef:54:a3:de:2a:55:36:32:f4:
                    33:7c:6f:9e:88:59:91:80:3d:15:79:48:5d:ad:31:
                    f3:e1:0e:bf:e9:40:8c:d7:05:1d:3d:3d:1a:18:15:
                    98:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:95:64:23:70:6D:56:A7:72:A8:F4:63:DC:0E:08:C8:C6:35:B8:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/b5079e43-62d5-3633-b8d0-25e7af0eb6d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/440eb756-8dc2-423e-8aa8-850483061961.crl

            X509v3 Authority Key Identifier:
                keyid:98:DE:E0:6B:BD:0C:34:A0:1B:EC:CC:5A:92:3B:75:31:00:0D:45:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.136.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:fb:b2:88:c0:d0:3b:d2:ff:35:53:1f:3f:59:4d:31:73:9c:
         93:7a:72:46:8a:30:d6:4b:49:41:a8:f1:33:7b:82:99:c0:b1:
         24:43:0c:e2:dc:7d:93:d0:2a:d8:3a:c3:6a:12:40:c3:38:8b:
         26:6a:23:3a:a7:0f:9f:03:5a:f6:b3:4c:36:5d:e4:fc:62:46:
         5c:11:b3:db:cb:be:53:80:ff:15:58:42:2a:77:58:dc:8e:bf:
         d1:c7:5e:f7:90:25:d1:a3:a5:37:c5:ec:aa:09:7b:7a:86:62:
         a8:38:35:f8:79:47:49:e3:b5:95:ee:10:ef:03:94:ef:2b:07:
         d9:e3:da:f1:0a:a2:ed:d9:52:2a:67:0c:f6:1f:ba:97:36:a9:
         8d:49:aa:d2:22:52:c5:21:c2:15:d2:0d:13:9f:2c:c4:b6:73:
         5c:b2:88:57:61:b6:dc:01:af:5c:44:59:8f:12:8f:c9:4b:f2:
         e6:f5:1a:54:f2:23:49:47:01:fd:1b:3b:b1:d1:40:7a:9c:17:
         91:4e:72:e7:fe:c9:bc:39:65:48:2f:79:fc:0e:c5:60:b1:d2:
         c9:dc:08:5e:8b:ef:fe:89:5f:06:9e:96:f5:2c:49:05:52:97:
         21:1a:09:9a:50:f9:78:ca:c8:a5:30:cf:43:84:5d:8d:f4:c0:
         bb:28:23:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:12:01 2026 by rpki-client