Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046/05f872ef-7e86-328f-85a3-2fcc69fe4e58.roa
File:                     05f872ef-7e86-328f-85a3-2fcc69fe4e58.roa (raw, json)
Hash identifier:          aCBXDWubrxNh2Sn9wmW0a1fVXKrOP89auckxOUfCX80=
Subject key identifier:   23:CC:E1:B7:BE:E8:D3:3A:E2:11:30:EC:75:B7:CA:16:4F:B4:A9:65
Certificate issuer:       /CN=5135604a-70f4-4d84-a94f-422b1c172046
Certificate serial:       010D0C9F4328584F498AC43C6DA43F1BC6D9CA00
Authority key identifier: 66:23:4E:AF:C9:9D:E6:E0:08:2E:37:B1:7C:39:7D:9B:DC:AF:5C:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046/05f872ef-7e86-328f-85a3-2fcc69fe4e58.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     59730
IP address blocks:        23.149.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046/5135604a-70f4-4d84-a94f-422b1c172046.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046/5135604a-70f4-4d84-a94f-422b1c172046.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:8a:c4:3c:6d:a4:3f:1b:c6:d9:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5135604a-70f4-4d84-a94f-422b1c172046
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e660d26a-098a-42eb-b9ad-8c657914589c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c0:e7:39:24:47:ee:0c:f8:20:f2:34:d6:c7:
                    ed:e7:93:ae:76:40:0c:db:3a:8d:df:d7:1d:ee:52:
                    2b:67:82:40:20:f5:71:4d:70:c8:06:0c:ad:87:62:
                    1b:39:09:79:fd:b2:f6:1c:83:3e:aa:1d:24:f8:75:
                    f1:1f:e7:53:f6:0a:14:e4:03:e5:b4:ec:7a:07:78:
                    ed:3b:09:1a:b5:56:b5:6d:7f:a7:d4:85:e5:e0:53:
                    26:7a:03:75:a9:a8:29:df:b6:7f:ed:6d:3c:2a:6c:
                    ae:c9:c1:a1:77:5b:44:b6:c0:d5:77:7c:71:42:6f:
                    ae:9d:92:bb:02:9e:3f:37:12:0e:69:35:96:12:85:
                    5a:ff:e2:53:2c:54:16:eb:a9:9e:89:84:e0:21:2b:
                    a8:af:cf:2c:df:73:2a:e2:80:7d:d0:00:29:e9:c3:
                    1d:a8:64:ab:7a:cd:a0:6e:3e:76:63:f7:99:86:fb:
                    36:d1:f8:69:79:d3:48:92:50:76:fc:a3:82:4b:e4:
                    fe:06:cd:81:b2:87:0c:1a:66:45:2d:3e:90:69:79:
                    b8:3f:da:c3:71:59:e6:fd:ab:47:18:13:f0:44:24:
                    9c:b8:ac:da:c4:4d:79:59:e6:3f:e3:0c:21:a5:72:
                    0b:3e:5c:0c:84:fc:fe:ee:82:ad:0f:f9:50:18:6e:
                    19:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:CC:E1:B7:BE:E8:D3:3A:E2:11:30:EC:75:B7:CA:16:4F:B4:A9:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046/05f872ef-7e86-328f-85a3-2fcc69fe4e58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046/5135604a-70f4-4d84-a94f-422b1c172046.crl

            X509v3 Authority Key Identifier:
                keyid:66:23:4E:AF:C9:9D:E6:E0:08:2E:37:B1:7C:39:7D:9B:DC:AF:5C:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5135604a-70f4-4d84-a94f-422b1c172046.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:e4:0a:3f:36:32:ce:ea:57:94:04:0c:38:8f:3c:e0:06:49:
         80:38:de:bb:d9:26:b5:2a:ab:7c:60:bc:5f:6a:45:38:6e:f2:
         e0:f2:81:a2:b1:6a:54:e0:1f:0b:72:ef:64:6c:2c:21:2e:90:
         0c:33:9d:fe:c9:77:9c:82:61:d9:ec:a6:92:d0:1d:b2:c9:9f:
         06:aa:a0:0f:93:57:2f:5c:61:b5:98:e4:ed:8f:07:b7:3d:7d:
         9d:6e:e4:fd:8d:ea:00:93:44:28:f4:30:4b:50:43:f9:80:0c:
         f1:de:e8:ce:40:22:71:03:d4:94:df:11:e9:b7:17:01:dc:25:
         f8:2d:76:84:92:32:5e:d5:1e:4f:8a:da:f5:d9:9e:41:e1:26:
         79:1b:1a:2a:97:fa:18:cf:5b:b2:24:79:f4:de:f2:a3:63:08:
         a8:51:eb:0d:03:7f:74:74:17:d9:67:75:8a:09:29:cc:63:ad:
         ca:22:29:dd:43:0d:1a:de:1a:af:96:54:b1:2f:41:e4:a4:1a:
         18:62:65:01:29:5e:21:ef:9e:75:e3:b6:f9:f4:43:6a:53:6b:
         1d:d6:63:c9:92:f6:fb:61:50:6d:1b:f7:57:ab:d5:2d:e2:ae:
         13:c1:53:28:72:2b:5b:73:e6:c3:5d:03:b5:64:15:93:c4:db:
         f9:8b:fb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:04:08 2026 by rpki-client