Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/39f20580-c91b-301e-b9f3-c125283e6936.roa
File:                     39f20580-c91b-301e-b9f3-c125283e6936.roa (raw, json)
Hash identifier:          E3ffzk3hSt3KusdEyrXF3cxSDNek2cZFcjg2RK2C13E=
Subject key identifier:   AF:A2:D2:A9:43:DF:61:C4:66:FA:B8:4B:21:BC:CC:46:06:BE:32:8E
Certificate issuer:       /CN=a9586916-68f6-41f9-8be8-415f39b3aff8
Certificate serial:       010D0C9F4328584E5BAF49A4203C3B3ACCE569C0
Authority key identifier: 5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/39f20580-c91b-301e-b9f3-c125283e6936.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     40676
IP address blocks:        23.151.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:49:a4:20:3c:3b:3a:cc:e5:69:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9586916-68f6-41f9-8be8-415f39b3aff8
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=520e8929-c15b-4f5f-b459-2b2c571aeedc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:9e:3e:f4:00:48:47:84:8e:d1:19:e7:72:
                    af:cc:b4:69:9d:3f:84:d3:1a:e0:6a:f0:6f:e8:72:
                    2c:d5:d8:df:43:01:dd:2c:05:1c:15:eb:f2:b1:21:
                    d1:23:b5:a3:ab:90:8c:e9:4d:b5:58:2d:2b:c1:ad:
                    0e:61:ae:6b:63:d1:36:92:39:37:73:b9:7f:99:f2:
                    1e:5e:b3:47:c0:e3:11:eb:57:f8:6d:01:52:5b:e4:
                    d2:74:c2:17:72:3b:c7:25:43:95:ff:dc:a5:37:be:
                    84:4f:0b:39:53:c0:93:57:ea:55:c0:8e:91:c7:fb:
                    8f:a0:64:99:10:28:64:54:0f:48:ae:57:54:6a:87:
                    2f:7b:e9:16:04:24:25:0a:a0:ab:0c:cd:bf:9b:0d:
                    b1:a1:9e:24:f1:ae:1a:5b:1e:86:06:61:c1:96:b0:
                    0d:11:b2:67:c2:d2:70:5c:02:2b:9a:67:97:d7:4a:
                    d4:80:62:c4:92:8d:f3:09:63:1a:2f:d2:56:df:42:
                    29:f0:a3:1c:57:ea:e6:9e:a5:9d:6e:48:33:5d:d1:
                    93:e7:5e:13:7b:37:31:02:38:c6:72:5d:59:53:1a:
                    c4:88:dc:5d:ff:f3:04:c9:af:78:63:92:82:e7:65:
                    02:bf:0a:d3:ad:dd:f9:5d:38:b8:20:5a:a7:81:3d:
                    39:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A2:D2:A9:43:DF:61:C4:66:FA:B8:4B:21:BC:CC:46:06:BE:32:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/39f20580-c91b-301e-b9f3-c125283e6936.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.crl

            X509v3 Authority Key Identifier:
                keyid:5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.151.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:df:90:2f:52:b4:e6:9d:90:7c:03:a5:1b:bf:63:7e:05:29:
         a4:26:56:9d:c6:0a:76:54:69:51:6c:fa:ae:b6:5e:9e:b1:84:
         10:fd:cc:38:1a:0e:94:eb:4b:f7:f9:7c:fa:e4:8e:a8:c9:15:
         9b:5a:7f:ec:38:4b:3e:ff:ed:e4:1c:12:c2:e9:b8:b0:16:32:
         e1:61:d7:89:75:28:e7:1f:2a:6c:fb:9a:d1:00:e9:b5:85:ef:
         91:da:3d:81:b1:cb:a1:55:17:8d:9d:37:5b:b6:9e:fc:d8:32:
         cb:8a:c9:10:37:8a:f5:9c:4b:22:c5:21:ca:89:82:96:d9:ea:
         7f:f8:8c:5a:d0:68:99:52:d2:a6:a7:15:6f:b1:69:46:4e:b7:
         8e:04:3e:f0:15:99:28:44:9d:34:fb:5c:70:23:48:47:94:68:
         6e:e2:78:e6:59:64:74:29:ad:f0:c1:47:72:dd:c6:aa:a1:07:
         6a:1b:20:77:19:47:85:08:5b:b8:1f:4e:5f:24:51:ec:47:f4:
         4d:78:ea:44:90:d1:c4:ae:99:0b:61:91:4e:64:7e:0a:4f:4b:
         c5:7e:73:51:3f:bb:31:72:b9:88:a3:d0:ed:27:82:10:00:88:
         e2:59:51:d5:d9:f3:e8:05:2c:c6:71:40:ae:9d:cd:e8:16:cb:
         ca:6c:95:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:52:16 2026 by rpki-client