Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/04579b92-c2ba-3e85-be33-ca6770cc41b1.roa
File:                     04579b92-c2ba-3e85-be33-ca6770cc41b1.roa (raw, json)
Hash identifier:          vpgXoFiFQWPdeRjDVIiEWQRFapN3r71V4wODta1ypuU=
Subject key identifier:   27:FC:6C:8D:23:67:AA:35:F6:F3:6B:05:7D:59:6E:CC:B8:1D:29:CB
Certificate issuer:       /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f
Certificate serial:       010D0C9F4328584FD0F692089AC8092834DFDE00
Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/04579b92-c2ba-3e85-be33-ca6770cc41b1.roa
Signing time:             Thu 12 Nov 2026 14:00:13 +0000
ROA not before:           Thu 12 Nov 2026 14:00:13 +0000
ROA not after:            Wed 10 Feb 2027 14:00:13 +0000
asID:                     211392
IP address blocks:        23.145.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d0:f6:92:08:9a:c8:09:28:34:df:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f
        Validity
            Not Before: Nov 12 14:00:13 2026 GMT
            Not After : Feb 10 14:00:13 2027 GMT
        Subject: CN=904e33d8-59f2-4460-b337-62f53e627f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:22:dd:5b:7f:20:e6:5a:24:11:6f:6c:91:5a:
                    36:66:31:8d:04:85:0e:52:85:5b:ba:74:ca:68:d4:
                    63:0b:84:65:73:36:2f:29:c9:fe:3b:4f:d9:98:4a:
                    c1:cb:a3:80:d1:e3:db:52:8e:18:54:c6:a3:f0:1a:
                    c5:47:27:28:4d:6a:2d:d7:0b:be:b6:b6:b0:0b:c0:
                    9f:c4:75:be:af:79:1a:d2:7d:5a:d0:34:ce:8d:c2:
                    03:72:dc:65:6d:af:36:15:9c:23:13:83:78:d9:31:
                    a7:c1:a7:39:98:df:30:da:dd:c6:be:76:12:6c:52:
                    11:a2:7d:ac:16:4f:47:c1:85:87:82:5b:bd:71:fa:
                    c0:42:fe:dc:6f:fd:e4:cc:8f:cf:39:53:2d:04:b9:
                    77:74:81:48:6a:f0:d0:3a:12:30:08:96:2f:35:a5:
                    8e:34:e6:6f:97:9d:4e:38:ba:37:4b:3b:c7:e2:7e:
                    f4:0f:42:c2:27:f1:02:23:20:3a:62:a3:ee:9a:70:
                    55:d2:14:e5:38:86:01:42:35:e5:01:41:d4:12:30:
                    cc:0c:86:d0:a4:62:04:03:ae:0a:04:d7:25:cf:bf:
                    06:b6:0e:4a:92:cb:ed:8e:b4:e5:ab:e9:a2:3c:50:
                    79:78:b8:f9:65:26:af:12:99:65:38:94:fe:80:35:
                    93:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FC:6C:8D:23:67:AA:35:F6:F3:6B:05:7D:59:6E:CC:B8:1D:29:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/04579b92-c2ba-3e85-be33-ca6770cc41b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl

            X509v3 Authority Key Identifier:
                keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.145.136.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:78:c9:db:f1:e6:d6:49:8d:2e:cb:9b:7c:56:83:39:04:b0:
         08:0a:04:21:c4:9b:db:91:f6:81:66:b3:6c:28:e6:2f:68:c4:
         e0:69:15:eb:38:64:2e:d6:d6:de:af:d2:86:98:5b:2d:8e:20:
         cb:f8:26:04:1f:f7:45:05:2b:4a:53:71:19:5b:a3:88:44:79:
         2f:35:96:a7:cd:aa:54:4f:9b:47:8b:c6:25:cc:cc:19:92:03:
         90:84:e0:96:8b:e8:f1:e5:6d:45:ba:97:01:fb:25:64:0a:12:
         07:70:91:17:f7:45:6c:cc:ed:ca:5c:e1:61:66:a4:af:f1:9b:
         ca:fe:09:19:16:6a:ed:97:bd:7f:ea:14:7b:8a:3a:28:0a:bb:
         1b:d6:c5:b5:6e:7d:aa:d4:70:53:aa:45:d5:fe:c9:76:af:fe:
         c8:2c:c3:92:5b:5c:69:f5:02:97:c8:14:fa:8d:84:d2:3d:a3:
         5c:5e:e6:43:0c:12:9a:84:e9:1c:31:76:d8:b4:a3:3e:86:5c:
         47:ce:98:6d:1c:85:87:45:b5:36:9c:ee:98:b8:18:4e:06:4c:
         ad:1a:18:3f:69:a3:24:0d:00:a4:59:b2:26:6c:30:70:42:94:
         75:28:46:53:eb:da:dd:3a:09:19:15:58:ed:3b:ae:e4:a1:3f:
         ec:cf:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:05:45 2026 by rpki-client