Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ac86771c-e752-31c9-b585-b3648e6eedd9.roa
File:                     ac86771c-e752-31c9-b585-b3648e6eedd9.roa (raw, json)
Hash identifier:          H6P+7m47q7H1FISWoSmzC75Xd9XxP3/QsZv5q0TSTww=
Subject key identifier:   01:41:39:56:80:D8:0C:F7:AF:1C:5D:58:5E:C8:06:90:0D:60:CE:41
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584F14679C8EC1EC627840BE3000
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ac86771c-e752-31c9-b585-b3648e6eedd9.roa
Signing time:             Sun 06 Sep 2026 01:00:11 +0000
ROA not before:           Sun 06 Sep 2026 01:00:11 +0000
ROA not after:            Sat 05 Dec 2026 02:00:11 +0000
asID:                     62904
IP address blocks:        23.90.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:14:67:9c:8e:c1:ec:62:78:40:be:30:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Sep  6 01:00:11 2026 GMT
            Not After : Dec  5 02:00:11 2026 GMT
        Subject: CN=e96f8c31-1079-46c8-8a9b-76013a8012dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b0:ad:af:c4:5d:3a:1b:15:40:28:35:71:c4:
                    54:b8:9b:7d:46:b9:1f:b1:98:ae:ad:b9:d8:8a:90:
                    98:49:16:04:9d:21:6e:d6:32:d2:3a:c1:b4:a8:e2:
                    9a:e3:78:be:aa:56:4a:ef:29:b2:5a:77:1b:7b:ce:
                    ad:d3:dc:7a:24:a9:bb:04:65:c5:eb:56:3c:48:20:
                    98:c1:2e:3f:0f:24:b3:8b:33:44:8a:26:5d:b9:cb:
                    ae:53:8d:76:2f:67:25:db:ec:29:ff:3f:04:69:dd:
                    1d:20:96:68:63:73:22:ee:05:81:f3:2f:88:c1:53:
                    1a:c8:53:45:91:be:a2:a8:22:41:c6:a4:bd:86:82:
                    79:eb:c1:27:5a:b7:62:2a:b7:be:35:55:26:3e:5e:
                    76:4f:81:8d:12:b2:56:68:f7:04:e9:70:15:b3:fd:
                    0b:c3:e7:0b:d5:8d:28:91:52:ae:3e:e3:45:f4:ae:
                    58:c9:44:44:95:55:ff:4d:8d:a8:3d:38:19:14:bf:
                    63:13:6b:b3:ab:8f:78:7d:0b:b1:85:47:d2:ef:87:
                    01:f7:ea:6a:84:df:03:f5:76:67:5d:cd:e1:a4:50:
                    a1:af:da:25:64:54:34:51:6e:76:bf:88:42:0a:76:
                    a5:95:82:0a:2f:09:31:b7:a1:62:7a:d4:ea:a3:1d:
                    27:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:41:39:56:80:D8:0C:F7:AF:1C:5D:58:5E:C8:06:90:0D:60:CE:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/ac86771c-e752-31c9-b585-b3648e6eedd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:bf:f9:ef:ee:1f:dc:38:ff:1c:06:f9:95:f0:ab:1b:53:e3:
         e5:27:53:c5:01:f0:be:69:d5:cf:4b:5f:2f:54:43:94:56:b8:
         97:b2:f1:89:3e:d7:e5:d0:55:d2:28:df:15:8d:02:e7:89:0c:
         9d:b6:5b:c3:21:54:9d:04:3a:70:61:3a:d4:d1:54:67:d7:50:
         c1:37:64:05:7a:be:0a:12:39:94:0e:47:8e:af:40:e3:16:9e:
         0f:93:6c:4e:ed:b9:fe:73:6c:79:7d:0f:1d:c5:74:9f:15:65:
         25:19:2d:71:e0:91:43:db:46:b0:e8:94:da:e6:5a:55:c7:6f:
         a0:6a:7f:aa:9f:2b:2e:91:ce:72:3d:1d:d8:11:cc:fe:16:c8:
         d3:83:a3:0e:99:28:9b:e2:95:05:90:7d:d2:d1:ee:4b:0b:82:
         6c:82:6c:17:6c:46:cc:95:2f:50:2b:75:24:8f:05:5a:93:65:
         fd:57:41:af:76:b3:b8:73:bc:19:18:14:10:77:dc:87:0a:95:
         82:14:69:ca:f1:2c:1a:60:3d:a7:c8:bb:e5:39:8b:4c:5d:17:
         dd:8f:d0:63:da:f3:25:61:40:7f:b9:09:89:3f:82:d6:05:77:
         91:2f:17:44:42:f3:ce:72:44:b5:98:76:fd:44:ad:e4:cb:3d:
         5d:7d:ac:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:04:23 2026 by rpki-client