Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22df5505-0a1f-3ad9-979b-5809bca3a777.roa
File:                     22df5505-0a1f-3ad9-979b-5809bca3a777.roa (raw, json)
Hash identifier:          3EGWIUiHeDj9tHadkMZZMBeEHIeI9EMfF2SmL+BiZMg=
Subject key identifier:   9F:AF:67:03:41:C1:DB:8C:96:D1:8B:36:EC:1C:90:4D:E6:D5:78:3C
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584F497D42BEAF8462D302E1C7C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22df5505-0a1f-3ad9-979b-5809bca3a777.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     20940
IP address blocks:        23.56.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7d:42:be:af:84:62:d3:02:e1:c7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=23be7ccc-bee6-4d88-9082-d7e6df203860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:46:bf:bd:28:4b:a9:82:bb:a6:46:4f:b0:
                    6c:d2:e0:be:2d:69:e4:10:4f:4e:60:8d:ed:92:55:
                    a2:43:2f:39:13:bb:77:d9:47:87:65:25:63:40:e9:
                    6d:41:48:51:3d:85:1b:43:22:52:a6:81:e0:12:1e:
                    68:07:c0:73:a7:c1:74:0b:4f:41:7b:78:5e:5b:5f:
                    4c:70:37:2c:59:b5:06:62:f4:47:c4:48:85:ef:db:
                    52:96:49:1b:4a:0b:16:46:93:14:f3:a0:8e:28:2c:
                    a4:21:c8:ce:e4:d6:63:71:12:35:61:2c:87:88:9c:
                    46:c1:5b:f2:6f:2a:ee:0f:5c:a8:61:27:a5:9b:0a:
                    c4:c1:f7:37:89:93:ee:60:97:38:81:9d:4c:9e:1e:
                    91:62:48:e6:b8:28:63:37:8d:da:70:db:93:3c:2d:
                    ee:4d:5b:33:69:02:11:0e:5c:7e:10:20:9a:6d:45:
                    c6:7d:6a:8f:be:bb:32:47:22:76:5b:81:bd:f3:0f:
                    4e:05:68:27:a8:65:16:4d:ee:de:8f:65:e0:28:6f:
                    7f:f6:c1:29:99:f2:e5:cf:7c:c4:fe:2e:2b:9c:d4:
                    4f:57:cf:53:38:8a:78:a5:d8:8b:35:19:82:c1:48:
                    5e:17:3a:29:83:2e:25:2b:12:e9:7b:34:d8:89:60:
                    e2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:AF:67:03:41:C1:DB:8C:96:D1:8B:36:EC:1C:90:4D:E6:D5:78:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/22df5505-0a1f-3ad9-979b-5809bca3a777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.56.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:ac:a9:9e:36:71:ad:af:0b:a1:91:9c:c7:3a:74:34:6d:a5:
         49:17:09:4e:9c:e0:30:9a:0c:22:f4:88:2c:cc:fd:36:df:81:
         2f:9d:e0:63:cb:90:c9:d3:e5:7d:c6:8b:75:9e:39:cd:f0:32:
         9e:16:c1:ee:1c:7b:5f:39:af:43:d9:73:2e:ba:29:4b:21:12:
         08:da:aa:bd:9d:e1:5e:ef:25:44:95:d7:a6:e7:e9:d6:2c:75:
         64:12:a9:20:18:1d:9b:88:11:a7:9a:ee:fd:45:ed:5a:96:67:
         b8:24:21:ff:c2:52:e2:02:3a:76:cb:f5:45:4a:c8:b0:f4:ae:
         b1:c3:11:bf:e5:c0:b4:f6:48:63:6c:c9:5a:12:59:34:a1:49:
         52:6c:7d:bd:37:48:e0:44:0a:d4:c5:a2:f1:fa:d0:b8:b5:69:
         5d:79:ab:cf:39:53:34:b9:af:61:80:2b:00:a7:2d:98:13:3d:
         ea:ff:e4:00:ca:30:4d:11:13:77:c6:c7:80:d8:57:14:19:dd:
         fc:b6:20:c9:1b:5a:57:6e:3d:88:25:03:88:5e:33:8e:5b:6f:
         98:cb:15:05:de:7f:f2:be:6a:1a:61:e2:61:d6:55:9a:85:dc:
         88:f1:ba:97:f6:2e:80:b0:ce:36:b1:48:c8:1a:8a:24:0c:11:
         0d:35:5d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:37:55 2026 by rpki-client