Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/d0fe400e-5bf5-36a8-a4aa-8fbc86a24126.roa
File:                     d0fe400e-5bf5-36a8-a4aa-8fbc86a24126.roa (raw, json)
Hash identifier:          +mdFfyuDr6w+ctEJh+fP7Psp+wk1oyXmi2KUV4fw+5c=
Subject key identifier:   86:ED:B2:95:11:8C:26:B1:15:D8:B0:61:6F:72:32:94:CA:6F:C2:37
Certificate issuer:       /CN=6d54b36a-c725-4c18-93e1-825afc645e2c
Certificate serial:       010D0C9F4328584EEEB75389E02076D1AD8D8CE0
Authority key identifier: 38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/d0fe400e-5bf5-36a8-a4aa-8fbc86a24126.roa
Signing time:             Sun 23 Aug 2026 13:00:12 +0000
ROA not before:           Sun 23 Aug 2026 13:00:12 +0000
ROA not after:            Sat 21 Nov 2026 14:00:12 +0000
asID:                     396982
IP address blocks:        23.227.35.0/24 maxlen: 24
                          23.227.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ee:b7:53:89:e0:20:76:d1:ad:8d:8c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d54b36a-c725-4c18-93e1-825afc645e2c
        Validity
            Not Before: Aug 23 13:00:12 2026 GMT
            Not After : Nov 21 14:00:12 2026 GMT
        Subject: CN=fc9edec4-f50f-43c3-9407-cc8ea387dacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8b:a5:16:39:e0:f7:d7:0d:fb:26:6c:ea:76:
                    60:06:53:03:4e:77:e3:2a:a1:cf:36:2a:68:5c:d1:
                    0f:33:7b:f7:3d:fb:a3:98:45:c4:1c:5c:9a:97:03:
                    8f:5b:00:37:9a:d7:6e:72:4d:59:9f:86:3f:31:f3:
                    b9:87:8c:3a:d7:19:f6:fd:a0:a3:40:53:b1:81:31:
                    3e:84:13:df:f3:e5:f9:bb:32:5d:c7:7a:64:0d:fa:
                    03:87:7e:da:6b:17:86:a4:4b:f6:c0:3b:41:cc:a3:
                    58:15:0f:7c:07:13:5f:54:0a:c9:01:e5:e0:cf:f6:
                    c6:fe:f6:0c:f5:92:52:60:00:95:fc:1c:67:46:81:
                    c7:ca:85:7c:e3:60:e7:4b:fd:af:77:b8:b7:59:2f:
                    85:64:1a:b3:f4:56:e0:54:bb:8f:f0:f1:3e:e7:6d:
                    ff:fc:10:80:c0:b1:8a:50:e9:ce:35:16:77:92:87:
                    c7:61:5e:48:88:ae:9f:e3:4c:8c:33:b3:cd:fb:45:
                    e1:c3:3e:94:70:b1:e9:34:b9:d4:09:d1:9d:4a:b9:
                    00:5b:13:64:90:23:bb:72:b0:a4:30:4c:37:00:2e:
                    7a:39:80:db:b6:44:45:6e:d8:3a:88:b7:8f:d4:60:
                    88:f8:73:05:70:63:73:70:d1:d9:83:ac:a7:06:0a:
                    d3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:ED:B2:95:11:8C:26:B1:15:D8:B0:61:6F:72:32:94:CA:6F:C2:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/d0fe400e-5bf5-36a8-a4aa-8fbc86a24126.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c/6d54b36a-c725-4c18-93e1-825afc645e2c.crl

            X509v3 Authority Key Identifier:
                keyid:38:58:D5:25:95:18:10:7B:1A:52:96:71:BD:B8:82:7B:C1:86:7D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6d54b36a-c725-4c18-93e1-825afc645e2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.227.35.0-23.227.36.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:01:f3:fc:6e:3a:5a:49:0d:67:09:10:b3:ec:fd:76:9a:c6:
         7e:93:77:3f:79:a0:0d:dc:e4:39:36:8b:a6:ca:62:e8:82:af:
         af:ae:c6:2a:71:0e:04:db:96:fa:00:74:1d:28:0f:55:49:7d:
         b8:a7:81:f0:86:be:92:af:f8:25:d7:a4:e5:7a:77:14:f3:8a:
         da:ca:94:4b:2e:77:19:58:6f:fd:2a:30:80:6b:2a:bc:e6:46:
         48:90:cf:cf:ef:1f:aa:74:a2:97:35:9c:77:c2:e5:33:01:de:
         6f:85:0a:57:b0:ea:4f:a8:59:d5:1e:b5:98:e2:9d:10:ed:8b:
         db:77:a1:6a:18:62:1c:35:80:9b:08:de:7f:07:a8:1e:d5:99:
         17:52:42:22:62:07:e8:03:f4:51:3a:47:09:ea:b1:68:ca:11:
         75:34:ae:1d:fd:59:b8:90:12:e1:67:22:75:0d:2e:98:02:96:
         d0:33:a1:9d:7b:90:d4:4a:74:68:9d:37:2b:6d:ae:b1:94:6c:
         aa:7b:eb:a2:d4:07:98:be:b0:f1:b0:4e:7a:9f:b1:ec:9e:5c:
         69:c9:86:cc:82:13:a2:e4:d1:2c:e0:d6:79:5b:c7:ac:f5:b6:
         59:e1:97:d3:cb:4c:35:5f:25:f3:58:07:55:8c:ba:1a:5d:49:
         81:88:67:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:21:04 2026 by rpki-client