Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fe2b61bd-b4b3-37fe-bd4f-ea193e2435d0.roa
File:                     fe2b61bd-b4b3-37fe-bd4f-ea193e2435d0.roa (raw, json)
Hash identifier:          Zuo5yYywX4bOtPHN/bBjY4Osb3niVxSS2vgUyqw7/cg=
Subject key identifier:   F6:56:B5:0B:AA:DB:A6:B0:71:6F:D4:6B:1D:56:D8:D7:E2:B7:17:FB
Certificate issuer:       /CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
Certificate serial:       010D0C9F4328584FA5932A4C0CBCD17E28A94FC0
Authority key identifier: AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fe2b61bd-b4b3-37fe-bd4f-ea193e2435d0.roa
Signing time:             Wed 28 Oct 2026 01:00:13 +0000
ROA not before:           Wed 28 Oct 2026 01:00:13 +0000
ROA not after:            Tue 26 Jan 2027 02:00:13 +0000
asID:                     396982
IP address blocks:        23.89.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a5:93:2a:4c:0c:bc:d1:7e:28:a9:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=788d2b41-bb64-40d8-b274-ba4704d79ddf
        Validity
            Not Before: Oct 28 01:00:13 2026 GMT
            Not After : Jan 26 02:00:13 2027 GMT
        Subject: CN=926d2d64-29df-4b96-8a11-a31e797f262c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:99:34:d8:bb:e0:14:9c:6d:09:03:aa:93:ef:
                    25:9d:d8:65:42:fc:c1:75:36:15:67:69:08:0d:18:
                    99:ae:3c:37:46:01:22:8d:6e:bd:ba:a6:57:38:9a:
                    e3:e2:8d:0f:59:39:cd:7a:5f:88:3c:61:8c:a5:70:
                    d3:57:ec:4a:b3:89:61:a8:98:5b:16:b1:0c:37:04:
                    72:08:a3:7b:3b:66:67:ed:4e:4a:a3:26:af:31:a8:
                    a9:7b:5c:71:f1:58:9f:de:03:1b:18:00:de:0b:47:
                    9b:9f:d8:72:45:57:19:13:84:77:1c:cb:1d:d7:8d:
                    12:2d:ec:ab:bd:55:c7:9a:f0:ca:2e:99:b1:c8:3b:
                    99:2b:7a:4a:e2:e6:c4:d6:23:1f:89:fa:56:ee:c2:
                    6f:b9:70:bc:f2:96:82:91:5f:a7:22:63:00:dd:46:
                    c1:ad:9f:6f:c2:07:35:3f:bd:d6:17:67:84:55:38:
                    9d:37:f5:02:29:c9:54:7d:bb:ff:25:4d:5b:e6:b4:
                    d0:a8:67:33:a8:54:dd:07:d0:1f:46:27:a6:6d:d0:
                    f2:4b:71:ca:99:2b:eb:c6:b3:ed:39:97:a7:76:87:
                    5d:64:e0:14:af:ef:af:73:eb:32:5a:70:46:25:7f:
                    98:68:c6:47:dd:ed:6d:9c:ad:8e:56:2a:ea:00:e4:
                    b7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:56:B5:0B:AA:DB:A6:B0:71:6F:D4:6B:1D:56:D8:D7:E2:B7:17:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/fe2b61bd-b4b3-37fe-bd4f-ea193e2435d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf/788d2b41-bb64-40d8-b274-ba4704d79ddf.crl

            X509v3 Authority Key Identifier:
                keyid:AD:09:AD:0B:C2:D8:78:51:C9:9F:A7:31:63:47:B8:D6:6C:D6:E5:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/788d2b41-bb64-40d8-b274-ba4704d79ddf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.89.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:e1:5f:7a:fc:7d:13:48:ca:eb:73:fc:69:9d:cd:ea:c0:bc:
         32:6b:8f:ff:4b:fb:6b:a9:c7:cc:ed:aa:d8:94:d0:bd:55:de:
         34:17:0f:1c:00:1c:23:f5:3a:f1:e2:ee:f3:49:dc:5f:e7:cd:
         63:14:68:08:23:e4:a2:53:65:75:5c:4a:25:18:ad:8f:37:9d:
         ac:fe:2b:a6:a9:aa:84:40:29:3b:2e:9a:7a:49:99:8a:c0:98:
         8c:1c:f1:73:cb:45:54:31:74:8e:15:12:99:b5:27:37:71:94:
         29:f9:3f:c8:08:7a:6f:55:f2:a5:62:d1:c0:24:d5:15:d3:27:
         62:76:af:66:e9:4c:65:12:c7:6a:d0:0a:28:55:cf:4a:a3:b4:
         b1:62:f6:f6:86:1a:7b:39:6f:f8:7f:ac:3b:1d:71:10:03:65:
         33:40:29:e2:e2:20:fe:5f:54:3e:eb:a0:94:ed:b8:56:d2:10:
         b0:44:80:5c:62:6a:33:1a:c5:db:35:75:c6:21:7e:1d:7d:d1:
         a1:db:54:f0:09:15:d1:02:16:63:af:1a:54:b7:15:df:d2:ce:
         10:66:b2:b8:7d:be:38:98:f5:3c:81:73:4c:30:d5:6c:27:44:
         21:42:d3:af:96:7d:b9:ec:42:f1:4f:ed:26:09:45:d4:0c:d1:
         55:c7:2b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:23:33 2026 by rpki-client