Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa
File:                     a455dd01-9d1c-3f67-be86-99d30a672de5.roa (raw, json)
Hash identifier:          TMm59ImT/JjCt6Dfu+fETgK1JmGNe2Nvl+oL2QJ7pps=
Subject key identifier:   F6:05:44:F4:CA:8D:D9:9A:6C:AA:7F:38:EB:D6:C9:B1:87:39:8D:51
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584F497552D70761BB1CCB0C8F00
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     16417
IP address blocks:        23.90.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:75:52:d7:07:61:bb:1c:cb:0c:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=8996baef-c8b7-419d-935a-489d33d4698d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:26:b3:65:67:86:72:4c:ad:29:6b:5c:8e:7f:
                    b6:5c:05:ed:25:d2:e9:e8:19:92:d5:43:92:b3:43:
                    90:b2:dc:a1:d0:e5:99:29:16:95:35:80:85:9b:0a:
                    3c:53:39:61:cf:6e:83:fa:be:89:ef:d0:64:7a:60:
                    6f:95:c1:9e:e9:50:b6:e5:bc:b0:ce:31:ca:83:81:
                    5a:43:06:f2:1b:92:2b:ee:dc:8a:7c:35:ae:63:31:
                    50:32:ad:bd:29:3b:1b:2a:f7:59:b2:e2:fc:87:4d:
                    f3:51:91:7e:96:c2:03:e2:90:16:c6:f1:7d:b8:1c:
                    dc:84:78:b3:27:ef:2b:c4:e2:7d:17:7a:e5:8a:89:
                    a8:fb:b4:f7:bd:f6:d0:d6:06:49:62:90:88:a8:bd:
                    0f:f1:bc:54:f3:9e:80:79:36:cb:7e:80:9b:a7:59:
                    51:08:24:d9:a0:84:80:57:ca:2f:44:bf:b3:2c:9c:
                    f5:28:db:a3:ba:e6:8c:14:ba:7a:d2:bb:7a:5b:e2:
                    10:26:03:a5:01:43:41:cb:60:f5:6d:0e:72:f6:5a:
                    2b:b6:f7:1b:65:af:b7:36:ad:88:22:57:77:f1:81:
                    e0:4f:58:66:3c:82:de:3a:97:2e:4a:35:98:14:b5:
                    b0:4e:fb:49:4a:9a:8d:46:58:6a:31:7b:a2:62:d6:
                    a8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:05:44:F4:CA:8D:D9:9A:6C:AA:7F:38:EB:D6:C9:B1:87:39:8D:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/a455dd01-9d1c-3f67-be86-99d30a672de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.90.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:c3:79:61:4a:40:6b:f6:84:1f:ce:d4:1d:df:59:8b:2b:92:
         0e:d0:f1:bb:4c:6d:0b:22:51:6d:45:a7:95:7d:66:80:4c:03:
         ee:dc:d4:1d:18:11:3a:12:44:5a:9e:23:42:b2:4c:2c:91:6d:
         36:ba:0d:2d:a7:c2:8e:ac:12:d6:77:b5:24:13:86:9b:cc:e2:
         02:9a:63:32:3a:7a:e9:e6:b3:c3:fe:16:7c:b4:c4:75:2b:1c:
         5a:7f:dd:dc:dc:bf:bc:2f:dd:16:69:06:68:c3:c6:84:0d:66:
         f4:32:54:89:8a:9f:d3:27:ff:a9:f9:47:ee:49:57:0a:76:c3:
         b8:ce:e2:79:fc:95:30:8b:d0:f6:0b:20:88:73:0b:9f:e1:d8:
         4f:4e:61:37:51:17:b6:d6:52:36:e2:4e:94:3e:e9:00:cf:ff:
         58:44:4d:e2:3c:72:15:3d:b7:7f:7c:66:9f:de:a2:de:93:48:
         1e:4e:37:74:bb:c6:49:d8:6b:38:6c:5e:06:7f:7d:ee:de:13:
         16:8e:43:bf:c6:5c:22:f4:08:40:f3:25:43:0e:64:8e:91:90:
         9b:a0:c5:80:5d:72:ce:c8:4f:f3:0a:2b:d9:0d:9a:c9:de:f0:
         e7:03:80:1d:06:96:8a:3a:3a:17:28:f5:fc:1b:8d:3e:64:4b:
         bb:47:68:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:24:27 2026 by rpki-client