Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb47fd58-1b0f-4811-9575-772ff1792937/1e2d93e3-e28c-3820-bd3e-5d253f2bad13.roa
File:                     1e2d93e3-e28c-3820-bd3e-5d253f2bad13.roa (raw, json)
Hash identifier:          tmmg+xbZNsJchldNWXJSxy8ZdayBj+fDMMslj+le4fI=
Subject key identifier:   18:64:AC:50:12:21:32:BC:38:AB:A1:CD:87:4C:48:ED:5C:45:38:CC
Certificate issuer:       /CN=fb47fd58-1b0f-4811-9575-772ff1792937
Certificate serial:       010D0C9F4328584F5E62D05BB95F0B4F6B44A158
Authority key identifier: 53:CE:D6:E7:21:C3:F1:52:88:CA:A1:CB:BB:AD:91:3E:EE:E4:66:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb47fd58-1b0f-4811-9575-772ff1792937.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb47fd58-1b0f-4811-9575-772ff1792937/1e2d93e3-e28c-3820-bd3e-5d253f2bad13.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     54004
IP address blocks:        23.142.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb47fd58-1b0f-4811-9575-772ff1792937/fb47fd58-1b0f-4811-9575-772ff1792937.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb47fd58-1b0f-4811-9575-772ff1792937/fb47fd58-1b0f-4811-9575-772ff1792937.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb47fd58-1b0f-4811-9575-772ff1792937.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:d0:5b:b9:5f:0b:4f:6b:44:a1:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb47fd58-1b0f-4811-9575-772ff1792937
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=6d4c9667-a569-4635-9c04-6c00f17269b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a3:eb:4c:da:35:88:b8:15:c7:21:f3:79:90:
                    8d:ad:68:f2:55:0d:ea:52:5f:79:6a:a4:66:1b:0a:
                    8f:7e:81:ae:b0:3b:26:18:c9:d0:2d:9d:0d:b4:27:
                    6b:1d:6e:b0:65:dc:8c:1b:1d:b9:2d:3c:53:bf:ca:
                    88:3f:97:3a:76:ee:49:e2:5f:7b:24:6e:aa:4b:bb:
                    57:1e:9a:2d:4e:a6:ca:ac:32:e2:bd:63:09:1b:99:
                    00:4b:d6:df:19:af:2f:08:43:8a:a4:28:d2:83:e2:
                    90:e7:45:05:f5:fa:12:82:10:bd:42:fa:09:36:fc:
                    10:23:20:9a:ad:44:ec:89:cc:ea:d7:1a:05:e4:9c:
                    88:41:0b:82:57:d5:13:13:ce:f6:22:a4:d8:4e:ca:
                    38:85:15:0b:45:40:0a:a3:b4:8d:a4:5e:2c:66:f5:
                    1c:db:af:6c:79:60:a7:ab:49:4b:51:59:98:d4:78:
                    0e:76:69:6b:1e:1a:10:b1:72:28:15:7c:26:86:06:
                    81:99:ec:a4:a4:d1:de:dd:d9:ea:77:e8:27:c6:07:
                    3e:15:bc:10:30:c0:18:d4:c3:5e:de:6f:78:36:97:
                    6a:e5:52:93:63:48:3c:34:f3:97:1a:f1:fa:b1:ed:
                    28:e2:80:7e:73:d0:01:fe:8e:d9:55:3e:fa:db:44:
                    0b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:64:AC:50:12:21:32:BC:38:AB:A1:CD:87:4C:48:ED:5C:45:38:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb47fd58-1b0f-4811-9575-772ff1792937/1e2d93e3-e28c-3820-bd3e-5d253f2bad13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb47fd58-1b0f-4811-9575-772ff1792937/fb47fd58-1b0f-4811-9575-772ff1792937.crl

            X509v3 Authority Key Identifier:
                keyid:53:CE:D6:E7:21:C3:F1:52:88:CA:A1:CB:BB:AD:91:3E:EE:E4:66:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fb47fd58-1b0f-4811-9575-772ff1792937.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:03:17:19:6a:5b:e5:86:8f:e1:30:de:df:b3:aa:c8:23:a7:
         56:18:11:fc:ae:25:bf:7c:2c:9e:97:a7:b2:05:aa:8e:25:12:
         4c:ad:78:3d:57:15:9c:b2:24:61:a4:b5:83:4f:18:e1:9a:dd:
         40:b5:71:7c:70:ed:41:37:7e:76:2a:50:e9:62:e1:e4:92:bd:
         4d:c7:8d:85:f3:1a:ce:0e:6c:3c:a1:e6:23:96:77:61:ac:a5:
         77:96:f6:54:3e:78:de:ba:80:85:8e:8c:30:2e:5e:a3:6f:f9:
         55:94:af:ac:58:fa:8d:17:64:ee:75:3d:f0:f2:ec:24:a1:7f:
         c8:f2:21:4a:de:b9:b9:45:d8:fa:c9:ca:7b:15:67:95:0c:00:
         e1:2b:28:5d:8b:93:f6:fd:e1:d1:99:e4:d8:b3:a4:5a:44:e7:
         04:8d:5c:14:b2:2e:b6:e9:8a:92:14:fc:48:ba:51:27:c2:e1:
         13:40:62:73:d9:6c:ec:b2:17:f2:ca:0b:97:42:19:ea:a5:b3:
         9b:c0:75:db:b8:46:f1:fe:ad:a8:da:42:6f:24:11:ee:be:d8:
         63:2a:23:00:dd:36:6d:02:d0:17:bc:35:b4:f1:a7:a8:58:d8:
         2c:90:a1:13:2a:be:50:c0:84:d0:13:97:f8:16:f4:de:18:ff:
         5f:4a:61:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:43:17 2026 by rpki-client