Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/08f211f4-c803-3a2b-8789-7c3e9179c82e.roa
File:                     08f211f4-c803-3a2b-8789-7c3e9179c82e.roa (raw, json)
Hash identifier:          Qrrr8syygAhblSf8I+E6tIseQZ4Ogtiv0jwVzSiIpVE=
Subject key identifier:   B0:34:65:88:EE:A7:04:06:8A:90:82:C1:23:2D:C9:30:B9:43:46:92
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584EF9E21E9265ED389137C1EA00
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/08f211f4-c803-3a2b-8789-7c3e9179c82e.roa
Signing time:             Thu 27 Aug 2026 13:00:12 +0000
ROA not before:           Thu 27 Aug 2026 13:00:12 +0000
ROA not after:            Wed 25 Nov 2026 14:00:12 +0000
asID:                     31898
IP address blocks:        176.23.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f9:e2:1e:92:65:ed:38:91:37:c1:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Aug 27 13:00:12 2026 GMT
            Not After : Nov 25 14:00:12 2026 GMT
        Subject: CN=fac713bb-66a8-4908-92ce-61613f7a4b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:5b:2f:a1:de:fb:4f:d2:43:fe:e0:19:37:6b:
                    00:62:2b:68:1e:db:9c:b4:50:33:d6:15:c6:97:1b:
                    b9:32:ad:e0:c5:31:3e:3a:0a:64:c6:8f:3a:d1:15:
                    8a:08:b1:00:b1:73:77:65:58:1e:33:73:00:a0:e9:
                    fb:9f:10:96:73:3a:c2:75:01:b1:c2:42:0a:de:08:
                    1b:f0:33:5d:ae:6d:3f:fc:8c:0a:9c:33:f1:4e:5a:
                    86:46:ae:11:e7:14:72:65:4c:f9:cc:ee:63:92:97:
                    09:57:cc:b1:cb:cf:02:e3:e0:63:69:d6:da:d3:2e:
                    b3:42:c8:b3:72:1f:6e:1f:3a:02:74:d6:db:bd:97:
                    a6:5e:94:5b:90:43:d8:8f:5d:50:3a:a2:2d:40:d0:
                    ee:72:0d:f4:6a:a0:82:64:07:cf:e0:a0:10:ae:cd:
                    66:ce:6f:ce:87:55:66:9e:8a:e7:1e:70:92:d3:f9:
                    21:f3:df:93:33:05:ac:26:2f:f6:13:f0:87:ee:df:
                    ea:ca:22:06:d7:3c:cb:15:e8:22:b2:fc:88:94:33:
                    66:61:93:b9:93:16:26:58:b7:4f:82:5d:3f:7b:d0:
                    16:d9:9a:f7:f4:fc:4e:a3:bf:76:92:da:03:ec:48:
                    26:aa:ca:04:81:5e:b7:6a:ea:7c:19:a8:8d:fe:e4:
                    fa:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:34:65:88:EE:A7:04:06:8A:90:82:C1:23:2D:C9:30:B9:43:46:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/08f211f4-c803-3a2b-8789-7c3e9179c82e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.23.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:f6:a7:f5:d5:4e:98:b3:80:ee:62:9f:71:b8:3c:52:34:11:
         11:b7:df:2e:dc:8e:da:83:9a:19:a7:39:16:f6:e8:45:b8:f2:
         bc:04:f7:50:66:a6:a3:2b:67:b5:84:f4:38:e0:a7:fa:06:99:
         2e:75:e4:6c:6b:e0:92:80:e8:ca:6f:c3:16:8f:8e:90:3a:f5:
         11:aa:61:01:ce:a3:72:d4:ac:9f:6f:3c:21:cb:d5:98:5d:39:
         1b:f8:49:a4:09:fd:69:a4:a2:28:b6:15:90:97:81:df:11:ac:
         9a:aa:0e:03:78:6c:3f:bb:a9:33:bb:c9:f6:82:94:ea:f8:96:
         1c:17:f2:4c:4e:fb:45:67:3d:34:1f:af:d7:62:eb:2d:58:10:
         d3:1e:f0:bf:36:2a:01:e4:c0:60:ef:cd:73:6c:e0:35:9a:ab:
         a7:60:b1:00:eb:ce:3e:dd:62:43:44:cb:d5:b7:19:0f:36:e2:
         79:cb:9b:a5:f4:0a:1f:56:7d:10:5a:70:45:97:d5:46:ef:0b:
         85:35:c8:68:8d:e9:a1:f8:cc:c4:25:d3:b0:01:3b:3d:a5:30:
         c3:77:48:ef:99:c9:eb:3f:49:22:b8:b7:ed:96:8a:0b:fb:a8:
         91:01:d0:26:51:2e:f2:0a:4d:66:0c:e0:b6:ff:a1:2d:a1:21:
         ab:42:cd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:41:59 2026 by rpki-client