Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/327b49e1-a6e7-3668-8af0-2f2e9db1bfc9.roa
File:                     327b49e1-a6e7-3668-8af0-2f2e9db1bfc9.roa (raw, json)
Hash identifier:          ps0cBW4KD+eYHsCTYxJlaiAHIpjS66evutp4M8D26Qw=
Subject key identifier:   F8:D9:AD:FF:74:EE:18:91:32:53:9B:97:C7:21:2E:C9:EE:EE:33:70
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F4328584F0D6CFD83EB9DF8273670C680
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/327b49e1-a6e7-3668-8af0-2f2e9db1bfc9.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     40934
IP address blocks:        176.23.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Sep 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:fd:83:eb:9d:f8:27:36:70:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=7db72831-7e3c-4b51-9211-8fc3735fb00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7e:88:a8:4c:be:b3:07:83:0d:0f:48:49:34:
                    09:a2:cb:3c:ee:22:22:dd:f2:15:43:f0:fc:59:bd:
                    d5:ba:ca:20:5a:08:31:bd:e9:90:21:16:de:f7:78:
                    3b:98:da:20:c9:8a:88:4f:73:aa:d0:c8:9c:ac:0e:
                    e5:ec:50:82:c7:b0:36:b2:d9:25:1f:e9:6d:a8:2a:
                    f7:cf:04:7c:ab:c3:ee:7d:ac:fb:c3:16:7e:09:24:
                    80:79:3f:68:59:0d:ce:c8:4e:9b:3f:35:f6:96:8b:
                    e0:5d:46:a9:b2:f2:e7:2a:91:b4:7c:d4:31:1d:32:
                    a3:6b:e9:2b:fd:cb:b5:09:8d:d2:dd:cf:61:d1:b9:
                    79:39:d5:49:10:7c:db:d3:cd:a6:1f:09:ba:fc:f5:
                    8d:0e:63:f9:12:cb:c1:3f:18:d9:fe:39:f2:41:5c:
                    87:c3:fd:a6:53:16:ff:1e:55:77:57:28:06:ff:22:
                    87:b7:64:82:fb:e0:a6:66:bd:27:6f:40:06:92:d6:
                    d9:c3:15:b3:c7:f8:0a:a2:31:a4:0b:a8:90:b5:97:
                    c4:ae:60:3a:ad:da:8e:c0:fc:07:18:89:a0:67:a9:
                    71:fc:22:b9:db:3f:b1:1c:8c:0f:23:3b:c1:29:25:
                    d4:30:82:62:f0:02:5f:01:4d:ab:f9:f0:f8:00:58:
                    b6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D9:AD:FF:74:EE:18:91:32:53:9B:97:C7:21:2E:C9:EE:EE:33:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/327b49e1-a6e7-3668-8af0-2f2e9db1bfc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.23.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:ad:f0:70:8b:b3:6e:12:6e:60:5c:aa:4e:d5:9a:34:b3:b6:
         b6:08:e0:ee:6b:a2:e5:e9:62:2f:a9:07:a2:5c:61:1a:8c:49:
         cb:59:7c:d0:21:8a:84:0e:ed:5c:31:42:e5:c0:51:d6:f0:5d:
         de:d0:af:c7:f2:e7:34:4d:78:65:d8:dc:e8:5c:f8:ca:e8:d5:
         4f:dc:82:5b:42:a0:c9:03:a4:0c:02:08:8c:75:1a:f4:15:07:
         0b:62:ed:04:83:69:3e:ba:c2:f8:c5:03:c6:75:6f:04:3d:84:
         45:dd:2a:ca:e6:14:a1:2f:02:1a:a7:73:1e:29:6b:23:c2:f0:
         12:56:6c:4c:d1:18:06:6f:14:4f:95:85:04:f4:20:70:15:bf:
         7c:2f:69:b6:f4:58:9b:2f:4a:1d:50:e1:d6:1b:c4:7a:54:86:
         a0:8e:a3:52:f2:2f:15:73:b4:d9:97:26:ff:40:6a:24:00:52:
         2d:90:d3:ce:10:3e:b8:33:73:0a:ba:49:88:36:34:96:38:87:
         5e:d3:23:41:aa:62:d1:9a:6b:9f:3a:17:03:5c:31:07:4b:08:
         d0:0f:3f:df:b0:cb:0c:99:e4:e7:b2:57:74:59:26:94:20:95:
         e0:9c:22:27:4d:19:8a:b7:78:af:b6:7c:60:33:5e:83:a1:41:
         8a:33:f0:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 17:46:19 2026 by rpki-client