Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/462e0c4f-949b-3b1a-a3c2-f14b23c8e16f.roa
File:                     462e0c4f-949b-3b1a-a3c2-f14b23c8e16f.roa (raw, json)
Hash identifier:          FwNqo5SRuLJyadgSao3I3J+D5BMch2+EtBx2TF2J+p8=
Subject key identifier:   97:CD:85:2C:F8:E5:64:35:F6:31:39:A3:50:F9:4B:6D:FA:AF:87:09
Certificate issuer:       /CN=32cbdaf6-e528-4a14-9e49-ebfdd566c487
Certificate serial:       010D0C9F4328584FA163299CE352CF8C155E2100
Authority key identifier: F4:5B:6D:52:7D:AC:DF:B3:6A:33:80:AE:4E:7E:0D:76:48:30:5E:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/462e0c4f-949b-3b1a-a3c2-f14b23c8e16f.roa
Signing time:             Mon 26 Oct 2026 13:00:14 +0000
ROA not before:           Mon 26 Oct 2026 13:00:14 +0000
ROA not after:            Sun 24 Jan 2027 14:00:14 +0000
asID:                     1075
IP address blocks:        23.152.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a1:63:29:9c:e3:52:cf:8c:15:5e:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32cbdaf6-e528-4a14-9e49-ebfdd566c487
        Validity
            Not Before: Oct 26 13:00:14 2026 GMT
            Not After : Jan 24 14:00:14 2027 GMT
        Subject: CN=9fe652dd-266d-4fbe-a0d9-1d81a41a34cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2e:eb:0b:e7:b4:b7:5d:b8:c7:c4:9b:54:fb:
                    c6:bb:b1:b0:0a:10:0d:98:ac:7f:09:20:03:ac:20:
                    88:44:f1:3c:f5:84:97:b3:4d:99:bf:a0:eb:2b:ad:
                    6c:04:03:38:f4:83:aa:e6:d7:aa:62:9c:fb:7d:e7:
                    a5:b5:2e:89:7c:40:95:9d:3d:6a:8b:2b:79:68:b5:
                    fa:76:bd:03:54:c0:5c:9a:f0:39:77:f0:fd:aa:81:
                    95:94:c0:a3:1b:fd:f2:3a:8c:70:f3:0b:1e:95:3e:
                    14:bf:27:b3:62:79:41:b3:10:58:46:cf:40:8f:81:
                    fb:33:d3:10:af:ce:ab:c8:0b:be:a4:08:62:cc:ee:
                    50:91:f6:c7:d5:c6:2d:d4:1e:6a:63:05:0d:01:29:
                    94:01:d9:af:95:c9:ec:bc:1d:74:55:7e:2a:f2:cb:
                    26:ea:20:5f:6d:df:7d:7f:eb:dc:bf:6d:ea:ce:f1:
                    83:aa:4d:f6:da:6c:7e:70:ad:18:b0:68:e7:b6:be:
                    cc:cc:97:c5:59:c1:a4:26:fa:7c:a8:30:20:f8:b5:
                    75:a5:61:b1:c3:72:83:a8:4a:0c:d0:e2:a2:17:03:
                    b0:c4:cc:2b:bd:48:81:f3:ac:29:14:7a:b8:23:fb:
                    74:78:e3:30:e5:f8:8c:70:4b:89:2b:f0:56:7a:fb:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CD:85:2C:F8:E5:64:35:F6:31:39:A3:50:F9:4B:6D:FA:AF:87:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/462e0c4f-949b-3b1a-a3c2-f14b23c8e16f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487/32cbdaf6-e528-4a14-9e49-ebfdd566c487.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5B:6D:52:7D:AC:DF:B3:6A:33:80:AE:4E:7E:0D:76:48:30:5E:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/32cbdaf6-e528-4a14-9e49-ebfdd566c487.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:44:bf:1b:8d:74:6a:82:95:35:3b:d0:bf:7c:0d:91:c9:e2:
         94:75:7b:6c:53:55:b9:47:65:f0:8b:32:ab:ac:36:52:a3:51:
         48:c4:4c:94:03:c2:07:06:cb:ba:81:6f:fc:5c:a3:96:35:f8:
         09:00:aa:26:16:9c:b8:9b:d3:43:d3:32:45:03:81:b3:4f:b3:
         0b:ae:ec:4a:78:7f:44:cc:6f:b5:50:f0:6d:f1:45:55:f7:60:
         d9:da:01:34:0e:7c:05:98:a9:ec:73:b7:d9:b2:82:8c:ba:f4:
         03:1f:23:ca:1b:ad:2f:67:a3:a4:c9:26:07:f0:ef:aa:12:05:
         71:77:c7:fd:71:e6:77:b7:47:fb:a3:d2:9b:ac:ad:27:24:a0:
         c3:73:fa:ed:60:bb:98:6b:3b:2c:fc:43:3b:88:c5:12:8f:0c:
         1a:78:50:dd:ac:bc:93:60:c3:30:50:cf:62:59:f2:5f:48:82:
         1c:53:2c:ba:e3:e7:17:49:75:f9:86:fc:9d:3a:f5:87:b5:c5:
         28:d4:50:a4:dd:5e:eb:2c:d5:ec:d6:d6:65:7b:7c:a4:7f:9c:
         79:40:76:27:80:0c:ae:e3:bc:b3:30:df:e7:3d:67:40:2d:45:
         c5:51:21:00:9f:05:8c:48:12:87:09:f9:c0:4a:ee:81:b5:11:
         4c:7f:91:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:31:33 2026 by rpki-client