Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b3259b06-5195-4656-a7a1-7a647e6a7dc3/6778c42a-eb5e-3033-a2cf-1711a75c4c62.roa
File:                     6778c42a-eb5e-3033-a2cf-1711a75c4c62.roa (raw, json)
Hash identifier:          AlLPeK7EdLredhULxk1btGlQjSdP5DQx4Y8T/TKLIeo=
Subject key identifier:   C3:6E:E4:1B:03:6C:12:C8:74:E0:73:EA:1D:31:43:6C:CA:B3:8B:BB
Certificate issuer:       /CN=b3259b06-5195-4656-a7a1-7a647e6a7dc3
Certificate serial:       010D0C9F4328584F62FB24BA790B711234A9FD80
Authority key identifier: 3E:8C:F0:85:18:52:F0:D9:82:2C:55:1E:83:CB:85:FC:CF:2D:F2:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b3259b06-5195-4656-a7a1-7a647e6a7dc3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b3259b06-5195-4656-a7a1-7a647e6a7dc3/6778c42a-eb5e-3033-a2cf-1711a75c4c62.roa
Signing time:             Sun 04 Oct 2026 04:30:41 +0000
ROA not before:           Sun 04 Oct 2026 04:30:41 +0000
ROA not after:            Sat 02 Jan 2027 05:30:41 +0000
asID:                     396962
IP address blocks:        23.164.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b3259b06-5195-4656-a7a1-7a647e6a7dc3/b3259b06-5195-4656-a7a1-7a647e6a7dc3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b3259b06-5195-4656-a7a1-7a647e6a7dc3/b3259b06-5195-4656-a7a1-7a647e6a7dc3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b3259b06-5195-4656-a7a1-7a647e6a7dc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:62:fb:24:ba:79:0b:71:12:34:a9:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3259b06-5195-4656-a7a1-7a647e6a7dc3
        Validity
            Not Before: Oct  4 04:30:41 2026 GMT
            Not After : Jan  2 05:30:41 2027 GMT
        Subject: CN=d0020241-c7a4-4d1f-b615-f6833d586dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:1d:c5:71:b2:d1:9d:e2:9a:18:d2:fd:d7:
                    65:29:52:43:49:f3:dd:6e:82:bd:09:b1:5f:3f:97:
                    8c:41:dc:1e:d5:0d:0e:8a:f2:b3:aa:b3:c9:81:7f:
                    6d:29:d9:f7:c5:7f:ac:b5:77:c1:11:01:3b:3f:55:
                    28:e8:d6:77:56:34:ab:53:38:26:b6:54:31:2b:63:
                    e5:98:8d:8a:7f:8c:c3:7f:5c:3a:90:7f:76:b9:d1:
                    8e:2b:83:39:23:30:44:c3:8c:c5:a1:9a:4f:7e:be:
                    8e:dc:4b:ec:42:71:d3:04:3b:2b:8c:4e:03:0c:42:
                    c0:bb:99:5d:8e:cf:e0:0b:c1:c3:86:a1:7f:fd:6d:
                    01:ea:1a:7f:f4:b3:c2:38:97:d1:e7:f8:6f:e2:ea:
                    f9:3d:7f:e0:12:c8:82:bc:2f:16:b0:c5:52:54:fd:
                    e2:9f:e0:29:c9:22:0a:d5:f5:30:76:00:08:49:0c:
                    8e:49:4b:31:cd:7d:62:f7:a6:bf:7a:3c:27:58:20:
                    d8:fd:17:e2:2f:7c:9a:b5:e0:ff:56:58:62:a3:f7:
                    17:e0:e6:cd:38:3b:0b:ae:1c:03:0a:db:f5:64:b0:
                    17:51:a9:c3:57:87:2f:9f:f9:15:71:01:35:7f:f4:
                    16:34:26:2a:d3:99:9d:b9:79:61:a3:5b:ab:06:e0:
                    6d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:6E:E4:1B:03:6C:12:C8:74:E0:73:EA:1D:31:43:6C:CA:B3:8B:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b3259b06-5195-4656-a7a1-7a647e6a7dc3/6778c42a-eb5e-3033-a2cf-1711a75c4c62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b3259b06-5195-4656-a7a1-7a647e6a7dc3/b3259b06-5195-4656-a7a1-7a647e6a7dc3.crl

            X509v3 Authority Key Identifier:
                keyid:3E:8C:F0:85:18:52:F0:D9:82:2C:55:1E:83:CB:85:FC:CF:2D:F2:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/b3259b06-5195-4656-a7a1-7a647e6a7dc3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:98:8d:d1:3c:e9:7d:13:f6:1c:a8:64:d5:82:a6:26:61:30:
         e1:32:83:0a:e5:c5:29:3f:39:36:a8:22:40:a2:1a:73:57:b3:
         06:b8:0e:02:2c:85:0f:47:21:c2:8b:51:b7:57:6c:ee:b1:c4:
         30:f7:ea:12:0d:da:79:00:46:35:fc:ae:b1:21:47:c1:87:70:
         8c:c6:0f:70:d2:9d:a0:a4:b7:f4:c5:99:89:1b:7a:0a:1a:47:
         6a:14:f6:5f:c6:68:99:96:8b:07:5e:34:e1:e5:99:de:89:95:
         66:30:93:48:8a:52:42:c2:5e:b3:6e:96:31:16:56:14:7f:0a:
         59:ba:9e:a3:ea:35:9f:5e:6f:f3:42:ca:d5:4a:a2:b8:b7:b5:
         24:5c:b2:80:3a:f8:d4:ab:a1:40:77:a3:19:80:62:c6:cb:5d:
         ec:82:a4:00:12:8e:a9:24:ab:6f:51:10:8a:b3:36:69:c9:d0:
         fd:79:89:a6:5a:f0:d9:39:bb:38:a7:75:39:5c:5d:df:df:1d:
         f2:12:ae:27:ed:d3:f8:3e:f1:bc:df:a1:8a:8a:a4:0a:12:bc:
         41:0d:f4:c4:0b:3b:cf:40:45:c1:bc:19:d4:a2:ea:85:72:ba:
         6b:49:73:ce:77:57:29:90:c8:83:b3:67:9c:2f:2e:33:21:ad:
         a7:b6:9c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 19:30:48 2026 by rpki-client