Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/55368ea6-f96c-3702-892c-c6d41eae0899.roa
File:                     55368ea6-f96c-3702-892c-c6d41eae0899.roa (raw, json)
Hash identifier:          kXq5Z9czHh7WzfQWd/tVVRzFQtrF34/eF+noZsep+2I=
Subject key identifier:   24:80:62:65:CD:B9:7A:8C:8F:4F:AB:BF:9A:C8:B5:EC:A6:74:56:54
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584F4AF7DCAC8E099D2425BB0800
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/55368ea6-f96c-3702-892c-c6d41eae0899.roa
Signing time:             Fri 25 Sep 2026 14:04:41 +0000
ROA not before:           Fri 25 Sep 2026 14:04:41 +0000
ROA not after:            Thu 24 Dec 2026 15:04:41 +0000
asID:                     13955
IP address blocks:        8.19.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:4a:f7:dc:ac:8e:09:9d:24:25:bb:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Sep 25 14:04:41 2026 GMT
            Not After : Dec 24 15:04:41 2026 GMT
        Subject: CN=693035d1-aa47-417b-a2bd-ec798dc680b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:39:68:04:d7:32:20:d0:0a:3a:40:56:9e:02:
                    fd:4b:9f:c5:ae:73:e3:59:a8:0f:85:66:29:c3:ee:
                    f4:c7:3a:f2:c0:10:c0:39:b3:bf:e4:73:a7:cf:67:
                    1b:b0:b2:4b:d0:fc:2d:d3:78:7c:d9:1c:42:69:27:
                    f0:54:39:6a:1a:43:4d:58:7e:9b:95:b4:43:ab:30:
                    9c:04:ce:7b:76:38:d0:76:fc:2a:12:22:69:1b:9d:
                    5d:2f:c7:a6:39:d8:c6:97:a3:2a:b8:4b:3a:9c:00:
                    99:2b:28:2d:ac:e6:e5:63:ee:61:3b:eb:b5:14:ca:
                    78:92:79:da:7e:1a:5e:2a:65:5e:fb:c1:1e:7d:53:
                    77:26:91:7a:ef:d7:e0:7f:4a:d9:38:39:d7:75:5c:
                    ab:92:f1:02:56:4b:95:a3:4d:14:f5:f6:66:15:02:
                    5f:b5:d5:ee:45:5e:bc:2f:59:b8:34:ef:e3:e3:bc:
                    6d:2f:57:ea:97:7b:26:e8:22:82:bb:56:5e:4f:3d:
                    06:31:3f:66:36:f7:1d:3c:87:6c:97:f5:66:8a:2d:
                    8e:63:52:02:fd:6c:eb:52:53:fa:00:0b:0c:58:ef:
                    f9:d9:f6:1a:53:3c:40:3a:8b:1c:6c:d2:3f:c7:23:
                    e0:8d:be:64:d4:23:6b:e3:ed:45:05:7a:ec:91:d7:
                    4e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:80:62:65:CD:B9:7A:8C:8F:4F:AB:BF:9A:C8:B5:EC:A6:74:56:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/55368ea6-f96c-3702-892c-c6d41eae0899.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.19.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:43:06:f6:83:a4:47:bd:5b:47:88:32:c6:0f:04:8b:f9:1f:
         12:57:45:81:62:e1:51:a6:73:4e:24:b6:af:ab:7e:57:42:eb:
         07:3e:c7:67:e1:94:4a:55:a9:ac:80:9d:b8:c4:e3:72:7d:fe:
         89:c5:06:bc:95:c5:7d:3a:9b:95:35:6d:10:54:56:82:47:0f:
         f3:1f:27:62:18:8f:f1:38:6b:a3:2c:5f:4b:2c:4c:52:ed:c3:
         85:30:46:75:db:c4:4b:2e:ed:1e:0b:f4:0e:8b:25:35:ad:d9:
         10:8d:26:66:fd:3b:c3:ab:57:ec:b7:b1:ec:f5:c4:6e:6f:92:
         dd:62:57:52:dc:63:38:27:53:68:9e:9b:ec:cf:fe:7b:2e:a5:
         da:99:18:9e:dc:2e:30:bf:71:9c:c1:12:f9:fc:da:66:74:be:
         96:4e:b1:17:04:39:97:16:42:7b:e6:60:20:4e:1b:21:73:f9:
         36:eb:5d:9a:11:4b:1f:a7:61:d1:c4:2c:7c:e5:8d:65:0f:d8:
         44:4c:de:e9:e6:8c:17:fa:94:76:ea:37:18:43:f9:35:b6:c2:
         a5:bc:45:a0:01:10:4f:18:82:3f:fb:1b:19:6f:74:38:2b:e2:
         03:31:bb:5f:2c:11:0e:e0:7b:e5:4f:34:80:00:ef:0d:f3:16:
         5d:36:80:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:06:43 2026 by rpki-client