Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e1f3d5df-d029-3107-9efb-52bb37800237.roa
File:                     e1f3d5df-d029-3107-9efb-52bb37800237.roa (raw, json)
Hash identifier:          qFhWHXTqMdo5r2wKL5VnHSZ6VC19yjE0QnEqsGzkLGE=
Subject key identifier:   9C:B1:FD:6D:E4:33:6D:6C:F9:BF:46:8B:76:9F:83:BE:C3:BB:08:A7
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584ED431F2EAE205043D39384880
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e1f3d5df-d029-3107-9efb-52bb37800237.roa
Signing time:             Fri 14 Aug 2026 01:00:13 +0000
ROA not before:           Fri 14 Aug 2026 01:00:13 +0000
ROA not after:            Thu 12 Nov 2026 02:00:13 +0000
asID:                     6461
IP address blocks:        8.10.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d4:31:f2:ea:e2:05:04:3d:39:38:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Aug 14 01:00:13 2026 GMT
            Not After : Nov 12 02:00:13 2026 GMT
        Subject: CN=941acc3e-e44e-4ab5-9901-ece1f276a452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c8:a7:2f:03:57:fc:f2:65:6b:fb:7b:1c:8e:
                    09:a0:9d:af:85:09:ed:93:f3:dd:ef:31:11:85:15:
                    6c:f2:de:6e:64:40:38:99:14:95:60:b8:90:f9:dc:
                    8a:b1:5d:1b:49:0b:11:10:f5:b7:a3:71:96:e5:8a:
                    33:28:1d:88:95:d9:77:67:26:70:b7:4b:9a:57:e7:
                    94:92:30:1e:a8:c6:ed:3d:b9:b7:a2:aa:d2:af:19:
                    79:42:8e:1c:0f:c3:1d:44:ff:9b:d1:c3:e4:ee:19:
                    60:d7:95:48:73:96:33:dd:97:a4:b8:7c:da:ba:50:
                    50:e3:01:a7:a8:67:21:ec:e4:a3:81:56:80:98:a4:
                    7e:82:c4:32:30:70:ff:76:c8:60:aa:ce:69:95:67:
                    22:92:26:68:56:06:b6:b8:f2:d1:6b:eb:9c:af:99:
                    a7:8d:fe:d9:39:ff:f8:07:8e:1e:83:b8:32:37:c3:
                    fc:5e:7c:7d:55:ed:39:5d:00:cd:b0:05:aa:3d:7b:
                    9f:df:68:09:fb:47:29:13:50:c3:27:fb:ed:78:4b:
                    24:d6:fa:a9:51:93:d7:c4:db:40:ed:39:69:c8:79:
                    c8:46:09:36:4c:56:b6:99:74:71:c9:c6:ee:af:2b:
                    ce:34:5e:f0:1d:fb:dd:c0:52:8c:ab:94:c6:21:c1:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B1:FD:6D:E4:33:6D:6C:F9:BF:46:8B:76:9F:83:BE:C3:BB:08:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/e1f3d5df-d029-3107-9efb-52bb37800237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.10.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:d3:31:d9:4c:d4:0f:15:44:f5:89:81:e7:5d:28:a3:f2:60:
         d5:90:0a:d4:0c:63:72:54:63:61:1c:97:10:7c:6b:0e:be:4a:
         d3:01:6b:6c:34:58:a1:9b:45:52:5d:1f:6f:ca:58:3e:0f:3d:
         7a:22:54:63:00:73:90:44:96:87:c8:6e:fe:41:f1:3f:2c:dc:
         bf:f3:2f:ec:9a:7e:23:34:2c:5b:dc:f6:a8:74:b1:c9:54:de:
         28:5e:6a:0c:ee:18:c7:4b:ad:52:2e:6a:d8:e6:f2:9d:8f:b3:
         a3:2e:45:0b:da:66:0e:2a:32:9c:4d:dc:e5:28:15:c4:68:75:
         c7:d5:52:42:c6:97:80:de:9e:80:eb:fe:b0:b8:04:6e:1a:70:
         fd:e1:82:61:83:2b:5f:29:30:8b:36:78:5b:34:f4:40:c6:48:
         df:9f:b6:1b:47:4b:80:14:21:a7:ff:ee:61:1c:d4:18:f8:be:
         86:82:7a:b5:2f:c3:14:60:91:4f:34:5b:31:37:f7:56:10:c6:
         7c:4d:04:0e:52:8a:63:14:3d:5a:b9:8e:b9:e0:9f:b5:65:b8:
         8e:b9:94:06:ba:03:ea:81:66:2e:c4:fc:36:99:4f:8c:04:b9:
         e8:2e:37:a6:bb:da:9a:25:de:aa:19:70:5d:08:4e:73:13:17:
         55:e2:f6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:25:34 2026 by rpki-client