Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/23a8d9f5-35a3-3aec-b4ea-004d3fb3e214.roa
File:                     23a8d9f5-35a3-3aec-b4ea-004d3fb3e214.roa (raw, json)
Hash identifier:          SLyyGOPQaw331mbK+Boh0jxLCLYr7crlufnCxP2j630=
Subject key identifier:   41:B9:6B:B5:F0:8E:40:D2:C3:BC:C1:ED:DD:57:56:BD:AC:FA:17:F5
Certificate issuer:       /CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
Certificate serial:       010D0C9F4328584F51D2B0A504292DF499A89340
Authority key identifier: 18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/23a8d9f5-35a3-3aec-b4ea-004d3fb3e214.roa
Signing time:             Mon 28 Sep 2026 01:00:12 +0000
ROA not before:           Mon 28 Sep 2026 01:00:12 +0000
ROA not after:            Sun 27 Dec 2026 02:00:12 +0000
asID:                     393262
IP address blocks:        150.252.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:51:d2:b0:a5:04:29:2d:f4:99:a8:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ece0404-80a8-46f2-92eb-8f0b558c7dbe
        Validity
            Not Before: Sep 28 01:00:12 2026 GMT
            Not After : Dec 27 02:00:12 2026 GMT
        Subject: CN=7e8c1e42-74bd-49e3-af60-8127d1dfae55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:96:a2:25:8c:a5:97:7d:bc:60:e8:0c:01:2f:
                    77:10:09:f7:fc:61:1c:62:24:75:37:ac:b6:6a:e3:
                    53:85:07:c3:24:b2:96:69:92:69:3a:6e:a7:c8:f8:
                    68:c9:eb:7e:b5:e2:bb:79:89:3c:7d:25:ed:41:57:
                    8f:f2:fc:95:fe:4c:d0:5c:dc:25:ad:c9:2d:df:8b:
                    0b:72:69:ed:ea:da:d8:c9:5c:7e:3e:ca:d8:f1:23:
                    5e:0f:b4:90:53:3f:86:ad:8b:31:3a:2a:91:3d:5e:
                    83:6a:2f:68:c5:39:de:d6:60:d4:fc:4e:a7:fb:13:
                    f7:b3:fd:52:93:6a:0d:85:84:b4:d0:61:57:b1:34:
                    67:be:fa:c8:40:0b:76:d6:85:71:16:7b:37:99:e4:
                    af:3d:eb:c4:26:17:2f:e2:b8:44:4f:58:99:08:9c:
                    a9:b5:97:c2:26:84:82:77:54:35:75:22:2a:37:78:
                    72:3f:6f:54:56:34:b6:69:1d:d8:7f:bf:da:a2:e8:
                    c3:bf:7d:56:2f:77:02:8f:cb:06:f9:0e:0a:72:90:
                    30:e5:a2:91:fd:b1:e4:3a:92:33:6b:9b:9c:d8:03:
                    2a:b1:5c:72:6c:95:66:18:fe:ac:64:4e:76:a2:99:
                    70:b1:ab:d5:03:9f:f0:b1:e4:be:55:5f:3b:d0:30:
                    b8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B9:6B:B5:F0:8E:40:D2:C3:BC:C1:ED:DD:57:56:BD:AC:FA:17:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/23a8d9f5-35a3-3aec-b4ea-004d3fb3e214.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.crl

            X509v3 Authority Key Identifier:
                keyid:18:D3:7F:B7:50:EE:43:01:46:26:1D:22:57:D1:78:5C:0E:91:5F:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7ece0404-80a8-46f2-92eb-8f0b558c7dbe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:3b:d8:48:e2:33:70:2e:63:86:60:cc:03:58:1f:60:44:cc:
         68:dc:34:1d:42:49:3f:22:b7:1c:93:0b:80:9b:b3:a3:8f:85:
         ca:60:bc:55:e4:17:07:12:c0:d4:85:23:8d:16:df:97:0b:9c:
         a8:b3:26:11:ca:c3:d4:91:ee:9e:48:fc:5f:20:0d:38:69:62:
         07:34:09:81:b7:6e:ef:de:0f:cf:fc:a5:03:ac:1c:71:ff:5d:
         cf:99:b4:06:3e:e8:f9:75:d8:2b:d5:7a:0b:0e:33:3b:8b:c7:
         32:25:06:66:70:3d:86:76:a0:90:0f:8c:33:0e:30:be:d5:1c:
         42:3d:51:54:65:d2:f0:13:e1:31:e1:e0:77:dd:ff:e2:fb:87:
         bd:8a:15:42:65:9b:36:c0:20:02:0f:64:69:68:2c:0c:3b:67:
         23:ee:b7:24:a2:6c:b2:9b:2f:cb:4e:bf:cb:59:cc:c1:87:2a:
         6a:f4:f2:7a:00:3c:b7:00:c6:a3:f4:f0:d6:58:94:22:e6:84:
         ab:70:9e:ab:f1:b8:84:b4:94:11:42:aa:66:ad:e2:81:ce:4b:
         70:ba:3c:1c:72:18:90:e7:4a:08:60:b1:dd:56:77:8b:d6:58:
         9e:ba:60:2d:fb:7b:d9:0d:06:18:fd:1d:9a:3b:ea:d2:38:82:
         06:1a:c7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:56:21 2026 by rpki-client