Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21e2809f-b591-459c-b789-b8d7bb9f22aa/11781539-0a6b-37fe-84f4-d2cceb2ec387.roa
File:                     11781539-0a6b-37fe-84f4-d2cceb2ec387.roa (raw, json)
Hash identifier:          XBeoOLM2/xdJ3P7HfNnTjgIntALOovQsT7dexGPXpvQ=
Subject key identifier:   C1:C9:AB:D1:53:A1:7E:9C:7A:2D:81:67:60:50:1C:92:61:32:8C:DE
Certificate issuer:       /CN=21e2809f-b591-459c-b789-b8d7bb9f22aa
Certificate serial:       010D0C9F4328584EDC4E2DED89C09DD8446E6B00
Authority key identifier: C0:6A:9B:59:E3:90:B0:16:9E:5C:31:F5:D7:B1:FE:D1:3A:58:FF:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21e2809f-b591-459c-b789-b8d7bb9f22aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21e2809f-b591-459c-b789-b8d7bb9f22aa/11781539-0a6b-37fe-84f4-d2cceb2ec387.roa
Signing time:             Sun 16 Aug 2026 22:43:52 +0000
ROA not before:           Sun 16 Aug 2026 22:43:52 +0000
ROA not after:            Sat 14 Nov 2026 23:43:52 +0000
asID:                     399562
IP address blocks:        23.179.16.0/24 maxlen: 24
                          23.179.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21e2809f-b591-459c-b789-b8d7bb9f22aa/21e2809f-b591-459c-b789-b8d7bb9f22aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21e2809f-b591-459c-b789-b8d7bb9f22aa/21e2809f-b591-459c-b789-b8d7bb9f22aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21e2809f-b591-459c-b789-b8d7bb9f22aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:dc:4e:2d:ed:89:c0:9d:d8:44:6e:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21e2809f-b591-459c-b789-b8d7bb9f22aa
        Validity
            Not Before: Aug 16 22:43:52 2026 GMT
            Not After : Nov 14 23:43:52 2026 GMT
        Subject: CN=1fbe120f-3d78-41c3-b4ff-2a721b6c6273
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:81:1b:fb:67:ce:d4:dc:2f:07:0e:10:35:dd:
                    a3:91:20:3c:95:43:95:75:2e:d1:9d:bf:7a:38:35:
                    2d:f7:4b:70:41:55:8a:84:c9:77:c7:47:7d:37:9f:
                    2d:20:83:66:d1:38:07:20:62:e5:a0:d3:09:79:ca:
                    ff:38:01:2e:55:1b:db:f4:dd:4b:6c:91:c5:3a:26:
                    0a:14:f9:44:76:a8:6c:dc:02:09:34:c7:36:a2:76:
                    0a:87:11:f6:1d:53:8d:48:fb:be:5f:20:09:76:1b:
                    00:90:d7:79:f5:2a:8a:4d:0c:d7:bc:25:1c:bc:c0:
                    86:27:2a:c4:2f:c2:b8:2b:5d:11:d6:a1:b0:38:d0:
                    b7:8c:80:b1:7c:38:af:6a:24:b7:67:00:f4:d0:c4:
                    e9:b1:3c:23:2f:17:6f:9e:aa:f7:47:6a:47:c4:6e:
                    f6:5c:a6:f9:8e:0e:52:5c:06:71:72:e8:35:54:0c:
                    af:10:0c:57:65:58:43:f4:09:14:cb:b0:9e:08:73:
                    9a:c0:d5:89:de:25:c8:a5:3c:b0:c7:97:39:08:ea:
                    27:52:38:d2:d0:71:aa:83:8d:b8:13:1e:8d:60:09:
                    91:34:3f:34:d6:21:c7:81:fc:e7:b3:ab:3d:e8:02:
                    92:11:fd:b5:c0:93:02:d0:26:36:c1:12:da:f1:69:
                    17:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C9:AB:D1:53:A1:7E:9C:7A:2D:81:67:60:50:1C:92:61:32:8C:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21e2809f-b591-459c-b789-b8d7bb9f22aa/11781539-0a6b-37fe-84f4-d2cceb2ec387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21e2809f-b591-459c-b789-b8d7bb9f22aa/21e2809f-b591-459c-b789-b8d7bb9f22aa.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6A:9B:59:E3:90:B0:16:9E:5C:31:F5:D7:B1:FE:D1:3A:58:FF:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/21e2809f-b591-459c-b789-b8d7bb9f22aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.179.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:78:60:db:46:c8:3a:c6:df:8c:f0:02:9c:a8:f6:cf:84:ef:
         65:2a:23:4c:2c:69:58:be:58:87:10:11:73:a5:9b:bc:33:1c:
         df:c3:2d:6b:b0:ff:92:bc:80:3d:2d:0c:13:f9:24:46:43:db:
         a8:a8:01:05:24:6a:73:64:79:91:69:bd:65:4f:6d:af:ed:3f:
         6f:27:ea:ba:61:e6:76:0b:6f:4f:a9:8b:5b:6e:48:e9:30:66:
         88:8a:d0:7e:86:21:32:ae:49:4a:c6:77:d3:3c:ef:b2:b8:ed:
         1c:2a:32:95:e5:b6:78:dc:85:21:42:8e:20:15:cd:36:13:2c:
         8d:22:24:cf:1f:92:73:c5:74:1a:dc:f9:c6:44:cf:2e:7c:d7:
         0a:0a:e3:74:d4:cb:bb:34:b5:71:2b:8e:6d:e1:a5:91:fd:5f:
         a6:34:c0:90:12:20:c0:06:25:e6:7b:9e:07:e0:74:b8:82:b5:
         2e:09:ee:e1:16:15:52:c1:01:a0:2c:d5:13:21:8d:12:5c:58:
         aa:57:d8:d3:e8:f8:8c:d5:ae:b8:be:86:ba:66:da:d9:ed:9c:
         86:5b:dd:54:1d:f1:22:57:c3:eb:46:cf:ad:d2:db:18:aa:3b:
         8b:d3:fa:aa:df:ae:4f:3c:0f:9c:de:b7:0d:29:68:1e:26:77:
         c0:68:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:52:33 2026 by rpki-client