Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23a9d0b5-f92a-3b6a-a1d1-291e1ee2631f.roa
File:                     23a9d0b5-f92a-3b6a-a1d1-291e1ee2631f.roa (raw, json)
Hash identifier:          ctI5dScSG2RyEoBRzjRRpPLMELi76o8uRu/j0fM3eJ4=
Subject key identifier:   F9:BE:07:C3:AD:2F:0D:7D:80:2B:0E:0C:70:1A:4E:EC:71:B7:1B:0C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53A7DDF7A4A72158117ACE40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23a9d0b5-f92a-3b6a-a1d1-291e1ee2631f.roa
Signing time:             Mon 28 Sep 2026 16:45:46 +0000
ROA not before:           Mon 28 Sep 2026 16:45:46 +0000
ROA not after:            Sun 27 Dec 2026 17:45:46 +0000
asID:                     22773
IP address blocks:        184.188.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:a7:dd:f7:a4:a7:21:58:11:7a:ce:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:45:46 2026 GMT
            Not After : Dec 27 17:45:46 2026 GMT
        Subject: CN=b37d6042-c4a5-45ba-ab59-e1e47633962f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9a:07:53:87:7d:12:d8:23:4d:25:54:a2:1e:
                    d4:c5:0a:1e:69:af:a7:cc:73:4a:2c:db:c1:38:7f:
                    db:48:8f:0a:50:17:1a:9c:d4:f9:00:7b:f4:5d:77:
                    7a:39:94:3c:53:56:4a:e7:ba:a4:77:6a:5c:bf:d8:
                    c2:8a:a1:51:c8:a4:73:a9:2c:61:d9:f9:34:0c:85:
                    0a:e1:f0:9f:df:b9:80:c0:7e:1a:38:9f:c7:bd:ac:
                    f5:bf:77:0e:b7:43:69:dd:4f:63:da:89:57:1c:f0:
                    0b:4d:bf:26:c3:2c:ee:e0:18:7e:38:59:a2:7a:ac:
                    e9:5b:cc:35:ab:36:f2:dc:a6:d9:e9:b6:e0:2e:34:
                    c5:4a:32:0d:38:1e:ea:8e:90:05:3b:b8:8c:79:00:
                    d7:88:2e:b9:ae:eb:ef:93:df:a3:93:21:16:b2:a2:
                    d8:07:21:89:e9:78:3c:5d:c9:f1:f4:9f:a2:33:63:
                    89:ac:54:5e:fa:69:9b:93:57:a8:fa:cd:16:2f:3e:
                    fd:2e:68:90:7f:8c:34:ee:d6:10:3c:83:3d:81:71:
                    4f:d4:4e:e4:a2:46:b4:ef:cb:b4:0e:6c:54:4a:aa:
                    03:9d:e2:41:ee:fe:17:df:16:d7:be:56:96:80:bb:
                    c6:4a:95:e4:11:25:d9:3c:a3:8a:0f:96:bc:7a:b2:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BE:07:C3:AD:2F:0D:7D:80:2B:0E:0C:70:1A:4E:EC:71:B7:1B:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23a9d0b5-f92a-3b6a-a1d1-291e1ee2631f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.188.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:6e:e3:52:3d:8f:c2:06:65:14:55:95:a9:b9:83:8d:62:b0:
         70:ad:f1:b7:f8:96:16:f4:1b:94:6e:db:05:9d:35:2b:02:14:
         1f:59:b3:6d:b4:0b:a8:fb:fc:83:cd:6e:9d:e9:9e:35:67:b9:
         88:ef:c0:0b:b8:70:ed:ac:a4:ff:58:46:78:c3:7b:1f:46:0d:
         2b:8c:d4:8e:d4:86:a6:df:05:75:2d:77:61:f1:b2:96:40:22:
         92:12:2c:9d:a9:62:3f:79:15:45:9a:66:47:24:d7:67:99:c9:
         f0:47:c8:1f:bc:9d:7a:3d:74:4b:bf:4a:f2:ca:db:c2:27:6e:
         03:6b:b6:d0:e9:50:8f:1e:b3:65:64:68:ac:a4:39:7d:cb:29:
         88:61:df:d6:70:59:33:92:78:44:29:bd:35:ec:63:72:d9:e3:
         d3:f2:fd:f4:ab:16:bf:b5:fa:4d:db:10:bc:86:e1:ee:af:0b:
         79:ba:22:a7:87:70:c0:37:3a:d2:c9:07:d1:5e:97:38:a2:23:
         38:49:16:ce:bf:6e:6c:ea:62:eb:ae:af:3c:3b:70:f4:7c:a3:
         65:14:eb:a6:63:16:dd:0c:1d:11:25:c8:91:6c:24:a9:5e:78:
         55:ed:56:37:f6:73:9e:02:07:c8:4e:a0:80:80:ce:f9:4f:54:
         f0:f6:20:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 07:13:29 2026 by rpki-client