Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa
File:                     65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (raw, json)
Hash identifier:          8vexb5vCYHKPkOeOj4XgtSYvEcIPtrBc9YK+7+durQE=
Subject key identifier:   14:F6:1D:E0:62:7E:A7:5E:AA:70:7D:19:F1:E4:43:3F:33:B1:3B:A9
Certificate issuer:       /CN=cd1efaa6-01e7-4528-8278-46b312a6e020
Certificate serial:       010D0C9F4328584F31B7C22AFED3DD7249215B80
Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     13849
IP address blocks:        23.133.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:c2:2a:fe:d3:dd:72:49:21:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=405898fa-c31b-4dd1-add4-7b8772ebad54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d7:27:06:47:10:0d:7d:74:04:a9:86:54:94:
                    70:f4:92:e4:ce:53:aa:c7:91:92:81:51:8f:b8:e8:
                    39:50:52:f0:27:51:2f:7e:85:4b:24:18:fe:51:7d:
                    ed:b5:2c:cd:68:68:a8:2d:04:3e:30:72:c9:5d:b0:
                    24:c1:8a:8d:80:d7:70:97:96:2b:05:cf:6d:3f:cc:
                    62:07:52:7a:26:24:3b:ef:2e:2a:cc:e3:17:64:b3:
                    53:da:68:1a:82:64:04:ab:c2:a3:b3:4b:ae:20:58:
                    be:7b:4c:89:a1:05:99:80:16:88:c9:ba:cc:05:2c:
                    bf:4b:49:8c:19:18:f8:83:44:29:b8:db:2c:ff:4b:
                    ef:46:38:79:37:b7:81:98:3d:af:4d:fa:e5:11:e9:
                    72:d3:2c:43:d3:8b:21:c6:51:1a:c9:47:c7:82:0c:
                    29:4f:2a:d9:a5:ce:ce:97:f3:98:2d:fd:5d:b5:86:
                    30:47:bb:3e:fd:b4:be:cb:99:99:1c:a1:d1:39:bc:
                    ff:62:4c:fc:c1:db:00:71:a5:ac:cc:52:ba:02:fa:
                    9a:3a:07:e4:e8:4f:e4:29:2b:3a:41:89:3f:0b:3d:
                    49:1c:4a:21:dd:34:ea:10:89:87:b2:ac:c0:8e:f9:
                    ba:e8:bd:b3:b4:86:89:e0:43:c3:18:54:d9:fd:f0:
                    4d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F6:1D:E0:62:7E:A7:5E:AA:70:7D:19:F1:E4:43:3F:33:B1:3B:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl

            X509v3 Authority Key Identifier:
                keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:39:8c:53:09:82:2d:5a:a4:5f:22:d6:41:a9:bf:4f:93:a1:
         fc:78:89:97:a0:08:b8:00:ce:1a:bc:c9:f8:a7:70:45:ca:96:
         4f:1d:6f:3a:a0:15:77:9d:ee:79:0e:f3:a4:8e:5a:e0:fe:9c:
         b6:45:08:9a:28:5d:b0:a4:27:fd:be:94:d9:84:1e:66:e6:3e:
         6c:6d:09:ea:fe:d4:93:01:59:d0:46:8e:0d:e6:99:22:e4:4f:
         9a:96:4f:e4:fc:25:0f:28:b8:bf:d1:45:63:45:8d:1b:da:08:
         4f:ad:6c:d5:40:9d:82:ea:40:48:24:8d:f7:10:c1:f2:a2:cd:
         19:fd:c6:02:d4:b6:72:3b:2d:87:5f:b2:58:e3:2e:a1:a0:b5:
         ea:e5:37:3a:ce:32:86:43:bf:7a:28:5f:f7:e6:42:ae:62:fc:
         69:f6:ae:62:b2:70:e0:a6:b0:b0:f2:72:5e:61:d6:d1:53:63:
         f4:89:f2:5f:56:e2:1a:49:9b:c4:d6:87:69:e4:13:7e:74:60:
         f3:90:6e:1d:12:b4:02:01:97:6e:97:db:55:12:09:e4:2a:35:
         31:15:4d:08:4a:2f:5d:25:1f:99:de:f1:c2:5e:24:2c:78:36:
         67:db:a6:92:b0:0e:0f:5e:bb:fe:f2:50:a4:08:73:15:12:b9:
         10:d4:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:58:31 2026 by rpki-client