Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/d33c48d3-7a58-38a6-af85-04790484406e.roa
File:                     d33c48d3-7a58-38a6-af85-04790484406e.roa (raw, json)
Hash identifier:          HSb1W/Y4qkTXpfJmJilskVIgK78xtJd50L47lcmROC0=
Subject key identifier:   62:C5:5D:21:60:1A:E6:E7:99:A3:A6:B8:65:B7:34:76:D4:44:BC:CE
Certificate issuer:       /CN=ba46f857-c44f-430d-b73b-7a14eec4c813
Certificate serial:       010D0C9F4328584EC63C75B869448054F50D8D40
Authority key identifier: BB:D8:4B:75:75:65:A5:63:86:8B:FC:C0:E0:83:0D:6D:FC:00:71:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/d33c48d3-7a58-38a6-af85-04790484406e.roa
Signing time:             Sun 09 Aug 2026 01:00:12 +0000
ROA not before:           Sun 09 Aug 2026 01:00:12 +0000
ROA not after:            Sat 07 Nov 2026 02:00:12 +0000
asID:                     12198
IP address blocks:        23.162.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c6:3c:75:b8:69:44:80:54:f5:0d:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba46f857-c44f-430d-b73b-7a14eec4c813
        Validity
            Not Before: Aug  9 01:00:12 2026 GMT
            Not After : Nov  7 02:00:12 2026 GMT
        Subject: CN=8aa3681a-b4b0-48d2-874f-51679602022a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:bf:f0:c3:68:be:bd:da:a6:e4:a9:e3:e1:
                    df:85:c3:b3:d7:73:10:db:52:8b:45:ab:78:84:58:
                    71:de:92:b9:93:d2:11:ff:51:4e:ce:95:6a:50:78:
                    c9:5a:5a:2e:07:97:89:7a:c0:70:7f:36:21:2b:87:
                    fb:9a:d1:2f:03:04:96:6f:f9:9c:e7:5a:32:a3:27:
                    d0:29:87:9b:4d:28:66:a9:fb:43:4c:5c:fe:ed:50:
                    d2:1e:90:23:db:9e:f2:e6:73:03:01:7f:38:14:24:
                    45:09:06:b4:7f:da:7e:60:5c:dd:68:f1:33:b7:c3:
                    c8:72:96:d4:cf:bd:7d:b1:5a:0e:3e:93:14:5c:75:
                    2b:0c:7b:c7:26:eb:0c:c5:66:81:b2:de:31:7f:fb:
                    35:61:2e:8d:e1:19:83:18:2d:d3:34:e0:63:87:d9:
                    41:62:e5:7c:6d:04:e9:9e:c4:42:b3:3c:ac:73:d2:
                    34:68:4d:ee:74:f8:c4:60:a0:5c:74:f2:5c:da:80:
                    8f:44:82:f1:22:ef:72:a8:97:d0:c7:d6:be:50:59:
                    2c:93:bc:f6:75:6e:ab:20:f7:b7:18:b3:4a:53:8a:
                    25:5e:94:ff:72:03:c0:af:58:55:cf:85:57:d8:b1:
                    df:cf:40:ff:13:d4:8b:fb:86:3c:b3:22:51:69:de:
                    73:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C5:5D:21:60:1A:E6:E7:99:A3:A6:B8:65:B7:34:76:D4:44:BC:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/d33c48d3-7a58-38a6-af85-04790484406e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813/ba46f857-c44f-430d-b73b-7a14eec4c813.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D8:4B:75:75:65:A5:63:86:8B:FC:C0:E0:83:0D:6D:FC:00:71:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ba46f857-c44f-430d-b73b-7a14eec4c813.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:0d:86:ea:fd:1d:74:8a:1b:79:41:d0:e7:ea:79:73:80:fe:
         d6:3f:0d:95:3c:bb:d4:8c:65:28:5c:46:22:f8:c5:4d:b3:86:
         fd:e1:17:e7:b1:29:ad:88:f3:a1:25:03:f3:c1:92:91:ce:8c:
         30:6e:1f:b5:dc:50:58:3e:c6:f0:d3:3f:c0:b5:0b:32:84:94:
         db:18:8d:2b:6c:4b:eb:f7:07:aa:e1:f9:1a:39:6e:b8:c1:fe:
         9d:7c:ad:e8:c8:ef:60:47:46:69:74:b0:17:89:60:86:4e:e6:
         62:0d:a7:28:ef:97:8d:32:a0:15:f8:5b:20:7e:cb:b2:5a:28:
         a8:1b:d5:23:07:28:b9:3b:65:c1:05:77:0c:9e:76:d4:2e:47:
         01:51:c7:f3:c0:00:d0:9c:af:2d:0f:1d:06:f6:41:2f:3e:81:
         e0:47:31:85:41:77:0d:9b:ef:75:1e:43:13:15:0f:75:72:00:
         7a:6c:12:c0:1e:e8:85:4b:55:88:43:a7:44:38:84:2d:d3:d0:
         28:7b:2b:47:bd:9d:41:80:3b:d9:04:5c:26:4b:7c:43:8a:ac:
         e6:aa:00:ce:11:2f:1c:10:11:a3:5c:37:15:da:10:da:71:4b:
         e0:81:5c:cb:ad:e4:54:9b:2d:90:ea:20:9d:46:94:3a:07:af:
         1a:fc:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:36:39 2026 by rpki-client