Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e882936-e9b9-454e-95ee-bc71b6cac2a4/8f17f4ad-1e3c-3a4d-94e6-37d08c40135e.roa
File:                     8f17f4ad-1e3c-3a4d-94e6-37d08c40135e.roa (raw, json)
Hash identifier:          4XBYAxjaCRUwI1thBTZ7e4TZPwLyRrqAG586FUnVPC4=
Subject key identifier:   B2:F8:8F:49:A1:C8:8A:8C:CF:43:0C:0D:A2:C1:B0:40:B3:B9:61:24
Certificate issuer:       /CN=3e882936-e9b9-454e-95ee-bc71b6cac2a4
Certificate serial:       010D0C9F4328584EDA27452A531EFB85DE02D508
Authority key identifier: 3C:6C:47:9C:D0:01:9C:26:01:BE:25:62:F9:39:2D:48:36:93:F5:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e882936-e9b9-454e-95ee-bc71b6cac2a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e882936-e9b9-454e-95ee-bc71b6cac2a4/8f17f4ad-1e3c-3a4d-94e6-37d08c40135e.roa
Signing time:             Sun 16 Aug 2026 04:13:51 +0000
ROA not before:           Sun 16 Aug 2026 04:13:51 +0000
ROA not after:            Sat 14 Nov 2026 05:13:51 +0000
asID:                     13875
IP address blocks:        23.144.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e882936-e9b9-454e-95ee-bc71b6cac2a4/3e882936-e9b9-454e-95ee-bc71b6cac2a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e882936-e9b9-454e-95ee-bc71b6cac2a4/3e882936-e9b9-454e-95ee-bc71b6cac2a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e882936-e9b9-454e-95ee-bc71b6cac2a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:da:27:45:2a:53:1e:fb:85:de:02:d5:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e882936-e9b9-454e-95ee-bc71b6cac2a4
        Validity
            Not Before: Aug 16 04:13:51 2026 GMT
            Not After : Nov 14 05:13:51 2026 GMT
        Subject: CN=8a7c6c5c-13c2-4214-a0e8-c10a44ea65fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:07:f2:0f:bc:a5:c0:d7:1d:87:49:78:5a:
                    59:af:96:ed:6b:4b:11:8a:68:92:b0:f5:94:65:3f:
                    db:65:4a:fe:87:6d:de:c2:98:c7:aa:22:2f:97:61:
                    1f:6e:74:f1:60:17:58:86:a1:ee:58:36:ff:96:45:
                    0f:e3:86:14:c4:8d:0e:2b:bd:0b:68:d6:a1:6e:10:
                    26:33:a8:33:e3:4f:55:4f:b2:62:c8:b8:c8:a4:0a:
                    fa:81:72:3f:ac:ce:73:33:d5:e0:f2:e9:d3:e7:b8:
                    da:a0:f8:ea:7e:94:76:6f:49:a2:76:b9:0d:bf:8b:
                    66:79:80:47:91:22:90:75:15:95:49:f8:a9:e3:aa:
                    c2:b3:f1:d3:1d:11:15:12:79:c1:39:7a:5e:7e:96:
                    7b:90:dc:af:39:18:34:ee:c4:15:7a:87:6d:48:97:
                    ea:8d:2d:6c:50:a4:b0:c8:ba:6d:34:00:f4:6f:f4:
                    9a:da:3b:98:1a:93:9f:3f:1f:b8:61:ae:b9:12:1f:
                    bd:f0:40:18:f2:3f:9b:4c:81:55:bf:ff:ba:05:85:
                    fb:98:3b:cb:bc:25:21:e5:54:35:b0:69:e9:be:3e:
                    61:d2:d6:32:a8:a6:fb:ea:aa:e1:03:f5:11:b1:db:
                    30:50:21:98:18:07:0b:83:c7:5b:29:79:af:5e:ff:
                    51:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F8:8F:49:A1:C8:8A:8C:CF:43:0C:0D:A2:C1:B0:40:B3:B9:61:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e882936-e9b9-454e-95ee-bc71b6cac2a4/8f17f4ad-1e3c-3a4d-94e6-37d08c40135e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e882936-e9b9-454e-95ee-bc71b6cac2a4/3e882936-e9b9-454e-95ee-bc71b6cac2a4.crl

            X509v3 Authority Key Identifier:
                keyid:3C:6C:47:9C:D0:01:9C:26:01:BE:25:62:F9:39:2D:48:36:93:F5:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3e882936-e9b9-454e-95ee-bc71b6cac2a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.144.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ef:43:55:fa:14:bc:40:ec:ea:ed:ae:c3:b0:ba:01:75:d1:
         f3:73:de:e1:82:b9:e9:dd:2f:bc:35:31:6d:8d:da:d1:32:ab:
         a5:4d:2b:ee:4d:2b:a4:f2:51:2b:73:14:f2:97:20:7f:10:94:
         2c:ce:c2:af:d1:38:43:bf:a4:8b:f7:bc:a6:f7:98:dc:8d:7c:
         8f:d9:70:48:eb:b2:65:ee:92:1e:a7:bb:74:49:74:5e:02:07:
         35:98:3a:0b:12:c5:27:9e:e4:a3:b7:02:e7:ad:53:e7:43:dd:
         cd:23:d9:68:7b:d3:c4:78:70:63:9c:9e:24:27:fd:25:f2:25:
         6f:84:75:98:94:f9:5a:fb:ef:8b:ac:48:3b:74:e0:0a:ac:76:
         bf:54:94:d7:94:c1:f2:d1:df:73:6c:f1:71:2c:c4:f3:e8:3b:
         72:68:82:1e:f0:7f:d2:c9:2d:bd:aa:43:fa:99:13:e7:fe:25:
         ce:0f:53:82:c8:31:1f:b2:3b:da:65:46:f0:e5:8e:d9:b3:a2:
         61:b1:23:7d:1e:66:d4:55:66:2a:85:fa:80:3f:2d:e3:a7:ca:
         64:f5:d6:f8:40:1f:c6:ea:b8:57:e4:23:f3:2b:7d:08:91:d4:
         9d:e1:c6:34:2e:d9:c4:ba:ac:29:9e:c0:3f:0d:15:c3:42:e4:
         4a:47:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:24:46 2026 by rpki-client