Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c/24e8690f-eb96-34b1-b640-a837664c585a.roa
File:                     24e8690f-eb96-34b1-b640-a837664c585a.roa (raw, json)
Hash identifier:          5ohlyrYOx1q/rrnmlRvF66mTsuPhoh0352ySvmG5yNE=
Subject key identifier:   9C:AF:B1:42:A8:67:61:EB:7C:68:39:36:2B:2D:14:EA:D9:99:AD:21
Certificate issuer:       /CN=487e4be0-3476-4cce-96fa-81ab6243a74c
Certificate serial:       010D0C9F4328584F5CBD7D92D3B13F1E51156EFC
Authority key identifier: 5B:D2:FA:EE:04:43:84:3C:69:72:7E:81:99:56:6A:E3:AB:57:52:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c/24e8690f-eb96-34b1-b640-a837664c585a.roa
Signing time:             Thu 01 Oct 2026 22:51:37 +0000
ROA not before:           Thu 01 Oct 2026 22:51:37 +0000
ROA not after:            Wed 30 Dec 2026 23:51:37 +0000
asID:                     30041
IP address blocks:        23.163.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c/487e4be0-3476-4cce-96fa-81ab6243a74c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c/487e4be0-3476-4cce-96fa-81ab6243a74c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:bd:7d:92:d3:b1:3f:1e:51:15:6e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487e4be0-3476-4cce-96fa-81ab6243a74c
        Validity
            Not Before: Oct  1 22:51:37 2026 GMT
            Not After : Dec 30 23:51:37 2026 GMT
        Subject: CN=5f3f713a-601b-426d-a2a5-bafc637cd47d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2c:5a:30:25:1e:4c:f8:c5:95:b8:76:6a:2b:
                    58:51:c4:c9:93:d5:3e:6d:c1:40:d9:1c:11:af:04:
                    22:d1:f8:15:33:8d:5d:35:25:c4:17:e1:4d:98:8d:
                    6f:61:ce:e2:87:92:3a:46:09:81:f3:93:9b:79:38:
                    4b:09:6e:19:82:8e:b2:45:74:75:7d:16:73:d0:7a:
                    aa:63:74:94:3f:7b:27:03:b5:b9:f4:8b:0d:98:82:
                    2a:f0:e2:f5:9b:4c:01:a5:c0:0b:05:43:14:08:f6:
                    64:a6:b7:5c:33:af:c0:44:e9:29:c5:67:bd:5b:cc:
                    28:b6:d8:5c:16:af:38:4e:4c:35:80:bd:a4:e9:9f:
                    63:14:3a:9e:9d:ac:b2:79:47:b4:d2:eb:ac:a7:52:
                    e0:2f:42:4f:d0:a1:09:76:51:09:2d:11:51:f7:79:
                    69:fa:1b:ae:db:87:12:1c:9a:6a:5e:a6:ba:f3:fc:
                    28:85:16:1e:e6:b0:d7:31:e7:8d:2a:6d:90:11:66:
                    db:27:77:d0:c7:d5:4a:57:3a:de:68:43:99:3a:2b:
                    16:59:24:a7:de:03:69:e0:fc:12:11:b6:08:6e:dc:
                    2f:cc:63:41:a7:0f:83:07:51:43:c5:91:ae:2f:5d:
                    79:52:e0:4e:7f:1f:18:48:9f:ec:ec:fa:d8:39:2c:
                    99:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:AF:B1:42:A8:67:61:EB:7C:68:39:36:2B:2D:14:EA:D9:99:AD:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c/24e8690f-eb96-34b1-b640-a837664c585a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c/487e4be0-3476-4cce-96fa-81ab6243a74c.crl

            X509v3 Authority Key Identifier:
                keyid:5B:D2:FA:EE:04:43:84:3C:69:72:7E:81:99:56:6A:E3:AB:57:52:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/487e4be0-3476-4cce-96fa-81ab6243a74c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.163.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:88:53:aa:77:fb:46:fa:6e:c1:00:3f:0c:98:dc:c7:a2:10:
         29:78:6a:9d:1c:36:8e:08:a7:f0:60:0e:54:e9:a8:99:51:3b:
         83:01:1b:c5:46:16:81:fe:14:ff:aa:68:59:4a:74:c0:e0:b0:
         dd:70:24:9d:6e:39:b5:53:a2:bd:f2:13:83:d6:4c:1d:ae:3d:
         de:be:d8:bc:b4:d0:55:90:62:75:84:b5:80:72:47:7d:ed:50:
         d2:23:17:b0:9e:7b:90:47:63:23:48:5f:66:e0:76:08:bb:ff:
         f0:32:ad:76:39:a5:dc:0e:ed:41:44:e3:f2:5e:6d:fc:43:ed:
         b1:42:ab:a9:31:df:df:3c:4f:eb:5f:40:3e:2d:53:cf:ed:74:
         34:07:a1:9f:f3:61:41:4e:aa:d3:fb:3d:3c:bb:53:52:bc:f5:
         50:4f:51:a0:05:3d:57:51:61:e0:f2:e3:b3:b3:07:3e:00:90:
         bc:15:8c:4e:30:0d:35:78:ac:c8:3b:8d:93:fc:34:36:98:e1:
         7e:10:46:42:96:0b:43:0f:06:f6:20:ee:06:f6:56:0b:fb:9b:
         93:3c:d5:63:38:70:50:ad:08:37:7b:d4:de:6f:73:4d:98:5a:
         bd:67:7c:26:8b:e7:f2:07:5f:9c:b4:b9:c0:8a:72:a8:36:bb:
         e9:db:55:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:32:35 2026 by rpki-client