Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f03b1da3-55ea-4a6b-b9de-f1c5cfb20c23/e51bba83-302b-39c7-8954-3e89b37c357b.roa
File:                     e51bba83-302b-39c7-8954-3e89b37c357b.roa (raw, json)
Hash identifier:          qbfhO20T+2w/ExTcuiTedGiuWGk1nQy9tDWwOc0OBOY=
Subject key identifier:   40:98:84:FC:A4:CA:80:49:B4:CE:98:D9:36:FE:A6:35:E1:65:13:15
Certificate issuer:       /CN=f03b1da3-55ea-4a6b-b9de-f1c5cfb20c23
Certificate serial:       010D0C9F4328584EBC10A7020582DF83E956E080
Authority key identifier: 42:E7:53:0E:D1:25:C7:0D:D0:7E:A4:AD:B1:71:E5:DD:F5:0B:41:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f03b1da3-55ea-4a6b-b9de-f1c5cfb20c23.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f03b1da3-55ea-4a6b-b9de-f1c5cfb20c23/e51bba83-302b-39c7-8954-3e89b37c357b.roa
Signing time:             Wed 05 Aug 2026 09:34:02 +0000
ROA not before:           Wed 05 Aug 2026 09:34:02 +0000
ROA not after:            Tue 03 Nov 2026 10:34:02 +0000
asID:                     402829
IP address blocks:        23.162.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f03b1da3-55ea-4a6b-b9de-f1c5cfb20c23/f03b1da3-55ea-4a6b-b9de-f1c5cfb20c23.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f03b1da3-55ea-4a6b-b9de-f1c5cfb20c23/f03b1da3-55ea-4a6b-b9de-f1c5cfb20c23.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f03b1da3-55ea-4a6b-b9de-f1c5cfb20c23.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:bc:10:a7:02:05:82:df:83:e9:56:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03b1da3-55ea-4a6b-b9de-f1c5cfb20c23
        Validity
            Not Before: Aug  5 09:34:02 2026 GMT
            Not After : Nov  3 10:34:02 2026 GMT
        Subject: CN=433ab0f7-2cab-44fe-b62a-bf774d0de926
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:e5:20:11:a7:80:97:0f:48:f6:46:e4:97:0b:
                    1f:46:80:ab:16:c3:1a:06:63:f5:81:44:ac:44:f0:
                    09:6a:58:84:46:91:fb:56:b8:60:ba:00:d0:db:b0:
                    70:47:2f:ef:0d:23:89:a2:fc:f9:2b:b0:54:e0:47:
                    5e:d1:78:7c:a2:4f:f9:d3:f6:b9:05:6c:32:9e:c2:
                    47:b5:6a:d5:e3:29:21:a4:e8:ca:36:43:4c:6c:fb:
                    fd:c2:ad:30:80:45:28:cf:27:3e:0c:21:6b:b2:d0:
                    52:bf:38:3e:62:33:4e:a5:c7:8a:a8:f2:a1:e4:4e:
                    e9:c4:09:91:d3:12:6d:4e:96:77:83:37:e5:35:af:
                    bd:cc:f4:75:4d:f2:fc:30:a1:93:f3:58:f4:51:bd:
                    69:64:01:15:7a:32:46:6f:26:e9:86:04:bf:c5:87:
                    e2:ec:d8:33:e3:1d:66:d0:99:85:7c:51:f4:93:2c:
                    c0:18:47:93:a6:df:d6:f8:af:f8:72:ab:a7:3c:00:
                    1a:49:cc:47:54:5d:ae:c2:60:ee:d7:b7:5d:28:7e:
                    a4:01:d2:e5:3c:65:f7:9e:80:3e:ce:27:c1:26:36:
                    7d:8f:40:28:71:b5:b8:2c:d1:6f:ce:3b:a5:dd:45:
                    2e:1c:6e:18:27:99:e5:20:63:4f:dc:c7:24:94:a6:
                    53:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:98:84:FC:A4:CA:80:49:B4:CE:98:D9:36:FE:A6:35:E1:65:13:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f03b1da3-55ea-4a6b-b9de-f1c5cfb20c23/e51bba83-302b-39c7-8954-3e89b37c357b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f03b1da3-55ea-4a6b-b9de-f1c5cfb20c23/f03b1da3-55ea-4a6b-b9de-f1c5cfb20c23.crl

            X509v3 Authority Key Identifier:
                keyid:42:E7:53:0E:D1:25:C7:0D:D0:7E:A4:AD:B1:71:E5:DD:F5:0B:41:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/f03b1da3-55ea-4a6b-b9de-f1c5cfb20c23.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:72:5e:9e:0b:d6:89:a4:d7:de:c0:c5:ec:91:7b:dc:50:49:
         fe:2f:3e:d2:24:f2:e5:7a:a4:85:f0:a7:a9:fe:d0:4d:64:c3:
         ba:cb:f8:5a:61:d3:5e:e1:0a:ac:f0:7c:6d:7b:d1:ba:c3:98:
         df:f6:26:ad:bd:8a:0f:1b:71:de:ea:0b:f6:4a:38:a1:0e:ed:
         85:23:0b:2d:d8:c1:ad:be:f5:b1:7d:96:13:45:19:48:f8:63:
         8e:aa:c8:ce:11:e5:cf:2e:ca:ab:dc:70:03:cf:86:ba:ea:90:
         ca:8c:2e:61:1d:dc:70:af:06:1c:ad:ab:5f:5e:fe:33:f6:cc:
         07:b1:aa:38:eb:b8:78:8b:02:47:e3:03:50:eb:a5:44:e8:4b:
         76:f2:57:c1:17:b7:ec:64:35:4f:b6:19:17:bc:93:41:2b:06:
         1f:cd:7b:bc:ff:67:43:a5:98:ee:6b:a5:a3:3c:98:27:e0:1a:
         0a:7f:47:8d:55:c5:8f:51:1a:1f:6c:8f:81:19:cb:6c:59:77:
         39:70:a7:0e:2f:63:37:cd:6a:aa:f2:11:33:48:d1:8b:42:03:
         c1:ce:f2:90:94:35:cd:3a:e4:0c:25:db:73:59:47:65:55:74:
         18:48:e4:26:36:56:87:b7:23:e7:ee:81:86:e4:d1:18:6f:1b:
         34:b7:ad:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:26:40 2026 by rpki-client