Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa
File:                     340b93af-d882-36e8-acb4-1af84b9fcca3.roa (raw, json)
Hash identifier:          lxEf1vqsHwZ7PBLhW9iAF8gj4wN/VZM9v5q9d/klahg=
Subject key identifier:   AD:03:DB:F5:A5:C5:23:BC:64:F3:E4:DA:6B:04:D7:7F:3E:1D:01:3A
Certificate issuer:       /CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169
Certificate serial:       010D0C9F4328584EA787DA7B14AAB2F6148C8D80
Authority key identifier: D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     395886
IP address blocks:        23.185.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:da:7b:14:aa:b2:f6:14:8c:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=9c4b2dc0-a67f-4525-a7db-013a86bcff20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:56:f0:76:e2:9e:58:11:eb:69:7e:31:b3:50:
                    ea:1c:56:a3:a3:e9:20:d8:fd:d1:49:a7:e5:58:73:
                    57:ee:dc:0d:53:98:4f:64:b9:ac:65:36:aa:a3:92:
                    de:3d:7a:63:7c:04:30:8d:19:2f:b3:2c:32:78:4f:
                    03:00:38:0b:87:9f:88:1f:7d:8a:19:c1:c7:d7:75:
                    5d:0f:82:21:0b:23:f6:0f:30:f5:a1:51:52:fb:6c:
                    84:e6:86:7f:38:77:d9:40:d9:c7:2b:a1:09:a5:9f:
                    43:06:67:80:a6:1e:07:cb:f7:3e:32:39:88:8c:d8:
                    ad:9b:60:fa:fb:4f:da:25:d0:39:45:37:79:e1:32:
                    a4:50:7b:dc:44:a8:af:25:0f:a4:33:60:52:c4:47:
                    de:64:af:68:54:05:1d:61:25:8f:19:77:76:7f:66:
                    73:4c:31:01:7c:84:7b:ee:85:ab:37:6d:af:8f:90:
                    c0:5f:a0:d2:2b:ff:74:de:5a:35:95:3d:be:e4:c8:
                    df:97:dd:d1:ce:85:2d:73:2e:f3:ca:16:b9:2a:24:
                    da:bb:57:d7:25:59:d0:28:74:1d:a1:49:6e:e5:36:
                    ca:54:10:5b:be:96:2c:27:b3:f2:03:9d:cf:b1:e4:
                    fe:e8:aa:7c:8f:1c:05:cc:de:a4:26:c7:07:4c:c0:
                    63:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:03:DB:F5:A5:C5:23:BC:64:F3:E4:DA:6B:04:D7:7F:3E:1D:01:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/340b93af-d882-36e8-acb4-1af84b9fcca3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl

            X509v3 Authority Key Identifier:
                keyid:D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:ca:68:7f:ec:7e:ec:53:e7:85:12:00:52:6b:26:59:e4:fb:
         75:cc:27:7e:a4:bc:8a:d9:0c:fc:da:aa:9c:bf:50:9e:44:53:
         a4:43:2c:58:ae:68:14:98:c8:bf:63:af:d8:ed:99:de:df:a3:
         c0:01:b1:d9:61:12:a5:fc:cb:9b:7f:03:e2:e4:27:87:0e:8a:
         84:bd:39:fb:40:7c:b1:cd:6e:7a:26:63:22:01:f8:8e:8e:07:
         3e:28:e2:12:f1:af:39:e9:ff:c4:2e:c0:53:d1:66:76:a4:26:
         3a:ce:83:1d:2e:74:a3:78:aa:d6:fc:70:29:a0:69:85:c7:c3:
         da:b2:e3:91:8f:41:5d:84:40:19:15:f8:00:6c:b2:9f:ab:8b:
         67:b1:b8:8e:10:76:13:fb:02:9b:17:e6:fe:ec:32:cf:50:27:
         4b:00:5b:5d:ad:bf:84:64:1e:c0:c2:0a:9e:22:18:51:d0:81:
         97:41:35:f3:d7:4e:ba:7d:71:f2:8b:7c:72:bc:a6:c8:2e:b9:
         fc:44:37:06:38:3f:34:78:62:41:70:fb:f3:af:af:cb:fc:f0:
         eb:db:d5:d2:57:bf:87:8c:21:45:6c:67:08:e6:5b:64:c1:14:
         fe:a9:40:71:9c:d8:f1:9f:50:e6:2f:27:3a:00:06:e6:b8:96:
         6a:31:b5:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:26:44 2026 by rpki-client