Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/7775276c-856c-33de-af30-3ede7fad10f3.roa
File:                     7775276c-856c-33de-af30-3ede7fad10f3.roa (raw, json)
Hash identifier:          SFvkII3x4eYNA0ZOrLHceQqdXWgAowGl5CJ1JU5z6fI=
Subject key identifier:   17:D3:A2:90:9C:EF:97:BF:F5:1B:84:F3:42:0F:A0:B4:DF:20:BB:20
Certificate issuer:       /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b
Certificate serial:       010D0C9F4328584F5E62B0A175BFD8FB5C273900
Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/7775276c-856c-33de-af30-3ede7fad10f3.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     0
IP address blocks:        23.172.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 29 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:b0:a1:75:bf:d8:fb:5c:27:39:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=5a755ceb-083c-45c0-93d8-c55389be2000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7d:9b:ae:b3:bc:67:98:31:ad:4a:12:2b:72:
                    81:2e:1b:dc:25:84:2d:ca:34:f0:ac:5c:66:d5:12:
                    b1:b6:de:38:c9:00:9f:68:22:03:be:af:69:ed:a4:
                    98:1d:08:95:73:64:fc:6b:cf:c9:ab:3f:31:9d:2e:
                    7d:13:f4:63:e4:91:32:21:ea:03:fb:af:31:80:95:
                    c3:c5:bc:63:4d:9f:8f:1c:76:5b:84:3c:ef:2a:21:
                    78:fb:97:b2:6e:47:b9:0e:18:dc:45:c9:b4:4a:8b:
                    84:d7:0f:c8:55:d3:4d:8a:b2:e6:8d:03:31:87:be:
                    ea:21:51:3e:2f:6f:20:63:6a:54:a7:31:22:19:e0:
                    dd:74:1f:f3:60:d1:5e:f0:f0:51:29:73:1e:e9:c0:
                    9a:25:d4:5a:33:a4:7b:bd:c3:16:c3:3c:65:30:c4:
                    91:ad:0a:85:01:75:1a:63:72:7b:08:90:87:9f:c9:
                    1e:c4:28:93:87:3a:2d:83:b2:d2:f5:12:8e:89:57:
                    fb:64:12:71:d9:1f:2d:47:0e:c4:aa:63:63:9a:5e:
                    9c:8e:0c:5d:67:3b:4d:b1:1c:c8:60:eb:8d:7f:56:
                    e0:4d:b6:0d:23:67:d3:9b:39:bc:5e:13:0f:57:bc:
                    fd:ae:b1:0f:cf:66:b6:7d:79:93:48:25:f5:9a:82:
                    7e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D3:A2:90:9C:EF:97:BF:F5:1B:84:F3:42:0F:A0:B4:DF:20:BB:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/7775276c-856c-33de-af30-3ede7fad10f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl

            X509v3 Authority Key Identifier:
                keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:c4:25:6b:76:06:67:30:64:7e:5e:46:5d:d6:85:46:4a:a7:
         3f:c4:16:97:cd:fd:df:e1:0d:b1:c3:ad:79:f1:10:27:23:66:
         f0:30:fb:64:42:bf:88:13:1e:3a:f4:5f:b0:b5:47:0b:2f:54:
         26:6f:a0:7a:46:2d:0a:c8:b5:a3:99:92:be:e6:ea:4e:a2:85:
         5c:77:30:7c:1a:cc:e9:98:88:23:f6:9b:25:16:95:e4:c7:53:
         97:e6:0e:1b:fa:d0:21:86:3d:17:99:e6:a9:8a:2f:44:c1:5b:
         32:dd:ac:f9:93:f1:5c:1a:00:5b:ee:c9:ab:c3:d5:8f:70:18:
         78:84:22:48:b3:e1:8f:02:0b:cd:7e:20:ed:50:fc:b1:cb:97:
         3a:10:11:da:18:7a:be:77:ca:09:43:db:ae:78:bb:64:70:ec:
         6d:98:e8:5c:ea:47:ef:e6:3d:7d:dd:3e:80:5f:48:e5:00:45:
         e0:64:7e:51:17:4a:4c:52:52:f7:b1:ef:c8:8f:78:de:91:52:
         76:8a:ed:5a:af:df:5b:59:2f:23:0f:ae:1a:c6:e7:22:81:12:
         5d:58:5c:a6:97:95:f4:dc:b0:05:c6:1d:3d:80:29:6b:13:4f:
         dd:38:e6:4a:30:90:90:46:5d:bd:56:0c:01:0d:55:2f:09:22:
         54:ad:6a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:37:59 2026 by rpki-client