Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/ac28e51d-b43d-3f9b-ba10-9ff87537f9d4.roa
File:                     ac28e51d-b43d-3f9b-ba10-9ff87537f9d4.roa (raw, json)
Hash identifier:          hJD6NEhPob0vRmEBQUTECQWux9plL9nHiznIKthfQx0=
Subject key identifier:   CE:9F:79:90:38:DB:7A:7F:4E:0B:C7:1D:FF:4E:9A:43:ED:03:7C:2E
Certificate issuer:       /CN=eb3e61fb-eee2-4438-a37d-23139bbc427a
Certificate serial:       010D0C9F4328584F49762654CB18B93A172424C8
Authority key identifier: 45:03:34:E5:3F:EE:A8:32:0D:29:26:EA:4C:60:57:01:92:7D:46:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/ac28e51d-b43d-3f9b-ba10-9ff87537f9d4.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     400992
IP address blocks:        23.177.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/eb3e61fb-eee2-4438-a37d-23139bbc427a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/eb3e61fb-eee2-4438-a37d-23139bbc427a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:76:26:54:cb:18:b9:3a:17:24:24:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb3e61fb-eee2-4438-a37d-23139bbc427a
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=03823857-ef1d-4600-a7c3-db5c5f964e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:34:12:e7:8b:dd:90:ee:1c:f4:6f:33:52:
                    1f:da:5b:b7:00:fe:8d:0e:20:48:76:ab:e6:b9:54:
                    f1:bc:e3:ba:8f:4d:c7:ee:fe:4d:d7:9d:60:11:fc:
                    5d:49:d8:f3:ca:5c:55:ab:15:dd:74:f2:98:eb:98:
                    fb:4b:37:92:55:19:fc:9f:02:68:ec:36:87:ae:1d:
                    e9:e9:83:9b:64:42:ac:9d:33:90:34:57:8d:6c:c8:
                    2e:ac:dc:dd:c8:d5:03:a7:41:78:c3:b9:01:a0:81:
                    b9:0d:d7:d6:d3:37:c8:46:0c:c7:d8:cd:1a:3d:6f:
                    9f:f1:38:69:d9:14:f2:b2:51:af:c6:b2:f8:f7:26:
                    95:45:30:ec:8e:ac:ab:ca:8e:6e:de:1a:d1:0b:15:
                    e2:de:23:08:36:3d:99:90:ce:7b:a8:66:36:b2:91:
                    ec:18:fe:76:ec:51:3f:30:90:bb:fc:df:51:5a:9f:
                    32:43:57:c4:05:ea:01:dd:3f:68:c1:40:ca:7e:f9:
                    e9:23:9b:b0:b8:7c:54:52:2c:37:be:4e:49:78:b5:
                    04:57:e8:3d:06:d9:72:6f:98:23:d7:f4:9b:07:a9:
                    17:1a:d9:4e:ee:76:4c:47:2d:85:2b:d7:ad:08:c1:
                    fe:c3:c6:aa:3f:52:7a:ad:f0:e9:54:cc:f7:12:40:
                    b7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:9F:79:90:38:DB:7A:7F:4E:0B:C7:1D:FF:4E:9A:43:ED:03:7C:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/ac28e51d-b43d-3f9b-ba10-9ff87537f9d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a/eb3e61fb-eee2-4438-a37d-23139bbc427a.crl

            X509v3 Authority Key Identifier:
                keyid:45:03:34:E5:3F:EE:A8:32:0D:29:26:EA:4C:60:57:01:92:7D:46:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/eb3e61fb-eee2-4438-a37d-23139bbc427a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.177.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:0b:84:79:2d:aa:fe:e9:e0:b3:e8:18:50:4c:28:6e:c0:64:
         15:ed:b5:1c:25:8a:17:92:c0:08:65:6e:d1:e9:49:b9:ea:80:
         30:af:09:b1:f6:cb:83:35:67:4b:d8:b8:ec:9c:be:f4:5f:8b:
         18:c6:59:40:99:7f:5c:f3:61:7b:80:ac:d6:88:b7:39:82:c9:
         ea:65:3a:bf:2c:90:40:20:60:41:a0:b8:86:1c:5c:d5:22:59:
         0d:72:4c:b5:f1:6f:89:bb:86:f7:b1:1f:bf:e3:f6:e3:95:ef:
         9c:f4:27:a4:88:97:05:24:0d:a0:94:0d:aa:8d:da:e9:81:ea:
         98:38:78:e3:7e:ca:88:c0:f7:52:92:c1:0a:a8:43:34:cb:6c:
         dd:b1:cc:54:51:44:e9:5e:b7:ec:7d:6d:4f:87:70:e3:83:5f:
         ee:74:ef:0a:0e:64:1f:25:ed:9e:4e:1b:97:35:74:8d:d6:10:
         df:8c:8a:a7:60:95:59:ab:be:25:83:38:a1:12:f0:96:59:76:
         f1:0b:61:80:d9:12:20:01:ee:6c:18:aa:1d:cb:fb:9e:4c:e0:
         3b:c1:36:97:3e:97:59:90:53:f1:25:55:bc:2e:25:ab:5e:13:
         5d:65:15:35:b3:a3:d4:03:b1:57:89:fb:9c:75:f0:94:ab:a3:
         34:58:24:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:49:42 2026 by rpki-client