Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/23276ad0-e6e6-366d-af39-9faae55da914.roa
File:                     23276ad0-e6e6-366d-af39-9faae55da914.roa (raw, json)
Hash identifier:          ihqPaS7k2i4ipzflXdhcTuYwhpIPCxd7YS/DPJ/Dtk0=
Subject key identifier:   21:CB:FF:21:93:F7:B2:5E:01:02:B2:9D:DD:61:48:8F:94:5D:93:BE
Certificate issuer:       /CN=73d32729-3efa-4a4c-a5ce-85790b40d100
Certificate serial:       010D0C9F4328584EC907171BCEB366777D69DEC0
Authority key identifier: DE:E4:57:18:9A:AC:6B:28:6E:26:A0:14:E0:8B:4C:F3:29:B9:8E:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/23276ad0-e6e6-366d-af39-9faae55da914.roa
Signing time:             Mon 10 Aug 2026 01:00:12 +0000
ROA not before:           Mon 10 Aug 2026 01:00:12 +0000
ROA not after:            Sun 08 Nov 2026 02:00:12 +0000
asID:                     21807
IP address blocks:        142.248.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c9:07:17:1b:ce:b3:66:77:7d:69:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d32729-3efa-4a4c-a5ce-85790b40d100
        Validity
            Not Before: Aug 10 01:00:12 2026 GMT
            Not After : Nov  8 02:00:12 2026 GMT
        Subject: CN=e2ad5ce9-d4b3-4192-9f71-b556409222a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:2a:67:47:c0:e0:0a:90:4e:5a:6e:82:e6:
                    75:b7:75:c8:fa:1e:b6:f0:f1:ab:aa:e2:c6:f3:5b:
                    b1:ae:de:35:66:89:e5:ff:28:eb:02:72:62:64:17:
                    8b:92:36:32:32:8d:73:4a:ea:8d:69:1d:16:06:11:
                    3b:08:33:29:1b:33:af:69:26:57:c9:24:13:24:b9:
                    40:7f:c2:c3:39:00:b5:62:2d:41:b1:ed:c6:e7:c6:
                    c3:9f:92:ea:3e:a3:a9:53:37:8c:a6:cd:55:dc:d3:
                    68:3e:d4:54:5f:6f:40:04:c5:8b:2a:8a:7e:a0:fc:
                    88:11:03:61:32:40:4a:78:7d:4a:02:65:42:52:9b:
                    1c:96:8b:ab:fb:f7:81:be:5b:db:5c:09:b2:cd:d4:
                    a9:89:6a:59:6a:b7:43:4a:74:a5:04:62:2c:f2:98:
                    50:36:76:8c:29:10:02:8c:c0:7b:c9:61:17:8d:05:
                    34:25:76:75:9f:4a:70:43:bd:12:da:d0:a3:f0:4c:
                    83:e1:21:80:e8:b6:79:28:64:c9:00:10:95:98:20:
                    52:31:18:6d:cf:de:c0:f5:32:e5:d1:b0:af:57:54:
                    4b:97:8a:fc:23:32:8e:b7:b3:07:d0:90:45:17:84:
                    52:3d:17:27:4b:6f:72:a8:98:4a:e2:84:36:08:11:
                    b1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CB:FF:21:93:F7:B2:5E:01:02:B2:9D:DD:61:48:8F:94:5D:93:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/23276ad0-e6e6-366d-af39-9faae55da914.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100/73d32729-3efa-4a4c-a5ce-85790b40d100.crl

            X509v3 Authority Key Identifier:
                keyid:DE:E4:57:18:9A:AC:6B:28:6E:26:A0:14:E0:8B:4C:F3:29:B9:8E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/73d32729-3efa-4a4c-a5ce-85790b40d100.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.248.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:8c:79:49:27:22:da:97:99:b6:a9:2d:f8:ae:ee:3f:a8:95:
         42:61:a3:b4:86:9b:e9:52:c7:3f:3a:79:be:49:2e:66:66:d1:
         a8:e7:3c:c3:32:ee:75:4d:d1:2c:a3:ba:87:34:b5:2e:fb:8a:
         73:8d:86:e2:6a:2a:63:61:b7:ce:4b:0e:07:01:ca:0f:c1:19:
         5b:e3:06:09:49:eb:01:e7:33:cd:23:d0:48:34:f5:25:73:43:
         de:ac:b0:2f:4d:15:b9:6a:b1:dd:7c:c1:37:dd:c7:98:71:ae:
         51:58:4e:9a:29:5e:96:38:58:23:9a:a0:0d:78:5d:d7:23:4d:
         fc:69:0b:b8:ac:94:6d:3c:eb:e3:e7:97:f3:11:49:ef:31:67:
         2a:51:44:2c:77:ed:5f:e7:8c:3f:b0:d8:c2:c9:a4:e7:2e:c4:
         d1:6a:24:30:da:69:eb:14:a6:01:a6:38:ab:48:33:d1:96:7a:
         e7:03:e2:3d:06:96:37:bc:c3:b0:ca:4a:fb:74:28:09:07:e0:
         8e:00:02:ef:77:b8:1e:56:83:52:59:f7:a1:3b:ed:69:c3:01:
         20:d8:f5:0f:5e:bb:e7:ca:c8:92:49:57:39:9e:b9:60:b6:70:
         f8:a2:fe:85:73:53:f7:f9:47:9e:16:ed:4d:c2:25:f7:0d:64:
         2e:0b:5c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:54:15 2026 by rpki-client